Ok, so I've just done a bit of digging on the Presidential Transition Act of 1963 (+the Enhancement Act of 2019), and the General Services Administration, which led me to this: https://presidentialtransition.org/wp-content/uploads/sites/6/2020/05/GSA-MOU-and-Trump-Transition.pdf
The Eligible Candidate, as a condition of receiving services and office space. shall disclose to the Administrator the date of contribution, source , amount, and expenditure of all monetary contributions, Including currency of the United States and of any foreign nation, checks, money orders, or any other negotiable instruments payable on demand , received for use In the preparation of the Eligible Candidate for the assumption of official duties as President. Disclosures made under this paragraph shall be In the form of a report to the Administrator by February 19, 2017. The report shall be made available to the public by the Administrator upon receipt
GSA will supply software and equipment, and the equipment will be returned by February 19, 2017. This equipment will be Inventoried and all data on these devices will be deleted.
So February 19th is shaking up to be an important day on multiple fronts... We have Sidney/Lin/PA SCOTUS cases, but also it appears that it's a deadline for Bidan's transition team...
So, then I go to try to double-check and reference Biden's Memorandum of Understanding: https://presidentialtransition.org/wp-content/uploads/sites/6/2020/09/2020_MOU_between_GSA_and_Eligible_Candidate_Biden.pdf
Motherfucker ain't even searchable... If you do ctrl+f "F" (as in February) it highlights all the W's...
So then I try "G" (as in GSA) and it highlights all the X's...
Now I'm starting to notice a pattern... ROT-17 ... I repeat ROT-SEVENTEEN
(caesar cipher, look it up on ddg if you aren't familiar)
If I'm correct in this guess, then when I ctrl+f "H" it should return all the Y's... lemme check real quick, aaaaaaand sure enough, BANG BISCUIT!!!
Now, I'm gonna spare you the details and just give you the raw data of the rest of my findings. Below will be 4 columns: input (what you type into ctrl+f), output (what gets highlighted), occurrences (# of times it appears in the document), notes (a '✔' indicates that I verified that each occurrence is the stated letter; I only looked at those with fewer than 100 results, and there are exceptions in this doc, it's not a perfect 1-for-1 substitution)...
a => r 1229
b s 1045
c t 1710
d u 420
e v 181
f w 155
g x 44 ✔
h y 247
i z 25 ✔
j § 2 ✔
k " 1 ✔
l {?} 4 unknown, perhaps {redacted}
m n/a 0
n n/a 0
o n/a 0
p n/a 0
q n/a 0
r n/a 0
s n/a 0
t n/a 0
u n/a 0
v n/a 0
w n/a 0
x n/a 0
y n/a 0
z n/a 0
0 a 1293
1 b 278
2 c 644
3 d 779
4 e 2484
5 f 537
6 g 262
7 h 637
8 i 1635
9 j 1 ✔
! l 44 n=21, 'i';n=22, 'i' ... possibly others, hard to spot
@ q 46 ✔
# n 66 ✔
$ o 113
% p 147
^ n/a
& q 6 ✔
* u 36 ✔ n=27, 'a'
( s 183
) t 204
- y 8 ✔
_ n/a
= n 1394
+ v 23 ✔
[ n/a
] n/a
\ n/a
{ n/a
} n/a
| n/a
` n/a
~ n/a
; l 759
' r 65 ✔
: k 33 ✔
" m 39 ✔
, w 11 n=2, ' '; n=4, 'c'
. [,e 2 n=1, '['; n=2, 'e'
/ ] 1 ✔
< m 388
> o 1236
? p 479
TLDR- Biden's MOU is encrypted with a modified ROT-17 caesar cipher
I archived the pdf here:
Feel free to copy and post on 8k too...
EDIT to add: Do any of you guys happen to remember the post from someone who was on the Flynn forensics team analyzing the Antrim machines? He was crowdsourcing the decryption of some encrypted files in their machines and a couple users here (or maybe it was on thedonald/patriots.win) was a big help in cracking it... I tried to find those posts so I could tag the helpful users, but no luck searching both here and patriots.win. If you know what I'm talking about and can find the post, please comment below or tag the OP. Cheers!
(tried to edit my submission but it screwed up the formatting so I'll just leave it here, pls upvote parent comment for visibility if this gets buried)
That post was from Nekroziz, but I don't believe he's into the Q stuff much and he hasn't ever posted here.
But the guy that helped him posted here once 2 days ago and is 8thGenPatriot if you wanted to send him a message or something.
The original thread has been deleted or lost. I was able to pull a cached version from google though.
YES!!! You nailed it. Thanks, bud.
Does user summoning work here like it does on reddit or do I need to dm?
u/8thGenPatriot
Wow, people remember me?
I really don't deserve that. All I did was run a few strings of text through some cipher programs. I don't even know if Nekroziz was able to make use of my data. It could have all been one giant coincidence, but I do find it highly improbable that I was able to generate the name of the county that the data came from without prior knowledge.
Thank you for your kind words.
About my name, that's the reason why I felt compelled to do something, however minor it may be. I recently learned that my 5 greats grandfather, 7 generations back, was a part of the Trenton campaign during the Revolution. He was a lieutenant under General Ewing. Several other ancestors were militiamen, but none were as close to such momentous events as the crossing of the Delaware.
To sit back and watch this country fall would be spitting on the graves of my ancestors who risked life and limb to give me the life that I've enjoyed.
No problem.
I knew the exact post you were referring to cuz I've had DMs with Nekroziz and follow him pretty closely, especially now with the Maricopa County bs going on.
Yeah I believe tagging him should do the trick, but I haven't actually ever used it myself on any of the .win communites.
We have the best autists.
Archived just in case! https://archive.is/SXnCL Thanks for all the work you're putting into this ????⚖️??️???️?
? Well, shit.
If I had scrolled down a bit more I would have seen that u/ElectionPedictor already archived it~
( ◐ ̼ ̫ ◑ )
https://archive.is/dlVzL
https://archive.is/l8qxi
You can tag him and see if he is interested https://patriots.win/u/nekroziz but he's been consumed with the AZ audit situation and how it went south yesterday. His posts are very worth reading right now too.
Do you know the answer to this? I remember being at TDW and people saying to archive everything, and then showing the steps to do it for the wayback machine. At the time, I had been under the impression that there were bots out there archiving EVERYTHING, whether or not an individual person took steps to do it. You just mentioned gurgle archive - which I didn't even know existed - so now I wonder if they do have bots archiving everything on the net. Do you know? Thanks.
I did check the WayBackMachine, but it hadn't been saved or automatically crawled. Same with Bing. Bing either hadn't crawled that post or it did again after it was removed and it fell out of the search index.
There's all sorts of bots (like the WayBackMachine, Google, Bing, etc) out there crawling websites, but not everything gets picked up.
There's ways to speed up the search engine bots to crawl specific URLs, but that's usually done by the site owners. As a user, it would make more sense using the WayBackMachine to manually crawl and save an URL (assuming the owner doesn't block that bot).
Site owners can also tell Google, Bing, etc to not save cached versions of their entire website too. Many of them just have no idea on how to do this or how to block bots. You would think people who like to edit their set of "facts" would be aware of this, but these people are stupid.
Your name inspired me to listen to Joe's Corn Pop story. Interesting he has his earlobes here. https://www.youtube.com/watch?v=r4NmtSrqtvI
Yes, agree wholeheartedly on your last statement. And thanks very much for the info.
Nope, just scanned the comments to see if I recognized the OP's user in there but didn't see it unless he was one of the deleted comments...
The one thread I remember where they were actually discussing the results didn't have more than 30-40 comments.
I wouldn't be surprised if the OP deleted the threads later tbh, but thanks for helping with the search.
Not that strange. The deleted a bunch of stuff after the 6th. I think it was to protect people who may have been at the Capitol from persecution. It wasn't really a targeted effort; it was just everything within a certain window. I know because I had some very innocuous posts and comments that were caught in the same purge.
I've worked with the postscript file format extensively. I know what this is. This is a standard obfuscation technique applied by PDF editors to "secure" documents. What they do is map the wrong glyphs in the font table. Probably every one of you have seen this when you tried to copy text from a PDF and it was random gibberish when you pasted it.
https://blog.1a23.com/2017/08/29/obfuscate-pdf-text-uncopiable-text-with-crafted-cmap/
I am on the lower end of autistic spectrum... But those genes do run in my family, & I can hack my way through some code, so I'll see what I can do, fam.
I've got limited access my tools this week, though (shit always happens when I travel, man), so I dunno how far I'll get without full desktop capabilities.
Don't get your hopes too high, though. Kek.
This is bizarre. My first thoughts is that the document has been put through some obfuscating software, to remap the font to different characters. This would serve as a simple substitution cypher on the plain text, while keeping the document human readable. Doing this would serve to stop copying and pasting text from the document, and also stop searching from insider the viewer and web-search indexers.
From some quick looking I found normally non-printing character \u001f maps to a capital I, and \u0019 maps to a capital C. Those aren't ROT-17, even on an ASCII table. I think that some characters happened to be ROT-17 is an interesting coincidence.
One thing I do wonder about is what other PDF documents are out there that obfuscated like this, and are being overlooked because they're unsearchable.
Interesting, thanks for the info. Only thing I can add is that DJT's MOU was not given this treatment. It's searchable and unredacted.
I just tried to copy+paste the portions of bidan's with the redactions to see if I could recover the redacted text but I'm doing it by hand so if you have a better way, I'd gladly defer to your expertise.
Oh also, do you know what would cause some of the substitutions to be off? For reference, here's what you get when you ctrl+f "a": https://i.ibb.co/dmbswnT/image.png
Lots of R's but also there's some random letters mixed in...
They may have scanned a typed document and then ran a crappy ocr on it that failed. That tends to happen if you try to convert a graphical scan to a searchable pdf.
The second MOU link is a bit odd though. It's odd because it's consistently off and the formatting is perfect for OCR
I'm not an expert on PDFs but I suspect the text to page position hints are a little off, so it's highlight what it thinks is the letter, but it's actually somewhere to the side of that. I've experienced these kinds of highlight errors in other mundane PDFs before, so I don't think it's anything other than annoying.
A second source for highlight errors could have been capitalization, but this document doesn't appear to use lower case letters in its cyphered text. (On a side note, all the lower case letters you've used in the encrypted column should actually be upper case. However, case insensitive searches hide this error.)
You know that's exactly what Hillary Clinton was telling me !
Q e Q
Laws still matter that’s why we’re here, no?
Why would they do that? Is the info too damning??
Someone versed in presidential transfer protocols would have to answer whether or not it is damning.
I suspect whoever did the redaction also did the scrambling too (probably a checkbox in the redaction software).
From my brief skimming of the document it details what the GSA is expected to supply to the candidate pre-election, and after the election if they win. Nothing I'd expect to find something nefarious in. Some buildings, names, departments and IT details have been redacted One redaction I do find odd is the redaction of the eligible candidate's signature and printed name (I don't know if this is standard procedure or not).
I wish I knew more about stuff and could help you. I’m way more retard than autist. But anyway, thanks for being you. God is here and He is angry, so we’ll win. It’s just nice to have people like you to show us how.
Wow, what a story https://en.wikipedia.org/wiki/Laotian_Civil_War#Evacuation_of_the_Hmong
Hmong seems like a bigger deal than you think i just rabbit holed the Hmong link and it lead to some stuff
https://en.wikipedia.org/wiki/Hmong_Veterans%27_Naturalization_Act_of_2000 signed by Clinton
https://en.wikipedia.org/wiki/CIA_activities_in_Laos of course.
https://en.wikipedia.org/wiki/Weapons_of_the_Laotian_Civil_WarThe Laotian Civil War was a military conflict that pitted the guerrilla forces of the Marxist-oriented Pathet Lao against the armed and security forces of the Kingdom of Laos, led by the conservative Royal Lao Government, between 1960 and 1975.
The sources page on the laotian civil war has a lot of "retrieval" dates for January and march 2017 and some sources speak of a CIA shadow war, Immigration from Lao, marxism, the works. Why does this seem big? IDK i don't have time to read all this.
Also there's a huge mystery about young Hmong men dying mysteriously in their sleep
Yeah, I don't think that's nothing, fren.
That's interesting but after looking at their alphabet, which is not at all what I was expecting given their geography, I can see how the autodetect could misconstrue roman alphabet letters forming gibberish as being of Hmong origin. Before looking at their alphabet though, I figured it would be more similar to chinese characters and thought you were onto something with this find. (Fun fact, apparently they didn't have a written language until the 1950s)
Thanks for running that study and sharing though!
If you copy and paste from the pdf into the ctrl-f window, you get the rot17 characters. I think like copperlogic said it's probably something they did to prevent it from being searchable. Wouldn't be too hard to script something to subtract the offsets though, the actual text is right there.
Actually it works if you paste into a regular window, can't select the text before page 4 though?
The -- )74
Eligible -- ;8681;4
Candidate -- 0=3830C4
acknowledges -- 02:=>F;4364B
that -- C70C
GSA -- (
candidates -- 20=3830C4B
defined -- 3458=43
basis -- 10B8B
Tried copy paste on the redacted blocks, nothing there of course. "GSA" pastes as ctrl-], (, and a character that deletes the line and returns the cursor to the beginning, probably ctrl-W.
So it might not even be possible to enter the characters for "GSA" into the ctrl-f window, to search for that. Counting backward 17 from A should give "0", zero, so that might've been done on purpose?
http://www.columbia.edu/kermit/k95manual/ascii.html
Formatting of L&R margins makes this post impossible to read on a phone. Don’t know if the margins are better on a desktop or tablet.
Yeah, pretty clear on laptop
I've been facing this issue for multiple posts.
I think it has something to do with the flairs, as text posts with no custom flair work fine.
Try turning community styling off?
Tried just now, same issue unfortunately.
Tried landscape? Worked fine sideways.
I turned my phone, turned it back, fine.
I had to click “Show Reader View” on Safari mobile.
Nice work. Amazing how much text can be behind those black bars. I never realized that.
Cool but You'll need to have an explanation for some people.
If you select all on the PDF and ROT-17 what you copy this is what you get.
It seems like it's just the text of the PDF.
I don't know why it was ROT-17 encoded.
I don't know why the result seems to only "partially decode" or whats up with the garbage.
I don't know how/why, but I know that they had multiple values return the same letters. For instance, '@' and '&' both produced 'Q'. So I'm guessing that's why it produced so much unintelligible nonsense.
Also, I knew the pgs 1, 3, and 4 weren't selectable, but after seeing the totality of ctrl+a in your two posts, it looked too brief based on what I remembered reading yesterday, so I went back and double checked and it appears that pgs 10, 11, 15, and 18 aren't selectable either.
What an odd little pdf we have here lol
Thanks for posting that btw
This stuff is way above my pay grade. I'll be happy to pray for ya'll though. ?
It's also way above my autism grade. I'll do the same. Best of luck everyone!
I'm only somewhat familiar with ROT-17, but having said that, I think your findings are right.
I'm just about to go through it, it may take me some time but I'll report back anything interesting.
Well, you're certainly correct with all your de-coding....
So now to try and break it...
I'm not sure, but I found it bc it was linked on a .gov doc: https://crsreports.congress.gov/product/pdf/R/R46602
Dreamhost. Sounds like a Hollyweird production company to go along with their production set of the Oval Office on Amazon grounds.
Oops
Hi,
This obfuscation is a feature of DocuSign PDFs. It's primarily used so people cannot directly edit and forge a DocuSign document. The copy-pasting discrepancy is apparently a side-effect of this.
Regards, waterbjorn
Thanks for sharing. If this is it, and seems plausible enough to me, it would need to be a new protocol that they've enacted because the other MOU's I've looked at haven't been altered in this manner.
Can anyone second this? Seems a lot more plausible than a secret message.
EDIT: ok duh, there is a DocuSign Envelope ID at the top:
EEBA5E1B-4B72-41BB-B7F0-6C2C161E3250
What'd be fun is if someone knew a way to get into the envelope.
Here's what I'm smelling so far. It's not a +17 offset, .. it's +49 of the ASCII table (to match the case printed).
A later section is +75
The final section doesn't look like an ASCII offset at all. pretty garbages.
What I find interesting is the "misspellings" -- perhaps if isolated from the document text they present a message unto themselves.
Right, I got as far as the -49 difference before crashing. The offsets for the capital letters aren't consistent, in the section I checked. They're not all n characters different, I mean. It doesn't seem like a message could be hidden in that, unless maybe the mappings for the same letter are different in some places?
G, chr 71; should be chr 22, but it's chr 35
S, chr 83; should be chr 34, but it's chr 40
A, chr 65; should be chr 16, but it's chr 27 ?
.
comment from SarMega above,
https://greatawakening.win/p/12hRCJ85h9/x/c/4Dx42GFgNVv
"
This is a standard obfuscation technique applied by PDF editors to "secure" documents. What they do is map the wrong glyphs in the font table.
https://blog.1a23.com/2017/08/29/obfuscate-pdf-text-uncopiable-text-with-crafted-cmap/
"
Thanks for sharing.
Can you elaborate on "case printed"? When I copy-paste the content into notepad, I get all-caps.
Also, can you explain to me the +49/+75, I feel like I'm missing something simple here. I'm looking at an ASCII table rn, but not seeing exactly what you're talking about. Tbc, I understand that 'A' +49 takes me to 'r', but if you search the doc, ctrl+f "a" yields capital and lowercase R's, as well as other random letters, which has been explained away as an error in the image vs text, but I'm still not certain that this is the case either as the file has obvious mistakes when copy-pasted and ROT'd.
I'm not super well versed in the processes for these sorts of things, but just using intuition and a little common sense, those misspellings aren't on the OCR end right? I mean, I get how the system could misinterpret an uppercase 'I' for a lowercase 'L', or merge 'rn' into an 'm' if the kerning is tight, but replacing 'P' with '' seems like the file either got corrupted at some point (is "mild" file corruption even a thing?) or it suggests some level intentionality.
Hello, fren. Happy to share my work with you.
To start with, I didn't search single characters, but rather pulled out whatever "text" is there. One way is to Ctrl+A (select-all), Ctrl+C (copy), Ctrl+V (paste) to a text file; the result for me is this. Another method is 'pdftotext' (a program that is part of the poppler-utils Python package); it produces a much similar output.
About the document, some of the pages are flat images. I have no guess as to why some pages are, and others are not, from a technical perspective.
To perform the rotation, I wrote this Python script (python2, not python3, fwiw). This lets me "turn the dial" so to speak on the cipher; python rotate.py 17 ; python rotate.py 21 ; etc.
So I went through many offsets until I found something that was readable.
17 is readable, but in ALLCAPS. This is what was meant by matching "the case printed"; an offset of 49 matches the document (mostly). But that offset does work consistently through the doc.
The next unreadable section becomes readable with an offset of 75, and looks to be the footnote on page 9 concerning COVID protocol.
]tandard occupancxM no adjustments for [
Z NPRO ^he ligible andidate staff shall determine an[Z NPR protocols for the spaceM including entrance and screening requirementsO ^he ligible andidate shall notifx ]SM the st st M the epartment of Yomeland ]ecuritx ederal \rotective ]ervice whoM in turnM shall ma e all reasonable efforts to accommodate such [`Z NPR related protocolsOUppercase letters are not properly displayed, but there was no better offset. Offset 65 fixes the initial 'S', but it doesn't fix the rest.
That's also what I mean by "misspelling": "]tandard" vs "Standard" ; since I can't find rhyme nor reason for the uppercase chars being off by independently varying degrees.
I'm willing to chalk it all up to PDF compression is weird. Hope this helped.
Where is those encryption,I don't get it...
In searching ? People that might be fucked up OCR or some kind of font/picture encoding really and that's the problem.
u/MoU-2020 : If we are not looking for things hidden under black spaces or something you can simply make it picture and put it into good ocr. Good simple "brutte force attack". Demand a bit of work but it is 18 pages document not some few hundreds page book to complain
u/MoU-2020 - searchable version. it was simple google work even without OCR :P
Next time: https://www.online-convert.com/ https://superuser.com/questions/561589/how-to-find-out-why-is-text-not-searchable-in-a-pdf-and-make-it-searchable
Searching in browser not bites.
Ok converted document: https://rapidshare.io/4ps/2020_MOU_between_GSA_and_Eligible_Candidate_Biden.doc
Thanks, bud.
What's this mean?
Oh sorry, I forgot and used polish kind of idiom in english. "not bites" = "Not hurts"
not sure if this could help or not https://www.dcode.fr/tools-list
A technical detail of PDF:
if you can copy text out of PDFs, the text is actually contained in the file 2 times. One time as vector images of the characters, and a second time as the actual text. If the second representation would be missing, you would see the text, but would not be able to select it and copy it out.
Now, in this document, you see that the vector images are correct, since you can see the characters (and they make sense), but the copied text is wrong. This means that the software the PDF was written with was somehow buggy and output the text in a non standards compliant (or outright buggy) way.
Thanks for the insight.
What would cause pages 1, 3, 4, 10, 11, 15, and 18 to be unsearchable but the rest to be searchable? Is that just another buggy aspect of this thing or is it a fairly typical practice? In looking at those pages vs the searchable pgs, I don't see much of a reason to selectively prohibit, but then again I'm not a govt rules & standards expert.
This is because the textual representation is missing completely on these pages. This is not typical practice, but if you ask for the reason, I can only speculate...
Gotta start work but here's the pdftotext output if people just wanna browse it:
https://pastebin.com/M4hy77BS
Could this obfuscation have been done to prevent the SEO crawlers from properly indexing this doc? That would keep it off of Google search results.
Maybe so. Do pdf's normally get crawled?
This thread reminds me of A Beautiful Mind.
Giving you a thumbs up......because I do not have a clue what you are talking about but it seems very intelligent! My son a computer coder would know, but I cannot ask him anything he hates Trump and has fallen out with me because I think Trump is GREAT!
Excuse my ignorance but what is ROT-17?
You simply rotate every letter in the alphabet N number of times.
So if you shift the alphabet by 4:
A becomes E
B becomes F
C becomes G
etc...
Pretty low-level, but if you throw even one wrench into it they can become exponentially complex. For instance, if you also shift all the vowels by an additional 2 places relative to themselves, you can obscure your message even more.
The 17 means you rotate the alphabet by 17 characters, or so it seems.
ATTENTION, WARNING:
MoU-2020 is a new account. This is his only post. This may be a useless rabbit hole!
This is absolutely nothing. The pdf is actually not text, everything inside is actually just images. Your pdf viewer is probably just doing some (bad) basic OCR for you to be able to highlight Try it for yourself https://www.extractpdf.com/ Also returning shit back to the GSA does not make it a big day
spez: most likely done because of the redactions
I appreciate your input.
You don't think the day that IT hardware gets returned and wiped might be consequential? (Genuine question, not rhetorical or being a dick)
Just to understand, are you just trying to get searchable document?
If so, you can achieve this by performing OCR on the document. Site which allows you to do this for free: https://2pdf.com/ocr/
I tried it with the document, and seemed to work...took about 1-2 mins.
There's a program that I used when studying for the EC-Council Certified Encryption Specialist cert called CrypTool that might help some of you out.
Genius. Thank you.
(Now explain it to me like I'm 5.)
ROT could also mean "Return of Trump"
My guess is X’s team will completely drop it they can’t get anything right, I mean really it’s game over.
I find it strange that so much of it is redacted. Why is the transition team names and equipment and location redacted. That's at least what I can tell is classified based on comparing Biden's to Trump's.