Skip to main content
MITMH2022
Public Access

Solution to Tech Support

New You City

Answer: SEND US A TELEGRAM
by James Sugrono

Solvers are given a field to request assistance via email, as well as links to additional information and chat support.

The puzzle is in three parts.

Email

In the archived version of the hunt, we simulate sending emails and allow solvers to download the raw version of the simulated email, so that they can see the email headers.

On entering their email and requesting support, solvers are sent an email.

This part of the puzzle requires solvers to inspect the email headers, clued by the starts of each paragraph in the email body. Doing so reveals that there is an x-message header, that says: “Please request again with your email alias + ans“ and an x-query header containing a clue. Solvers should re-request a password reset with the answer to the clue appended to their email with the common + syntax for aliasing.

Upon requesting a password reset using an email address containing the required part, solvers will receive the next clue.

ClueAlias needed
I’m a logical conjunctionAND
Some alternative to x86/x64ARM
Often what you might see on a vehicle from Anhalt-ZerbstAZE
Say waist in IstanbulBEL
U no I’ll return soonBRB
Major airport you might fly into if you wanted to see the Geographer in personFRA
She’s the chair of the ABC, down underITA

The acrostic of the clues spell ISO SUMS. Each answer to the clues is an ISO 3166-1 alpha-3 code for a country, and this acrostic clues summing the ISO 3166-1 numeric representations of these countries and then converting back to the alpha-3 code. Requesting assistance using +USA as an alias will return an x-message that indicates that this minipuzzle is complete.

Web support

In the archived version of the hunt, we can't change the HTTP headers, or accept different HTTP methods. Instead, we store the message as an invisible element inside the HTML <header> element, and allow the method to be simulated by adding a query string such as ?method=DELETE. These two changes are clued by the notice added to the archived version of the puzzle.

Web support contains the same HEADERS acrostic, with a slightly different message.

Submitting a GET request to the webpage results in the x-elements header containing the message “You got this message! How about you post, put, head and delete some elements to get the Really Full Convention document (DOC)?”

This message hints that solvers need to request information using some other methods. Submitting a request to the same page (no payload is required or processed) results in the below messages in the x-elements header.

The headers of each response to the various methods also contains an x-elements header, which contains a string — each of these header values have different operations applied to them, which result in an extract, as below.

MethodOperationMessageExtract
POSTAdd a letterFOOTER THEAD CENTER BASE HEADTHREE
HEADAdd a letter to the startSVG EMBED VAR EM NAVSEVEN
PUTChange a letterFO[R]NT D[E]IV MAI[D]N M[A]ETERNINE
DELETEDelete a letterSTRONGO NUL COLEONE

The puzzle clues RFC 3791, which is Secure Neighbor Discovery, or SEND, in brief.

Chat support

The chat box allows solvers to talk to a bot and get replies. The replies are a lightly modified game of Mastermind (or, if you will, Wordle), using the first letters of the words submitted by users. However, it replies to and in only the ten hundred most used words.

Fortunately, it’s not the brightest and will ignore any non-alphabetic input, and always respond. If the input includes uncommon words, then it will reply with “Sorry, I’m still learning and only know the ten hundred most used words!”

The chatbot checks the first letter of each word and responds using the following rules:

  1. If the letter is correct and the right position, add a 🌚 emoji to the response
  2. If the letter is correct but in the wrong position, add a 🌝 emoji to the response
  3. Otherwise, add a ❌ emoji to the response

Finally, the chatbot will add one of the following at random to the reply:

Arranging them in order of word length gives a clue, CHATAPP.

Using these rules, the desired input can be deduced to be any seven words whose initial letters spell MTPROTO. Submitting such a string will result in the message “Way to follow chat protocols! What’s the app for that, again?”

MTProto is the protocol used in the chat app TELEGRAM, the solution to this part of the puzzle, which can be confirmed in the chat box.


The webpage and email parts of the puzzle indicate that the parts should be used in order of website, email and chat, yielding the solution, SEND US A TELEGRAM.

Author’s note

Why this puzzle? I’ve used ISO 3166-1 in my work for a while now, so while browsing answers, I saw an opportunity to use it here! The rest sort of came together around this delightful reanalysis of USA.

After deciding to use ISO 3166-1, I looked for other protocols and standards which I could add as minipuzzles here. Fortunately, I was already aware of MTProto (and hopefully not too many people download and try to continue this puzzle using Telegram), and discovering RFC 3791 was fortuitous.

Turns out, the chat support part of this puzzle resembles a popular word-guessing game. This is entirely coincidental — I discovered Wordle in early January, long after this puzzle’s chatbot minipuzzle was conceived.