<body><script type="text/javascript"> function setAttributeOnload(object, attribute, val) { if(window.addEventListener) { window.addEventListener('load', function(){ object[attribute] = val; }, false); } else { window.attachEvent('onload', function(){ object[attribute] = val; }); } } </script> <div id="navbar-iframe-container"></div> <script type="text/javascript" src="https://apis.google.com/js/plusone.js"></script> <script type="text/javascript"> gapi.load("gapi.iframes:gapi.iframes.style.bubble", function() { if (gapi.iframes && gapi.iframes.getContext) { gapi.iframes.getContext().openChild({ url: 'https://www.blogger.com/navbar.g?targetBlogID\x3d27395339\x26blogName\x3dThe+Lost+Experience+Clues\x26publishMode\x3dPUBLISH_MODE_BLOGSPOT\x26navbarType\x3dBLUE\x26layoutType\x3dCLASSIC\x26searchRoot\x3dhttp://thelostexperienceclues.blogspot.com/search\x26blogLocale\x3den_US\x26v\x3d2\x26homepageUrl\x3dhttp://thelostexperienceclues.blogspot.com/\x26vt\x3d-3012363312920638028', where: document.getElementById("navbar-iframe-container"), id: "navbar-iframe" }); } }); </script>

Clue #22 - Persephone (2) She Speaks in Code

Just a white page with numbers. Some of our contributers decoded the numbers to say:

"Log in at THF.org May 1 This is safe for now"

NOTICE: We're pretty sure that www.thf.org is NOT in-game. Most people are saying that Persephone was just abbreviating (THF.org clearly refers to thehansofoundation.org). Many have contacted THF/Dreyfus, they are getting a little annoyed.

Who is Persephone? Persephone is a hacker with a motive. What's her motive? THIS IS THE GAME!


Blogger smoknjo said...

the code #'s listed on this site state roughly the following, Log in to thf.org on may 1st, it is safe now ... this site will direct you to the dreyfus foundation ... which is a legitimate company that is getting annoyed w/ all the phone calls they are getting ... I believe that what THF is referencing is "The Hanso Foundation" website ... what is really means is still unclear

5/05/2006 06:05:00 PM  
Blogger Joosh said...

Copied from oxygengiver2000 on thelostexperience.com

Well here are the numbers.

106 98 111 32 117 98 115 32 114 115 110 102 32 102 118 32 102 118 101 71 32 49 32 108 110 90 32 116 117 98 46 83 69 71 32 103 110 32 111 118 32 116 98 73

Now you can run these numbers through a ROT13 translator (http://en.wikipedia.org/wiki/ROT13) to get this.

wob hof efas si sirT 1 yaM gho.FRT ta bi goV

Reversing that you get: Vog ib at TRF.ohg May 1 Tris is safe foh bow

Swap the b with n and the V with L and the h with r and you get:

Log in at THF.org May 1 This is safe for now

Theory: "This is safe for now," remember how the Hanso Foundation letter said that the original website had been breached. Well this website is probally a secret replacement for the Hanso website, only accessable to those who could of cracked the code.

www.thf.org is NOT in-game. THF clearly refers to thehansofoundation.org. Contacted THF, they are getting a little annoyed.

And so the Experience continues.....

5/05/2006 06:06:00 PM  
Blogger davidm said...

This comment has been removed by a blog administrator.

5/05/2006 06:13:00 PM  
Blogger Travis said...

You're skipping a step in your description, decimal -> ASCII gets you:

jbo ubs rsnf fv fveG 1 lnZ tub.SEG gn ov tbI

Which is what is being ROT13'd

5/05/2006 06:18:00 PM  
Blogger davidm said...

Maybe the "log in" reference is not web access. A portscan of thehansofoundation.org reveals that ftp and ssh are both open..

5/05/2006 06:22:00 PM  
Blogger lost and found said...

ok, so take the statement

Log in at THF.org May 1 This is safe for now

what if that isnt fully decrypted?

this = safe
t = s
h = a
i = f
s = e

that would make the web address

haf.org (somone run a whois but it looks legit to me)

so what if all the letters are interchangable?

that would make

THF = hai.org

now THIS looks like a lead... somone run a whois, im useless and dont know how

5/05/2006 06:29:00 PM  
Blogger FeaR-ME said...

so, if there are ssh and ftp ports open we should try to look for users and pwrs... Is it bad to use a scan for this? If isn't someone should try =P

5/05/2006 06:39:00 PM  
Blogger FeaR-ME said...


Ok... The Lost Experience is reporting a solution to the press release puzzle, but they've got it wrong and I figured out the correct solution (heh,heh).

If you go to www.thehansofoundation.org you will notice a press release on the first page referencing recent hacking. Clicking on the link there takes you to a .pdf document. Highlighting the .pdf document shows you some hidden text. Copying it gives you a link to this page: http://persephone.thehansofoundation.org

There are a group of numbers there:

106 98 111 32 117 98 115 32 114 115 110 102 32 102 118 32 102 118 101 71 32 49 32 108 110 90 32 116 117 98 46 83 69 71 32 103 110 32 111 118 32 116 98 73

Decoding these by ASCII code gives you the following (I've used [] to indicate what is coded as a block, or 32, in ASCII; also the last letter in the code, part of the "tbI" is a capital "i" not a lower-case "L"):


Decoding this by ROT-13 gives you:
wob hof efas is sirT 6 yaM ghoSFRT ta ib goV

reversing it gives you:
Vog ib at TRFSohg May 6 Tris is safe foh bow

subsitituting L for V, B for N and H for R gives you:
Log in at THFSorg May 6 This is safe for now

The lost experience is reporting a link to the site thf.org and a date of May 1. I think the messed up, as thf.org is a real site for something else.

Going to THFS.org gives you a suspicious error page with a hansofoundation-esque graphic on it. My suspicion is that something new will pop up there tomorrow. We also may want to make note of the letters they are using to substitue (L/V, B/N, and H/R)... could lead to something else later.


5/05/2006 06:42:00 PM  
Blogger Ryan said...

Wow, good catch - plus the 6th makes sense since that's when the Australia episode is airing. Guess we just gotta wait and see!

But I agree, the switching of the letters doesn't really follow the rest of the code, which is why I think it'll be important later

5/05/2006 07:03:00 PM  
Blogger jcarubia said...

the who is for thfs.org

Domain ID:D112339834-LROR
Domain Name:THFS.ORG
Created On:20-Jan-2006 00:46:59 UTC
Last Updated On:21-Mar-2006 05:05:00 UTC
Expiration Date:20-Jan-2007 00:46:59 UTC
Sponsoring Registrar:Schlund+Partner AG (R73-LROR)
Registrant ID:SPAG-34210150
Registrant Name:Lorraine Logan
Registrant Organization:The Health Food Store
Registrant Street1:807 Grand BLVD
Registrant Street2:
Registrant Street3:
Registrant City:Vancouver
Registrant State/Province:WA
Registrant Postal Code:98661
Registrant Country:US
Registrant Phone:+1.3606959867
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:hlthfoodstore@peoplepc.com
Admin ID:SPAG-34210150
Admin Name:Lorraine Logan
Admin Organization:The Health Food Store
Admin Street1:807 Grand BLVD
Admin Street2:
Admin Street3:
Admin City:Vancouver
Admin State/Province:WA
Admin Postal Code:98661
Admin Country:US
Admin Phone:+1.3606959867
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:hlthfoodstore@peoplepc.com
Tech ID:SPAG-32126886
Tech Name:Hostmaster ONEANDONE
Tech Organization:1&1 Internet Inc.
Tech Street1:701 Lee Rd.
Tech Street2:Suite 300
Tech Street3:
Tech City:Chesterbrook
Tech State/Province:PA
Tech Postal Code:19087
Tech Country:US
Tech Phone:+1.8774612631
Tech Phone Ext.:
Tech FAX:+1.6105601501
Tech FAX Ext.:
Tech Email:hostmaster@1and1.com
Name Server:NS29.1AND1.COM
Name Server:NS30.1AND1.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:

5/05/2006 07:15:00 PM  
Blogger HEARTandSYNAPSE said...

hmm, looks legit
wow this is taking over my life.

5/05/2006 07:21:00 PM  
Blogger David said...

That "Hanso Foundation-esque" error page is a normal error page often produced by a lot of other sites online (I just can't think of any off hand). Needless to say, this might be a deadend, but let's check it out tomorrow.

5/05/2006 07:23:00 PM  
Blogger alcor805 said...

We need to take a step back. Perhaps our translation of the original numbers is incorrect. She said 'The answer is in the numbers'. Lets use the original numbers from the show. And divide the numbers in sequential order.

5/05/2006 07:28:00 PM  
Blogger alcor805 said...

ok...that doesn't work either

5/05/2006 07:31:00 PM  
Blogger necropigeon said...

Yeah that seems like a really complex way to get to a clue that makes close to zero sense.

5/05/2006 07:34:00 PM  
Blogger alcor805 said...

I wonder if they're cross promoting the davinci code movie....

5/05/2006 07:36:00 PM  
Blogger HEARTandSYNAPSE said...

that would seriously suck, if they were.

like, we worked out all the clues til we finally got to the end, and it was an exclusice da vinci code trailer.

5/05/2006 07:38:00 PM  
Blogger FeaR-ME said...

You all know that the hansofoundation has been updated and there's a link to a document. THAT document is dated to May 6! not May 5! Why is that??? Isn't may 6 the new date shown at the right decription??? Any ideas??

5/05/2006 07:59:00 PM  
Blogger Adman said...

How did you rot13 a "1" into a "6"?

Maybe we all need to try to login tomorrow...

5/05/2006 08:09:00 PM  
Blogger FeaR-ME said...

I didn't! Scroll up for my last comment!

5/05/2006 08:11:00 PM  
Blogger AlohaPrincess said...

She said 'The answer is in the number', not numbers. Although she could be refering to the group of digits as one number.

5/05/2006 08:11:00 PM  
Blogger necropigeon said...

This comment has been removed by a blog administrator.

5/05/2006 08:12:00 PM  
Blogger k.barrick said...

oceanicairlines.com has now SLIGHTLY changed.

10 red dots flashing... but now it's got a "progress bar" underneath that's scrolling. Nothing more than that but hey... the glacier moved an inch.

5/05/2006 08:23:00 PM  
Blogger Ryan said...

OOooh, view the source of oceanicairlines.com - CREEPY!

"!-- I AM READY --"
"!-- are you? --"

5/05/2006 08:35:00 PM  
Blogger FeaR-ME said...

I've found stg. but don't know the usage of it: if you go to the main page of hansofoundation.org the press F11 soh it shows fullscreen, then there's a tiny frame on the botton left that if you click all the bubbles on the background starts to move, coding error? irrelevant?

5/05/2006 08:35:00 PM  
Blogger Scott and Steve said...

The following is in the source code on oceanicairlines.com:

!-- I AM READY --
!-- are you? --

5/05/2006 08:35:00 PM  
Blogger FeaR-ME said...

yeah cait, and if you put the mouse over the loading bar shows a msg: the source. So they wanted us to see this msg at the source...

5/05/2006 08:38:00 PM  
Blogger advance512 said...


is probably shorthand for TheHansoFoundation.org

Unless the S is there for a reason (I did not check the ASCII, reversal, ROT13 and substitution cipher operations you guys did), in which case it could be something like






5/05/2006 08:38:00 PM  
Blogger Ryan said...

okay, we're ready, come on then! :P

5/05/2006 08:39:00 PM  
Blogger Jenny said...

Haha this whole scenario reminds me of "A Christmas Story"...we're going to be doing this stuff over the whole summer, and then Sept 1st--

"Be sure to drink your ovaltine!"

5/05/2006 08:42:00 PM  
Blogger AlohaPrincess said...

On http://www.oceanicairlines.com/ I only see 8 dots, not 10.

5/05/2006 08:51:00 PM  
Blogger AlohaPrincess said...

Ok I don't know if this is new or old - on http://www.oceanic-airlines.com/ underneath the cancellation notice it says

"If anyone should find this message, please get word I'm alive and stranded on an island somewhere in the South Pacific. Please send help soon. Things are bad. And"


"I survived a horrific plane crash and am stranded on an island somewhere Northeast of Australia and Southwest of Hawaii. In the event that I am never found, please forward word of my fate to my parents."

Is this new or old news? :P thanks

5/05/2006 08:55:00 PM  
Blogger jajasoon said...

Alohaprincess - those comments on oceanic-air are old. I remember seeing them last year when playing with that site.

5/05/2006 09:18:00 PM  
Blogger AlohaPrincess said...

ok thanks for letting me know! I didn't even know that site existed until a week ago so stuff like that's new to me lol.

5/05/2006 09:22:00 PM  
Blogger Gishtler said...

Though old. i do have a question about that message jason. Who is Sally? (the name used that sent the message) Maybe i'm forgeting something simple about one of the characters names.

5/05/2006 09:32:00 PM  
Blogger jajasoon said...

Sally is not (yet) a character on the show. A lot of the official Lost websites give characters not in the show. See http://lostpedia.com/wiki/Oceanic-air.com for more hidden stuff on this site.

5/05/2006 09:39:00 PM  
Blogger Gishtler said...

real quick question. this may seem random but what is rousseau's daughter's name?

5/05/2006 09:58:00 PM  
Blogger Deannacat said...


5/05/2006 10:07:00 PM  
Blogger Patchoulimoon said...

aloha princess....
when persephone said the answer in in the number... could that be the 1877-hansorg number?

5/05/2006 10:11:00 PM  
Blogger phnord said...

The person who posted information about THFSorg and May 6 is wrong. First of all, whatever program they used to translate the numbers to ASCII doesn't know how to handle non-alpha-numeric characters, and translates the ASCII code "49" to the letter F - when in fact 49 is actually the number for a "." This makes their string of "
jbo[]ubs[]rsnf[]fv[]fveG[]1[]lnZ[]tuvFSEG[]gn[]ov[]tbI " ACTUALLY turn into

Now, because we can see words ending in uppercase letters, we mirror this string and get "Ibt vo ng GES.vut Znl 1 Gevf vf fnsr sbu obj"

ROT-13 cypher is an ALPHABET cypher that replaces a character with the character 13 places away from it. Hence, a becomes m, b becomes n, and simmilarly, m becomes a and n becomes b. The reason 13 is used is because this is half the characters in the alphabet(26), meaning characters will rotate backwards and forwards to the same letters.

Anyway, upon applying ROT-13 to this, we get the following string: "Vog ib at TRF.ihg May 1 Tris is safe foh bow"

We seem to be on the right track, as we are getting quite a few complete words (at, May, is, and safe). From here, if we just to some simple, intuitive letter substitution, we find that swapping V's with L's, B's with N's, and R's with H's, we come up with the phrase: "Log in at THF.org May 1 This is safe for now"

As you can see, it is THF.org, NOT THFSorg. Also, the number 1 NEVER becomes the number 6. There is no reason to add 5 to the number 1, and even if you were to try and adding 13 to the number (which in itself is a questionable idea since the concept of a rot-13 cypher strictly applies to the base-26 system of the alphabet), you would come up with May 14, not May 6.

5/05/2006 10:31:00 PM  
Blogger icallwindow said...

"The truth is in the numbers.."

On the UK message line, the first female voice says the following:

"The Hanso foundation is located at 544 Persand Klingbai (?) DK 1604..." --at which point it breaks into Persephone.

When you call the American number and press 1, however, there is no Persephone recording, and the woman just continues with the number she was saying when she was interrupted on the UK line. Has anyone looked into the significance of that number? I may just be looking too far into it and it's actually just an international postal code or something, but I'm still curious.

5/05/2006 10:32:00 PM  
Blogger Gishtler said...

This comment has been removed by a blog administrator.

5/05/2006 10:33:00 PM  
Blogger phnord said...

There's another error in his ASCII translation I didn't notice previously: the letter "v" in tuvFSEG is actually the letter "b"

This makes the forward string "Ibt vo ng GES.but Znl 1 Gevf vf fnsr sbu obj" and the ROT-13 version "Vog ib at TRF.ohg May 1 Tris is safe foh bow"

Upon the substitutions I mentioned in my previous post, we get the phrase I mentioned: "Log in at THF.org May 1 This is safe for now."

5/05/2006 10:35:00 PM  
Blogger Gishtler said...

ok well i want to ask yall about a theory of mine. and for it let me tell you a little about the story of persephone. She is the daughter of Demeter (Zues's wife) who was so beautiful that one day Hades opened up the earth and brought her down to the underworld to be his Wife. When the Demeter found out about this she wandered the earth in search of her. she then isolated herself from the world in anger... after eating a pomagranate that Hades gave her right before she left the underworld with Hermes (who was sent by zues to retrieve Persephone) she was bound to the underworld and was made stay there 1/3 of the year. everytime she came out of the underworld the season would change and rain would come -any of this sounding familiar?!?!-
read more on the story at http://www.pantheon.org/articles/p/persephone.html

My theory is that Persephone is Rousseau's daughter, Alex. Alex was taken from Reosseau when she first came to the island (like Persephone was taken from her mother), she lived/ lives in a place some would concider "Hell" (like Persephone to the underworld) and also the Random raining on the island could be explained as Alex comming out of that place, even if for only a short period of time (like Persephone leaving the underworld which causes the season to change)

does anyone think im getting at something? any other thoughts on the matter?

5/05/2006 10:35:00 PM  
Blogger Gishtler said...

and alex was the only one to want to/ or even think about helping Claire in the episode "Maternity Leave" when claire was in the hospitalish looking place, that was only another hatch for Dharma, Alex was the one that told her she needed to leave as soon as she could because they were evil people. her wanting to help claire and go against Dharma corilates with her trying to hack the HansoFoundation site

5/05/2006 10:41:00 PM  
Blogger icallwindow said...

This was recently posted at thelostexperience.com:

"Well here are the numbers.

106 98 111 32 117 98 115 32 114 115 110 102 32 102 118 32 102 118 101 71 32 49 32 108 110 90 32 116 117 98 46 83 69 71 32 103 110 32 111 118 32 116 98 73

UPDATE: Previously we were running this through ROT 13. It turns out ROT 18 is the proper decryption because it gives a future date.

Now you can run these numbers through a ROT18 translator to get this.

wob hof efas si sirT 6 yam gho.FRT ta bi goV

Reversing that you get: Vog ib at TRF.ohg May 6 Tris is safe foh bow

Swap the b with n and the V with L and the h with r and you get:

Log in at THF.org May 6 This is safe for now

THEORY: Try logging into Newsletter on the sixth of May, there might just be a message waiting for you!

www.thf.org is NOT in-game. THF clearly refers to thehansofoundation.org. Contacted THF, they are getting a little annoyed.

And so the Experience continues....."

5/05/2006 10:47:00 PM  
Blogger Joosh said...

Do people read this before they post? We have double postings that are word for word, and a lot of the same info repeated.

I think we should add to this if we have something to say about the clue, and email if we have theories. Otherwise it'll end up like the ABC forums

5/05/2006 10:53:00 PM  
Blogger Molly said...

I'm no longer able to view the site minnesotametallurgy.com, although earlier I was there and saw the pictures, guestbook, etc. Now it just brings up an error message.

Also, the hansogroup.com site that earlier was automatically forwarding to the metallurgy site now brings up a (different) error message.

No clue what this means, if anything, lol!

5/05/2006 11:00:00 PM  
Blogger girlonthewire said...

maybe this was dumb but i tried entering all those numbers in to mcintyre's voice mail. so no one else has to.

5/05/2006 11:02:00 PM  
Blogger girlonthewire said...

has anyone had any luck with the VIK Institute (under mentalhealth appeal) where it says "inquire today!"

it asks for input. but i always get timed out.

5/05/2006 11:06:00 PM  
Blogger CHRISTINASRACK said...

So we are going with the may 6th lead? I tried logging in, but it still says, "no new messages"

5/05/2006 11:09:00 PM  
Blogger Gishtler said...

i keep getting timed out too...

5/05/2006 11:15:00 PM  
Blogger phnord said...

The ROT-18 thing is complete BS. ROT-18 would mean rotating the ALPHABET character by 18 places - which comes up with the gibberish of "Atl ng fy YWK.nml Rfd 1 Ywnx nx xfkj ktm gtb." It doesn't change the number 1 to 6, doesn't make it THFSorg, and makes the entire message complete gibberish.

5/05/2006 11:15:00 PM  
Blogger CHRISTINASRACK said...

o! Damn, this is torture!!!! I am clueless as to what to do next.....

5/05/2006 11:18:00 PM  
Blogger phnord said...

I have reverse-engineered the Shockwave scripts on thehansofoundation.org as of 5PM EST, and have some bad news.

As of now, the only place on the entire site that checks the user input is newsletter page, and we've already seen all that page has to offer. Neither the Login at the bottom of the page, the Exec Bio's username and password fields, or the textbox on the Mental Outreach page are EVER checked for what you've typed into them. This means that there is no right password or username to use at the moment; they have not enabled those sections to work and nomatter what you enter it will give the loading image and then timeout.

As for the newsletter section, we've seen everything that's programmed in there so far - there's nothing besides the original responses you get from persephone, and the "No Messages" screen on subsequent visits. You cannot input anything different into the text-box to get different results.

Therefore, the conclusion is we've seen everything that the main page of http://www.thehansofoundation.org has to offer until further updates are made to the code. I'll try and check back once every day or two and see if any changes have been made to the code.

5/05/2006 11:21:00 PM  
Blogger CHRISTINASRACK said...

This may be pointless....but while i was looking under the active projects....i noticed that something at the bottom login user bar was different...

when i would type in jibberish (hello, etc) and enter, it would just disappear and reset...
when i wrote in persphone, johnson, etc....a timeclock next to it would appear, then disappear, and it would say "sorry, unknown user".....just thought that was kinda weird.

5/05/2006 11:23:00 PM  
Blogger CHRISTINASRACK said...

O, haha, phnord! We must have entered our posts at the exact time! Thanks for reading my mind

5/05/2006 11:24:00 PM  
Blogger AlextheSuperfly said...

You can't rot13 or rot18 numbers. It only works for alphabet. (rot means Rotate - you cannot rotate numbers as they just keep going on forever.)

I wondered whether a clue lay in the fact that the memo was forward-dated 1 day, and so starting from the May 1st date, I tried accessing thehansofoundation.org with my clock set to both May 2nd and April 30th (1 day forward and one day back), but so far no luck on either score. Will keep trying though!

5/05/2006 11:27:00 PM  
Blogger phnord said...

I did find something interesting in reverse engineering the code - the name Rachel is used to refer to the Red text in the letter (the subverting authority message). Therefore, there is good reason to believe that either Persephone is Rachel, or that Rachel will be another hacker/character in the game. So keep an eye out for her name!

5/05/2006 11:57:00 PM  
Blogger lizzie said...

did anyone notice that on THF.org site that the MFI link does not work?

5/06/2006 12:05:00 AM  
Blogger ninsega said...

Isn't ROT13 just a foolish crypt code invented on a newsgroup? Doesn't sound like there's exactly scientific law involved here. So then perhaps you can do it to numbers, since there are only ten actually.




5/06/2006 12:40:00 AM  
Blogger phnord said...

Hmmm...applying the concept of dividing a set in half and then using that number to rotate upon digits is something I hadn't thought of - now I understand how May 6th was arrived at...

That now is a possibility in my mind, that things will be updated today (Saturday, May 6th)...however, that remains to be seen

If ANYONE notices even a slight update, let me know and I'll reverse engineer the script and find out the extent of what has been changed.

5/06/2006 12:52:00 AM  
Blogger Tina said...

this has nothing to do with anything, but i was exploring the page source for thehansofoundation.org and this is what shows. the first sentence is odd and it bothers me

You are seeing this message, as you don't seem to have the correct or the latest version of the Flash plugin installed. Please download the latest flash plugin here. If you are sure you reached this page in error click hereto go directly to the site.Thank you and Namaste,The Hanso Foundation

5/06/2006 01:22:00 AM  
Blogger Joe D said...

Hey guys, I don't know if this means anything. But, when I called the Hanso number and couldn't get through I got a message that said All circuits are busy or something and then a number like ...3602. I wondered why the heck that number was there. I wanted to check for an interation, but the number stayed the same. The message is repeated twice, and then the line hangs up on you. Anyone else get this message? Did I remember the number correctly? ...or am I just way off :)

5/06/2006 02:01:00 AM  
Blogger Gishtler said...

for me it said "SW7" but i dont think that has any significance.

5/06/2006 02:14:00 AM  
Blogger Joosh said...

I think that number is the catalog number for the recording. Like, "This is message 3602" and each time you call, you'll hear that message.

Argh, this "experience" is turning into an obesession!

5/06/2006 03:40:00 AM  
Blogger Team Annoy said...

This comment has been removed by a blog administrator.

5/06/2006 05:12:00 AM  
Blogger Diceplaya said...

Has anyone questioned if Pesephone's choice of url icon means anything? Twelve red circles surrounding one white one. As we've seen from thehansofoundation.org website, if we assume Perephone is helping us, she seems to do so with the color red (Red cell to click on to get to the documents, red high-lighting on the signature, red writing about subversion...).

5/06/2006 05:40:00 AM  
Blogger badboris said...

I really agree with Gishtler on the greek mythology: another point is the cerberus defense system - cerberus guarded hades, where persephone was kept.

5/06/2006 07:13:00 AM  
Blogger advance512 said...

Cerberus, Persephone etc - these are just Greek mythology symbols used in Lost without too much meaning behind them. No symbolism - and if there is, it is probably superficial (no "rain starts when she gets out of the hatch", by the way - did any of you notice the rain behind Libby in the last scene of Two for the Road?).

ROT13 is actual Caesar cipher. http://en.wikipedia.org/wiki/Caesar_cipher
Yes, May 6 is an option, but I don't think that they'd encode numbers - way too big a probability for user misconceptions.

Phnord, about the Flash scripts - did any of the inputs that supposedly "time out" actually contact the server, or do they just print out "time out" regardless? If any of these inputs require a web-server confirmation of command or some other server-side action to perform - we won't find anything in the Flash script.

5/06/2006 07:43:00 AM  
Blogger christy said...

This comment has been removed by a blog administrator.

5/06/2006 08:13:00 AM  
Blogger zohpy said...

maybe this sounds a little wierd, but do you suppose it may be us that they are referring to as hackers?

5/06/2006 08:32:00 AM  
Blogger AlohaPrincess said...

I don't think this is new. Sounds like what she said the very first time I logged on. Every time since that, including today 5/6, it says no new messages.

5/06/2006 08:35:00 AM  
Blogger christy said...

yeah - just figured that out. i deleted my previous comment so as not to confuse anyone further. sorry!

5/06/2006 08:38:00 AM  
Blogger Steeeb said...

There wrong lol, its May 1 or May 14, it was solved like within minutes of finding it..

People are looking way too hard in to this.

5/06/2006 08:58:00 AM  
Blogger AlohaPrincess said...

Well I don’t know if this will mean anything, but I was getting pretty confused by the crazy number/letter translations everyone was doing. So I typed in all the numbers while holding down ALT and reversed it. I got this:
Ibt vo ng GES.but Znl Gevf vf fnsr sbu obj
I went by what most people had figured out – log in at THF.org May 1 This is safe for now. I was able to figure out a ‘code’ but as it turns out it’s the 13 letter thing. Anywho for people who like things in simple terms ;) this is what you get:
g=t u=r j=w r=e
e=h f=s t=g v=i i=l
s=f b=o o=n n=a z=m
(I’m not sure about the 1 though.) So if you translate
Ibt vo ng GES.but Znl Gevf vf fnsr sbu obj
You get:
Log in at THF.org Ma1 This is safe for now.
I know no one really knows if it’s 1 or 6 or something else, but I just thought I’d post this if anyone wants to see it in English!

5/06/2006 09:06:00 AM  
Blogger davidm said...

FYI on ROT13 - It changes single characters into single characters, just for letters - "Numbers, symbols, and other characters are left unchanged." 49 is the ASCII code for "1", and I don't believe ROT13 would change it. Even if it did, it would change the numeric character into ">", not "14".

Hope that made sense.

5/06/2006 09:24:00 AM  
Blogger kate said...

This comment has been removed by a blog administrator.

5/06/2006 09:40:00 AM  
Blogger Caleb said...

Has anyone been able to read the red handwritten note that appears to be written on the back of the GWC letters? It looks like it's bleeding through.

Maybe it's just the "subverting athority "note...

5/06/2006 10:09:00 AM  
Blogger Caleb said...

Sorry, my comment was off topic. I've emailed the admin.

5/06/2006 10:24:00 AM  
Blogger phnord said...

advance512: they never contact a server of any kind. All of the scripting is in the shockwave; there's no server-side-scripting going on.

5/06/2006 12:42:00 PM  
Blogger xavier said...

This comment has been removed by a blog administrator.

5/06/2006 01:32:00 PM  
Blogger Joe D said...

i'm not seeing a pdf :-\

5/06/2006 01:41:00 PM  
Blogger davidm said...

It appears that any subdomain redirects to the main site by default - try thisisfake.thehansofoundation.org .. "persephone" is an exception, and no doubt there'll be more exceptions in the future. I don't see anything special about "medusa" at this time though.

5/06/2006 01:47:00 PM  
Blogger xavier said...

This comment has been removed by a blog administrator.

5/06/2006 01:49:00 PM  
Blogger Melissa said...

Maybe there'll be another clue in the commercials tomorrow in england. i can't see the clue being in the episode itself, because america and the uk are at different points in the story. Maybe we'll be given a different number

5/06/2006 01:58:00 PM  
Blogger phnord said...

I've noticed how all subdomains except perspehone redirect to the main site - I have a feeling that we'll find more as we go along. What does "medusa" have to do with anything, though?

5/06/2006 02:04:00 PM  
Blogger davidm said...

Echo, echo.. (or would that be Eko, Eko..? )

5/06/2006 02:14:00 PM  
Blogger baohx said...

Ack. I remember those numbers from bigspaceship.com/archive/hanso when viewing source a few days ago but the page is gone now. The numbers had an extra chunk (I remember another 10-15 numbers) attached to them after a | symbol. If anyone can find a cached version of the page, it'd be good to take a look.

5/06/2006 08:11:00 PM  
Blogger momeees said...

There are new numbers at http://persephone.thehansofoundation.org:

72 65 83 32 87 73 78 32 72 79 83 84 32 80 67 32 73 78 32 78 73 76 32 85 82 71 69 46 32 56 44 32 110 111 116 32 49 32 97 110 100 32 54 46

5/07/2006 06:45:00 AM  
Blogger Morbius said...

Straight binary to ascii gives:

HAS WIN HOST PC IN NIL URGE. 8, not 1 and 6.

I believe the 8 refers to the date, and it's telling us that our efforts (previous decodes showing 1 and 6 for a login date) are somehow incorrect.

The rest might be a word jumble or make sense o someone else.

5/07/2006 08:32:00 AM  
Blogger davidm said...

WIN HOST PC fits well with the fact that thehansofoundation.org is HOSTed by a WINdows PC. I did find that a mysql port is open, which may allow entrance into an unsecured database.

5/07/2006 09:53:00 AM  
Blogger davidm said...

Ok, the mysql thing seems to be a dead end for now. The database doesn't allow remote access.

5/07/2006 10:20:00 AM  
Blogger lostgrrl said...

This comment has been removed by a blog administrator.

5/07/2006 10:57:00 AM  
Blogger mortenfriis said...

The website http://www.oceanicairlines.com/ now only has "8:15" in it's source code. Maybe we're likely to see some new info May 8th at 8:15?

5/07/2006 01:30:00 PM  
Blogger lostgrrl said...

could someone let me know how to translate these numbers to ASCII?

5/07/2006 03:30:00 PM  
Blogger Morbius said...

This tool will assist you with the translation:


Input the numbers in the decimal field.

5/07/2006 06:52:00 PM  
Blogger Nek Regnis said...

"Has anyone questioned if Pesephone's choice of url icon means anything? Twelve red circles surrounding one white one."

I also think this bears some scrutiny. Reminds me of the sign for the Sun.


BTW, Joop is a Dutch nickname for Johannes = John.

5/08/2006 01:19:00 AM  
Blogger lostgrrl said...

Thanks Morbius!

5/08/2006 01:54:00 AM  
Blogger lostluvr29 said...

I'm sure this doesnt mean anything..but it was interesting. Joop is test subject #626, which using rot13, you get SOS.

5/09/2006 04:37:00 PM  
Blogger Grue said...

HAS WIN HOST PC IN NIL URGE. 8, not 1 and 6.

A little late, but this actually unscrambles to:

WHO IS RUNNING THIS PLACE. 8, not 1 and 6.

In hindsight, it makes sense.

5/16/2006 11:06:00 PM  
Blogger mbz1p! said...

Grue, If this is true, shouldn't the"." be a "?"...?

5/17/2006 01:45:00 PM  
Blogger Yoda said...

If you go to the Oceanic Website and select all the text and Paste into Excel, you see a picture of claire's boarding pass.

5/17/2006 09:49:00 PM  
Blogger sexy said...



A片,色情,成人,做愛,情色文學,A片下載,色情遊戲,色情影片,色情聊天室,情色電影,免費視訊,免費視訊聊天,免費視訊聊天室,一葉情貼圖片區,情色,情色視訊,免費成人影片,視訊交友,視訊聊天,視訊聊天室,言情小說,愛情小說,AIO,AV片,A漫,av dvd,聊天室,自拍,情色論壇,視訊美女,AV成人網,色情A片,SEX





12/05/2008 12:40:00 AM  

Post a Comment

<< Home