YOOOO????

good to know

Yoo

nice.

came at the right time it seems

You had two chances to spell mystery correctly

It was an arg though

@@Akropolix sorry english aint my first language, and i forgot mystery was spelled with two y's

@@runed0s86 how was an arg?

@@runed0s86 No dude, this is just a straight up mystery, no alternate reality involved

This is a great idea

Yeah the likely situation is that the original file is what they said, and they made the decoy to have a fun outcome when people finally got in.

@@RetroGamingNow no, you're a great idea

ye this imo they might have gotten word either from one of their own on hackerforums or someone else on it let them know that hackerforums both had the file and was looking to decrypt it (maybe even because of the guy who tweeted at notch?). not everyone on a place like that is necessarily going to go in with simple curiosity and good intention. it seems to me that keeping the 16 chars (NONE of which are numbers, compared to the post about the original's being only numbers. the og pass being just numbers is only really mentioned on hackerforums that i've seen? hence why i think they were actually clued in to that specifically.), the password itself being something of a nerd meme, the random video it was replaced with to fill the space... I think all of these things are literally just to mess with hackers mojang knew were after something they had now been told was sensitive and potentially damaging. so beyond that point in their eyes, a fair few people would be then trying to access the file with the explicit intent of trying to do damage of some sort. so why not troll the people who tried once mojang realized what was up? intentionally messing with people deliberately trying to put their hands in the no-no jar that's locked for a reason. explains the inconsistency too imo, because it's possible that being too up front about what the file contains may fuel those actions further. and assuming it IS something to do for XBOX, that damage would have been wider spread than minecraft. so it's better to just be aggravating little schmucks about it. which is probably a valid response tbh

dune reference? omg

quarter hour*

@@astermania6323 bro...

@@astermania6323 💀an hour is not 100 minutes so it's closer to half an hour

@@astermania6323 100 mins isnt an hour bro lmao

@@astermania6323

that's the most likely scenario. given that it's mathematically inconceivable that anyone ever has bruteforced the password, it makes far more sense that someone just lied about the password length to deter people, and mojang picked a 16 character password based on that forum

and changed to only letters to indirectly mark those people that said it's "important information that should not be in the wild" as liars taking with it the message of the important informations.

Fr, RGN and Lemmino are great comparisons.

That's the reason I watch this channel. RGN has a very similar style and it makes it very enthralling

been saying this

This is literally a parallel to the kryptos video both bluds got me wishing i could break codes

Real ❤❤❤❤❤❤

Not that the source getting leaked realy matters much anyway. Minecraft (at least the original version) is written in Java, which, due to it's status as an interpreted language, can be easily decompiled back to what's effectively the original source. It's why the game's code itself is obfuscated in all distributed .jar files to make it difficult to tell what anything's supposed to do (function, variable, and class names are turned into random series of letters). Not that this really stopped modders anyway, Forge has existed since release 1.0, and source mods to the .jar of the game itself along with other pre-Forge modloaders have existed since the beta/alpha days.

bro!! i think all of the 7tbh ppl have interconnected recommendations

Eh pretty sure Minecraft has been fully decompiled at this point, that is why mods work so well they just patch that. I mean we would get the code comments though, not much useful there though maybe some funny strings like in the TF2, Windows XP and MSDOS source. But why would they need the source for Minecon? Makes zero sense to me

Useful? No. Interesting? Absolutely!

They literally publish the mappings to the original source themselves. They have for quite a while. (though I don't remember when they started doing that, exactly)

That's good voicing.

@@andrewpinedo1883 i think it's good writing and music

i certainly did not expect a fresh-faced sparklez jumpscare

Definitely the music

If you like this I'd suggest looking up NationSquid's videos about old viruses. His video on Millionth Visitor in particular has a very similar vibe.

Very possible. The swap 100% was to make the result more fun for the community. Meaning they know the contents of the original, and it's almost certainly boring for most people, if not everyone.

Wait but then why did the hackers say it could ruin them?

@@seandorama5932 possibly just trolling. Could be that there's private attendee info in there.

@@seandorama5932 Because hackers are the best at trolling. It isn't hard to figure out what is in the original file, aes-256 bit encryption has been broken for years now.

@@seandorama5932 almost 100% trolling, probably didnt even crack into the file

i started with minecraft in early 2010 and lemmie tell you it was pretty cool however, you can have a similar experience with any fandom ish game, undertale, hollowknight, inscryption, and outer wilds were similar experiences for me, just wait around for the next big thing. Obviously nothing lasts as long as minecraft (i just set up a modded server for friends :D i haven't played vanilla since before enchanting) but the whole herobrine phase and whatnot is close. if you are able to avoid spoilers i can HIGHLY recommend just playing outer wilds :D there is a cult on youtube going around and watching others lets-play it because you can only experience it as its meant to be experienced once.

“I wish there was a way to know you're in the good old days before you've actually left them.”

@@Maric18 been meaning to pick up outer wilds for a while.. heard some crazy stuff about it

@@jooot_6850 idk about craaazy stuff, like, don't overhype it, but its a great game if you like solving mysteries and exploring and piecing things together

It’s called tominecon

Oh, that could be something. Though I feel like Dinnerbone's statement about it not being useful anymore would be false in that case. Surely some of that info would still hold weight all these years later.

I guess I need context. What were Minecon tickets and why would related info be problematic?

@Copperkaiju Tickets to the event in Las Vegas. The file could contain the names, addresses, emails, or even billing info of those who bought tickets.

@@m72860 That's what I was thinking.Thanks 👍

I was digging around and found a video from a small channel showing how he decoded it kzfaq.info/get/bejne/ma5hga-F1Ljej6M.htmlsi=asNgLM_zXvWZGPqX

This fucking file haunts my dreams

I know he kind of had to cut Minecraft loose for his own sanity (which is better than holding on and letting fame destroy him), but I like to think that every once in a while he enjoys watching from a distance

​@@amethyst_cat9532 one time, he played with Dream. So this is probably true

​@@amethyst_cat9532he played with dream one time. So this is probably true

He probably wouldn't have much nice to say. Some may be actually valid points, where as other comments would probably just once again prove how awful of a person he is. Gotta remember that after he sold Minecraft he started to reveal his opinions and a lot of them aren't good.

@@chaonegamesandmore4490 that's old stuff, he seems very different now

Bruh

Bro got Boeing'd during his comment smh

@@danem2215 He tried speaking out against Boeing and they weren’t having it 😂

So you're telling me that Herobrine stores his feet pics on this particular file? One more reason to be afraid of Herobrine

How you know that

people *still* put sensitive data on public facing servers despite the security risks just because it's convenient and easy. you can easily find public facing security cameras or webcams that people have either forgotten or just neglected to secure properly, or go on Shodan to easily find other items.

There were secure alternatives to ftp at that point like sftp but the problem is always making it easy enough for non tech inclined workers to access it on their windows office computers. HTTP file transfer is still the most sensible way to do that sometimes in today's messed up world.

It could have been uploaded by mistake. People make mistakes, like probably every day a mistake is made. To be honest, mistakes are more common than conspiracy theorists would like to admit...

yeah i agree, people probably ARE trying to crack it

It absolutely can be cracked, the problem's just that cracking a 7zip password takes a lot of GPU power. The person on the hacker forum was likely lying about finding the passcode to troll or deter skids from cluttering the forum with questions about how to crack an encryption that would take millions of years to brute force (given the tech of the era) Even now, assuming you can dedicate a couple 4090s or A100s to cracking AES-256, you're gonna be waiting a while to get the results. And that's when you're using the strongest GPUs on the market. The big question you need to ask is, given the technical hurdles, how much money are you willing to invest into a curiosity that will not offer any meaningful payoff?

@@CaptainBeebi i mean that whole minecraft@home thing happened to find pack.png and etc, i could see the community utilising that or something similar for this

@@CaptainBeebi I'm inclined to agree. I tested the 16-character numbers-only thing on my RX 5700. Does about 144 H/s and estimated time to crack is 220 754 years and 183 days. If someone cracked it, it being 16 characters is bollocks.

Time obscures details. Maybe the password was so obvious back in 2011 because it was related to something fresh at the time? e.g. a then-recent tweet by a dev like Notch with a notable phrase. It would be on people's minds and theoretically someone could have tried it and opened the 7zip. Or it could have been related to someone from 2011 pop culture, who is forgotten now (e.g. Justin Bieber). Or maybe its something so simple that people overlooked it, like an epoch

Im dont think so. File weight is too high for this.

If that were the case, the people who "had seen it" wouldnt tell you to look at it and move on. They would be trying to prevent you seeing it at all. Its likely just a bunch of things like banners, videos, console/PC demos, etc and nothing of much value.

as a veteran of hackforums (the minecraft section, at that) the most likely explanation is that flipybitz was trolling and nobody had ever cracked the file to begin with.

Why the f*ck will someone put their credit card and address numbers into a random game file

@@qhgaming8653 and store it on a public assets bucket, for God's sake

Oh no

Oh boy.... Anyone got a quantum computer?

@@Jacy-dx6dxquantum computer would not help here

​@@Jacy-dx6dx 10 More Years and we'll Know what that file was!

Noted.

that's becuase it's an actual mystery related to Minecraft

I swear people think everything on his channel is an arg I mean take a hint sometimes 😂

There are a lot of videos from this channel about ARGs. This isn't one of them.

It is real, unlike my ARG videos

@@RetroGamingNow if u get your hands on the file I would try getting a 7zip/zip cracker

Or it could be used to wreak havoc. Imagine if you could slap an outdated, nonfunctional piece of nonsense code onto a Minecraft account tied to anybody's computer. Code is delicate, you could probably corrupt somebody's ROM with something like that if the stars aligned.

it cant because the file was made three days before the minecon itself

@@stardy8131 i'm young so idk about that minecon but was it ticket based? cause if it was then maybe they made the file when the tickets sold out or somethin

@@sopix7761 I actually do not know but knowing data, data analysis and mojang i doubt they'd list all the names of the people that bought tickets/went to minecon in a single txt file, the file is really specific too and usually when sending data like this its accompanied with other kinds of stuff (And even then, if the file itself did have more things, knowing developers and data workers it would've been more efficient to just make a XLS/CSV file and easily have all the data sorted there for you). Also, minecon already had the names of the people that went there along with their usernames, not mojang, if anything the file would've been named toMojang, and mojang essentially had no purpose in sending this kind of data aswell cause they could directly just send the capes to the users from their offices at mojang if they already had these usernames. //I'd also like to mention how the txt file is 6GBs, the zip is only 76mb, though that could be due to compression This is coming from someone that studies IT and had lessons about data like this in conclusion.. What I'm trying to say is - that although it is possible, it is extremely unlikely that this is the case, I'm sure one day the file will be cracked and we'll find out though P.S. Sorry if my punctuation is bad, I'm dyslexic and often make these mistakes while writing

it's not real, the file extension shown is .zip when the real file has a .7z extension.

Interesting

Btw, that's just extra proof that the "players with capes" screenshot is fake.

this adds up to it being something like an early 360 build

Could be sourcecode then

Sounds like an install of Minecraft to me. The console version sounds very plausible. Also, that s3 bucket was their only bucket for some time at that point. It was probably put there by 4j studios so they could install it on the 360 devkit used for the demo. Edit: that's why the user metadata is missing I expect - 4j got a write only url to that bucket,vand perhaps there was no user data in the S3.

Lol good one

I can't believe The Stanley Parable Ultra Deluxe is already 2 years old.

@@JoBot__ what the FUCK IT FEELS SO MUCH MORE RECENT THAN THAT, i remember being so pissed that they kept delaying it and i remember beating it as if it were yesterday...

(In a french accent) _This is a bucket._

@@widmo206 Dear god...

console versions have never been referred to as 1.0, the first beta builds we know were called 1.66.0016.0, the first release TU0, and the release corresponding to java release 1.0 is called TU7

@@Archman155 ah, gotcha - it's possible that the exact version could have slipped their mind or they forgot the exact versioning scheme - after all, the tweets _did_ happen way after the file's creation (and subsequent replacement).

Not really of 7z itself, but more of the AES encryption model. There's a reason it's used everywhere (including the browser/app you're reading this comment on).

Its not just 7z its also aes encryption.

​@@ImAkiyamanot just AES, but the key-stretching algorithm (probably PBKDF2) used to convert the password into a key.

If the original file indeed contains the 1.0 code for Xbox edition, it’s probably the version that the testers are using that retains its human-readable debugging tools, not the minified, optimized version that will ship to customers

Minification only makes sense if you're distributing and directly running source code, like in JS. Java compiles to bytecode which is then run on the JVM. It makes no sense to minify Java code because it will compile to the same bytecode regardless. The bytecode will not store each variable as a string of dozens of bytes, it will enumerate the variables as integers.

@@amaryllis0 if it's a debug build it'd have symbols embedded in/alongside the main jar file i think, so it could just be a debug build. but also, if it's an actual 360 build of the game, it'd be written in c++, and i have no idea what black magic is used to store symbols in windows' PE files(the 360 is just a pc with a customized windows build on it afaik)

@@amaryllis0 That's not quite true. While Java is running bytecode, it doesn't use memory addresses to access its variables; it uses their names. Same for classes, packages and methods. So a compiled Java file will have a good amount of "minifiable" text in it. And yes, Minecraft distributables are minified/obfuscated. However, it wouldn't create a compressed archive that much bigger. The compression algorithm will do the same thing a minifier does, and do it even better. The archive would roughly be bigger by the combined length of each unique string.

​@@amaryllis0fwiw Mojang is notorious for minifiying the heck out of their code. It's one of the things that makes mod development way more difficult than it need to be.

It's probably this. As a former game dev that presented at cons all the time, this is the kinda stuff we had

that's what I thought

You can just google it. "Original tominecon.7z found! : r/MinecraftUnlimited"

i found the copy

@@Yuuki4.0 send it

Wat

Could also be encrypted, which will also appear like random noise, assuming you're using a good block cipher mode. But I agree, very likely just random data to pad out the filesize.

how flat

@@U20E0 I deleted it but we're talking ±0.1%

​@@fission1110 I'm just wondering why the updatded version has a slightly different filesize

@@AcidicLanzador it's hard to predict the post compression filesize without just compressing over and over with different amounts of random data. They got it close and called it good enough.

Most games run off an “engine” these are programs like unreal4/5 where a middleman program will read data and translate it into an actual game experience for you. A lot of games have custom engines, or settings or program-plug-ins that modify how the original engine reads. Thus making it hard for normal people to just “rip” the game code. Sure you can access it, but actually using the code after is the biggest issue. For instance I can find all the data for a sim character very easily, download it and transfer it to another simmer in 5 minutes, but that data is almost useless unless you can find the right tools for (example) blender to read and actually display the data. As he mentioned some things are proprietary property too, and it’s very easy for devs to lock code away so you just can’t get it. Sucks to be a regular person I guess 🤷🏼‍♀️

@@sunshinelastname1813 Yeah, makes sense

If it can run and display on your machine in game, it can be reverse engineered. The issue with files like these is that you normally need the password to get in, and this was clearly not meant to be a public facing file.

generally when you download a game you are only downloading the compiled binary. this is the version of the game created from all the different bits of course code meant to actually run on a user's machine. the problem is that doing the *reverse* process (turning compiled code back into the decompiled source code) is much harder. big companies that put out games want their property to be protected, otherwise users could just recreate the entire game for free on their systems! for example, most compilers will "optimize" your code and run obfuscation programs, which will strip out each variable and function name and replace it with a generic one. because you don't have the compiler they used, you know have to try and guess what these variable and functions were called (for example, a simple function like getPos(player, 12) may turn into f9jj0z(gz0szn1,ff08s)). most compiled programs will also strip "symbols" from the program because it makes the file substantially smaller, which are impossible to regenerate of course, some programs are easier to decompile and reverse engineer than others. minecraft, a java program, has been decompiled many times because java compiles into what is known as bytecode, which retains symbol, class, and method names and thus makes it much more human readable.

@@Otome_chan311 👍

he suffers inside it

Everybody knows the pirates of Rastafarian myth made Minecraft soon after the oceans dried. Ramen.

R’amen.

Fun Fact there’s currently 4 religions who’s god/ deity is a spaghetti monster

​@@AresHoax_9did not know that lol but why

he didn't he still works there

People are brute forcing it, it just isn't working. Seed finding is a bad example because it isn't really brute forcing at its core, it's working backwards from the code used to generate Minecraft worlds. Ex: if only numbers divisible by 17 generate swamp biomes at X coordinates, you can already exclude all those seeds that don't, exponentially decreasing the seeds you need to search. Brute forcing is involved but not close to as much as something like a 7z file.

There was the mention that it is only numbers and 16 digits, that has got to lower the total amount of combos to brute force right? (assuming that is true)

Never mind, I did the very simple math and it's still 10,000,000,000,000,000 options

@@thearrogantone4756 thats a week with hashcat and a rtx 4090

​@@brandonbombplays9304is there any proof of that?

we... don't... have... an... answer. the... file... is... not... cracked...

@@StarHorder well why didnt he crack it smh

What did you think "no one has solved" meant?

​@@benedictgaming4766it takes like a lot of 4090s or a1000 gpus and then it would probably still take some time to crack the real password. Decryption is hard if not impossible to do without a whole gpu farm or trying every password but that is not worth it

Wait what?

@@owenfeilds The new video posted today basically said this is true.

A downside of this theory is that text (source code in this case) compresses way better than binary files, especially with algorithms like LZMA (in which the 7z format usually relies upon)

@@NickAc Having worked with java in the past, I can tell you many devs have libraries used to build the code in the source code files (or repo etc) included, as back then dependency tools like maven were not that great. This could explain the increased file size

@@dern3rd yeah, i've worked with similar tools before, and indeed sometimes the source-code is shipped with the built stuff, but text is still small when compressed with 7z. But I guess having both side-by-side could impact compression ratios

@@dern3rd Back in the day Mojang used Subversion as their version control, and SVN repos can be fairly large

i cant tell whether that apostrophe is meant to be a cheek marking, a nose, a tear, or an ear

i think about that because of the `-`

Yeah, he said that he intends to start uploading more regularly again

@@ThunderCube3888 WOOOOO 💯💯💯

​@@ThunderCube3888SICK 🔥🔥

exactly what I was thinking, what is in the file?

The real mystery is why can’t we just brute force the og one? Computers have gotten much better since 2011

@@epicboizgames1170 Because it's so computationally intensive that the few dozen times speedup we gained in the last 13 years are completely insignificant compared to how hard it is to crack.

​@@polukieven notch doesn't know. He was asked again on a twitter post for his game levers and chests. I'm pretty sure notch doesn't know what is in the file

@@greenvm "Insignificant" is being too harsh. It'd take several years for ChatGPT-level of hardware to crack, so with a setup like minecraft@home it would definitely be possible

Fr

True, I would like to see more of the IRL documentaries from RGN like the weird Space radio signal thing he uploaded

"Let's goon" 💀

YIPEEEEE

Report back if you come across anything man, good luck

commenting here so i'll get notified in the future

Bump. I am also attempting this same list. Report back if you find out anything before I do.

GL

Keep in mind that the number of possible passwords could be written with scientific notation

i might try that

HOLY that takes a ton of effort

nice that you found that

It's actually kinda weird that more people didn't preserve the original file anywhere. Well, maybe it's because not many paid attention to the file being replaced back then.

At least for the 1st segment, wouldn't the header make collision attacks significantly harder?

On the same thought-train, the s3md5 reversal script which mysteriously appeared, could potentially have been created to produce the desired string for this 7z.

@@tamoozbr I'm not going to pretend to fully know what I'm talking about, because I don't. From what I've heard and what little I do know about hash algorithms though is that as long as the file is long enough you should be able to replace enough of the internals without breaking the file to produce the same hash without compromising the file size or any important headers, the only thing you do compromise is the data itself (which wouldn't really matter for perpetuating a mystery on the internet, since the data in question is supposedly encrypted and the key to decrypt it is the mystery.)

@@AcidicLanzador I don't think it's that weird. Back then Minecraft was a smaller game, not many people probably would have been poking around for files like that and even fewer of those people probably cared about preservation.

the website would of stated the gzip magic number

@@CuteistFox would have

I checked but the file doesn't have a gzip header, and the data is so large that I don't think it would be nbt data. I think it really is just padding to get the file size close to the original

@@Maric18 I think some people misunderstand "would've" as "would of" when they hear it and then just write it like that instead of checking if it's even a real term. I've seen that multiple times just this year.

im pretty sure that it's just random junk they got from /dev/(u)random just to make the archived file appear bigger

good luck

Notify me if you open it. Also good luck

Replying to get a notif when something happens

I'm running one too. but will stop if I notice a follow up here or will post what I find if I get there faster.

That'll take a very long time, and the people claiming that they cracked it and that it's 16 digits were probably lying, because AES-256 is effectively impossible to crack

youtube algorithms can be harsh. better safe than sorry