Hi, I’m Tangle Coalbox.
Any chance you can help me with an investigation?
Elf Resources assigned me to look into a case, but it seems to require digital forensic skills.
Do you know anything about Linux terminal editors and digital traces they leave behind?
Apparently editors can leave traces of data behind,
but where and how escapes me!
Vim Artifacts > Forensic Relevance of Vim Artifacts
1- First let’s try this command from hints link to find any forensic relevance to Vim text-editor:
.viminfo file is a special file used to remember information that would otherwise be lost when exiting vim, you can copy text to notepad for clearer view.
2- As you can see this all information collected from vim editor, by inspecting the results you will find some clues:
wqused to save file and exit in :
3- You can view the poem file using this command :
4- All clues lead to elf named Elinore , Let’s enter the name into
Hey, thanks for the help with the investigation, gumshoe.
Have you been able to solve the lock with the funny shapes?
It reminds me of something called “de Bruijn Sequences.”
You can optimize the guesses because there is no start and stop -- each new value is added to the end and the first is removed.
I’ve even seen de Bruijn sequence generators online.
Here the length of the alphabet is 4 (only 4 buttons) and the length of the PIN is 4 as well.
Mathematically this is k=4, n=4 to generate the de Bruijn sequence.
Math is like your notepad and pencil - can’t leave home without it!
I heard Alabaster lost his badge! That’s pretty bad. What do you think someone could do with that?
Opening a Ford Lock Code > Opening a Ford with a Robot and the de Bruijn Sequence:
de Bruijn Sequence Generator: