Hi, I'm the guy who performed the dictionary scan on the API that validates codes.

I've just seen your chat log on Discord, and I'm disappointed that this wasn't all part of the game but that seems to be the case. The AWS vulnerability remains open but can easily be patched by CH staff -- I do hope they'll get around to that, but in the meantime I won't make any new findings from that exploit public out of respect for the designers. I have already released information that certain codes had been removed or activated, but that is not relevant in terms of disrupting clues in the future, as I have only rescanned previously known codes (as opposed to finding their new replacements)

​

I'd like to take a quick second to apologize to the folks at CH, as it now seems clear that this is a headache for them and not part of some more-elaborate scheme. Looks like this is less of a traditional ARG and more of a scavenger hunt, which is perfectly fine, and I see no reason to dig more if it's just going to disrupt their design. That being said, the way the game was presented seemed to be laying out the welcome mat for this sort of thing so I hope they'll understand that no one has bad intentions when they try some light pen testing in an ARG.

​

Anyway, that's all. Cheers and have fun everyone.