Comment by teekert
Maybe add to title: “but is solved now”. Would have saved me some time thinking they might go somewhere.
Maybe add to title: “but is solved now”. Would have saved me some time thinking they might go somewhere.
Both of them were eventually decrypted. The decoy was a misdirection attempt to get people to shut up about the whole thing, since the original contained a passphrase that had been reused multiple times for Mojang's internal operations. But it only caused more people to go digging as they noticed the hash changed, along with an employee acting highly defensive about it.
They used "boxpig41" for the original and "thespicemustflow" for the decoy. Both of them contain the jar and assets for Minecraft 1.0, but the original also contained an ordinary copy of the Minecraft launcher, so that the files could used to run it during a live event even if internet access goes down, hence the larger file size.
Hmm that was a tricky one. I, er, solved it by truncation - a surprisingly effective trick for titles.
Thanks for the heads-up!