Posted by & filed under /dev/random.

While testing the small python banner grabbing script I made a couple of weeks ago, I noticed some strange headers from the Norwegian newspaper VG:

$ ./pybgrab.py http://www.vg.no
[+] http://www.vg.no:
[!] No 'Server' header received, the response contained the following headers:
X-VG-WebServer: leon
Cache-Control: must-revalidate
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
X-VG-WebCache: dexter
X-Rick-Would-Never: Run Around and Desert You
X-VG-Korken: http://www.youtube.com/watch?v=Fcj8CnD5188
X-VG-SolveMe: uggc://jjj.it.ab/ynxfrgngg.cuc
Content-Length: 317406
Date: Fri, 04 Feb 2011 19:17:01 GMT
Connection: close
X-Cache: HIT
X-Cache-Hits: 578
X-Age: 387

Those are not exactly RFC2616 headers, to put it mildly. It contains a Rickroll, a youtube video of the VG Multimedia team in the famous sled ride “Korketrekkeren” in Oslo, and a riddle:

X-VG-SolveMe: uggc://jjj.it.ab/ynxfrgngg.cuc

The riddle is fairly easy to solve (hint: it’s a famous cipher). The solution leads you to a web page, but the last part of the riddle is missing; VG seems to have removed the bas64-encoded headers that contained the URL to a job ad for the newspaper. Hard times in the news industry maybe?

One Response to “Norwegian newspaper VG sports rick rolls and riddles in HTTP headers”

  1. Carsten

    Funny to see that the Google search ‘uggc://jjj.it.ab/ynxfrgngg.cuc’ is one of the top hitting this blog… Do you need any help solving this guys? :-)

    Reply

Leave a Reply

  • (will not be published)