HACKER Q&A
📣 _mtkq

Secret messages in public forums


You might be familiar with movies/series where hidden/secret messages in public online forums/channels are part of the plot (involving some form of steganography).

Have you ever encountered such a situation (e.g., Reddit, or even HN)?

N.B. The staggeringly elaborate Cicada 3301 puzzle [1][2] does require deciphering steganographic messages, but they aren't posted in public channels.

[1] https://www.youtube.com/watch?v=RatbYqc0-jE

[2] https://uncovering-cicada.fandom.com/wiki/Uncovering_Cicada_Wiki


  👤 rshnotsecure Accepted Answer ✓
Yes this happens all the time and how is modern espionage, for the time being, extensively communicates.

Typically this happens on websites that look like junk/ad websites to you and me. Also sometimes they will look like the ads you see on parked domains.

There will be hidden words, or perhaps you will need to know how to adjust the CSS in chrome developer tools. Often times it is a small URI fragment you need to append to the URL, or a specific place to click every time.

Again I want to emphasize how common this is, and the “dark web” is not used nearly as much in terms of overall volume by such groups.

Owlhousing.com was until recently and still probably is one such site. It looked like some junk casino ad website, but scroll down for a very lengthy period and you would find...sophisticated electronic Microscopes for sale out of Hong Kong. Now it is some car website.

The best way to find these websites is to use Spyse.com. Using the “prefix” search operator enter something like “000000000” or “aaaaaaaaa”. Hundreds if not thousands of sites show up. No real person would take out these domains. Start with them.


👤 Ghjklov
This is only vaguely related, but when I was younger I used to imagine a way for two people to communicate in secret openly without too much effort. Basically, person A will write messages to forum 1 under a decided alias and person B will respond to those messages on forum 2 under their decided alias. Two different forums, completely unrelated to each other, but only the two people will know where to look for the corresponding answer. To anyone else, it may look like total nonsense but if they hide it within posts that are vaguely on-topic, it could fly by with no one noticing at all.

Edit: Improved wording


👤 jnichols35
I saw this a few years ago on Reddit and wish I had saved the thread because it was pretty interesting.

I was reading a thread between two users that seemed totally normal until a user posted a screenshot of their comments. It showed a second conversation between them that was happening in secret. If memory serves the person who posted the screenshot said it was an extension (possibly RES) where you view certain tags and allows you to see the extra comments based on the tags.

After seeing that I couldn't help but wonder how many secret conversations were happening out in the open on Reddit.


👤 rococode
There was a mysterious sub on Reddit that had random encrypted messages being posted. I believe the original sub is private now but the sub that discussed it is still up, /r/Solving_A858.

https://old.reddit.com/r/Solving_A858/


👤 punchclockhero
desudesutalk[1] on imageboards. Lainchan has a special board for ddt and I've seen some sporadic messages on 4chan.

[1] https://github.com/desudesutalk/desudesutalk


👤 beckingz
Instagram as command and control infrastructure for malware.

👤 slater
7fa3b767c460b54a2be4d49030b349c7

👤 quickthrower2
In some sense, SSL is this :-)

👤 masonic
Fnord.

👤 dnh44
orfhergbqevaxlbhebinygvar