Re: The FBI wants your help - really !

[Paul Rubin]

Francois Grieu <fgr...@gmail.com> writes:
> http://www.fbi.gov/news/stories/2011/march/cryptanalysis_032911

I can't help wondering if this is some kind of puzzle the FBI is
presenting as a publicity device and/or recruiting tool. I do know that
the FBI has been showing up at security conferences saying they are
understaffed for dealing with cybercrime, and encouraging people at
these conferences to consider working for them. Maybe the crypto puzzle
is an attempt to find members of the public with an aptitude for that
sort of thing. I also remember that Bletchley Park did something
similar in WW2. IIRC they ran advertising looking for people who liked
crossword puzzles, among other things.

[Adam Palmer]

The main problem with decrypting texts from people that actually know what they are doing is that they require a key. Especially if this is coded with a personal encryption style. It could be that we can't decrypt it without that key.

[unanimatedew]

I understand that, but how many "street-smart-not-school-smart" people know to put a second parentetical correctly inside an outer parenthetical? Most of the college kids I go to school with don't do it properly. I just don't see someone as described thinking, or knowing, to logically state "(A(SM))," instead of "(A(SM)." This is why I see "(ACSM)."

On top of that, there's a little bit of handwriting study involved. I write in a very similar manner, and am used to looking at people's chicken scratch handwriting. Look at how the other "Cs" and "(s" are written throughout the whole letter, even with scribbles and such. The mentioned piece has surely got to be "(ACSM)."

[Gustavo]

I agree with you that since he was "Street Smart" he probably just made up his own encryption/shorthand and without having a clue into how we came up with it i think you could just be wasting your time. I think if they were able to release more information about this guy in regards to where he went, what he did, and who he talked to on a regular basis you might be able to gain some insight to what he is trying to write down. Plus without anything to base it on who can prove if anyones encryption is correct or not????

[Adam Palmer]

Agreed...we would need more personal information. But getting the FBI to release that will be a puzzle in itself. Ha

[Daniel Yee]

I'm the only one who this that all the "SE" is actually "5E"? The 5 is distinct when compared to how he writes the letter "S".

[Gustavo]

I think that is hard to determine between an S and a 5 since we can not look at the original document. Some factors that could affect how the letters came out is the writing surface that he used. Did he write on the paper folded in his hand, on his leg,or in a notebook. Obviously they were folded and in his pocket when they found him but what more do we know. There is also the writing utensil. Did he use a pencil or a pen? I am going back to the fact that since he was a high school drop out he probably didn't care how his handwriting looked so in analyzing these notes you will have to take both as a possibility. That goes for anything that looks similar. 2 and Z or 1 and I

[unanimatedew]

If you look at the photocopy of the notes, the second line alone, you have transcribed:

TFRNE NPTNSE NPBSE R CBRNSE NPRSE INC

However, in the copies, the "T" in NPTNSE, and the "I" in INC are handwritten as the same stroke. This guy makes sure to write his "I's" with a line on top and bottom, and his "T's" with the line on top. The single-stroke marks he makes in the written copy look like the 1's later. This is only confused when there seems to be a lower-case "f" and a lower-case "t" later...

[Val]

Solving what the "SE" represents, is the key to solving this thing. It appears 25 times on p.1 and 43 times on the other page.

[unanimatedew]

And that's assuming "P1" means "Page 1," and that the single stroke next to "P" means "1."

[brookshanes]

It may represent "SPACE" as in a space between words.

[Val]

that's exactly what i was thinking, since there are no visible spaces

[unanimatedew]

If it were true that "SE" = "SPACE," then wouldn't there be more? Otherwise those are really long words for an "average" person. Also, if you look close enough (or maybe I'm the only person who crams words together while writing) you can see some letter groupings, and where spaces seem they should be.

[Val]

yeah, it doesn't seem to apply in all cases.
99.84 could be a 8/4/1999? he was killed in june, but it could be a calendar entry for a future event?

[unanimatedew]

But it doesn't just say "99.84," it says "99.84.5." No hyphens, and I don't know people that say 84 thru 99 in terms of 99.84 (which would probably rule out May of 84-99).

[Val]

5 pm?

[unanimatedew]

If you're gonna analyze it in this manner, and your assumption in 8/4/99, why isn't there a "." between 8 and 4, (i.e. "99.8.4.5")? This is not the path to travel...

[Val]

The "SE" does seem to be some sort of pig latin designator. Also, there seems to be no SE phrases immediately following another letter S (SSE). So the phrase "TE" is applied in a SSE situation.

[Val]

If you were to write it out, you would write "August 4th". No comma. Who knows how this guy was thinking.

[unanimatedew]

Granted.

[TomDundee1]

I guess all is easy to translate:
and "99.84" is no date - it means with the "S" ---> "99.84 $" and is concerned to the Motels/Hotels in the center, he mentions in the line above (MTLSE HTLSE).
NMORE in the end of the line means "no more". The "N" always means "AND" and was just his simple knowledge of the language and hos way of "speaking", not a code... same he wrote sometimes not so fine words (like "ARSE" = asshole; PSESHLE = pisshole etc...), by this he often mixed too many "E" into the words, which was his way of understanding pronounciation...
He was just limited, same I am. So I can read all easy... ^^

[unanimatedew]

If the "N" always means "AND," how do you get "NO MORE" from "NMORE?" Wouldn't it stand for "AND MORE," given your decypher?

[Codebreaker]

yes, its not always AND of course... and WLD does not mean "wild", he meant "would", and often not used it very fitting...
WLD NCBE meant "this would be nice" - same he meant sometimes when he wrote NCBE only, he just expressed that it was nice for him with his simple words... (NICE BE....) same most of the text is mainly easy to understand, I guess...

[Codebreaker]

The first letter is more interesting....the second letter (starting with "All girls in panties...." (ALPNTE GLSE...) is less interesting, as it describes only some experiences/views... and its only a waste of time to tranlate all complete, as the FBI even does not give any reward....
so...good night...

[Nobody]

Perhaps you are right and that "SE"=SpacE, but he is leaving spaces after
"SE". Probably he is breaking his own rule by adding a space after "SE", to
make words easier to distinguish. If you are encoding letters, including
space, everything would look like a long series of letters and hard to read,
and after a while you become lazy and add a space after "SE", to make things
easier to read.

[kpass]

I'm not seeing that it's a given that this is English. Do you all have additional information?

Americans use the month-day-year format but that is not consistent worldwide.

Even someone using his own cryptogram would likely use a system likely easily memorized, to lessen the possibility of someone locating the code sheet, right?

[Nobody]

azdoc wrote:
> These notes are not that uncommon, growing up in St Louis we see this
> all the time. It helps to be from somewhere to understand.. One
> thought: (FLRSE PRSE ONDE 71 NCBE)
> florissant buss route 71
> (194 WLD'S NCBE)
> Minnesota Wild vs St Louis Blues hockey

If 71,74,75 are bus route numbers, then they usually have a destination, or
direction, like North/South, East/West. Here is an attempt at translation
with the following encoding:

SE=Space
ON=on? using?
DE=The
NCBE=Bus
PRSE=Road/Avenue?

(FLRSE PRSE ONDE 71 NCBE)
Florissant ? on the 71 Bus
Florissant Road/Avenue using the 71 Bus

(CDNSE PRSE ONS?E 74 NCBE)
CDN ? on ? 74 Bus
CDN Road/Avenue using ? 74 Bus

(PRTSE PRSE ONREDE 75 NCBE)

PRT ? on ? the 75 Bus
PRT Road/Avenue using ? the 75 Bus

I looked online for bus routes in the area, and found this link, however,
bus routes could be changed, or discontinued. I don't see bus route 71, and
searching online for "St. Louis bus route 71" shows that it once existed,
but now discontinued. Bus routes 74 and 75 still exist, but may have had
some changes.

http://www.metrostlouis.org

Under "Maps & Schedules", click on "System Maps", then "Downtown St Louis
Map".

Here is the link that mentions that Route 71 was discontinued. It says that
the route name was "Fourteenth Street". Looking at Google maps shows that
"Fourteenth Street" meets "Florissant Avenue", so PRSE most likely mean
"Avenue":

http://web.me.com/willvdv/chirailfan/stldate.html

[Jay]

I really do think more information is required about Ricky before anyone can decode these logically. We know he dropped out of school, but he could read and write,but how well? We are also told that he used codes like this since he was 4yrs. old, and that no one in his family can decipher them. That's odd isnt it? No one asked him when he was younger how he creates the codes?

What we also need to know about Ricky is what his background is. Has been arrested before and for what, did he seem to be doing something illegal or was he just in the wrong place at the wrong time? They say they found his body in a field, what roads are near that field? Is he from St. Louis or somewhere else?

When looking at the code for the first time, drugs never entered my mind. I subconsciously thought that alot of the numbers and "se" were dealing with cars, license plate numbers etc.. Maybe he was stealing cars, or car parts. Were the numbers directions to get somewhere, pick someone up etc..? Highways, freeways?

And if there is a key that he made to decipher it, then it will be pretty close to impossible to decode this. But I would imagine that if a key was needed that Ricky would have also had that in his pocket as well.

[Billy Curtis]

Maybe not....why would you have a copy of the key on you. It would be somewhere he could get it or maybe in several different places. Being a high school drop out doesnt mean much. On yahoo today was a 12 yr old that was questioning Einstein's theory of relativity he has Asperger's and is in college for astophysics. He taugh himself calculus, algebra, and geometry in two weeks when he was 6 or 7 yrs old. Ricky could have been the same way. I do agree we need more information. Copies of other things he has written, Photos of the original notes, and maybe even photos of his house. Need to see if there are folds in the paper that would change the way things look and what was causing that darker spot in the second page that has a rectangle shape to it. The smallest detil can be more important than what is showing on the pages we see.

[Jay]

I understand about what you are saying about him being super smart, and I did see the same article about the twelve year old, pretty amazing. In its same right, if he was using codes when he was 4, that to me is pretty impressive in itself, something that I think would definitely have caught the attention of someone in the family.

Still a lot of unknowns to the puzzle, that without them it may never be cracked. I'm sure the FBI has to have numerous solutions to it, but the fact that they are not satisfied with any of them is a bit odd.

The fact that they are hoping fresh eyes with know background information or access to any of the police reports etc..will crack the code is pretty absurd. Guess maybe they just want different ideas.

[Nobody]

Here is some background:

http://www.stltoday.com/search/topic/?k=%22ricky%20mccormick%22

The original stories are at the bottom which start with "From 1999". His
address was mentioned, "1400 Chouteau Avenue, Saint Louis, MO". If you look
at it in Google Maps, you will find that it's at the intersection of
Chouteau Avenue and 14th ST, so the numbers 71, 74, and 75 are bus route
numbers, with directions from his home to elsewhere.

[Nobody]

Nobody wrote:
> Here is some background:
>
> http://www.stltoday.com/search/topic/?k=%22ricky%20mccormick%22

This link from the above has slightly bigger and better picture than the one
at FBI site:

http://www.stltoday.com/suburban-journals/stcharles/news/crime/article_79d2a00f-c8c7-510e-a91b-47ff72d08d43.html

You need to click on the image to get the bigger picture, then the thumbnail
to get to the second note.

[Mad Madame M]

651 MTCSE HTLSE N CU TC TRS NMRE

651 MTCSE - 651 Mitshbishi
HTLSE N C - Hot license
HTLSE N C - hustling
UTC TRS - UTC trains
NMORE - No more

[Evawright]

The 194 WLD'S NCBE is (194 countries of the world map.) 194 recognized countries in the new world order.

[Evawright]

[Nestor]

On 3/30/2011 2:51 PM, Paul Rubin wrote:
> Francois Grieu<fgr...@gmail.com> writes:
>> http://www.fbi.gov/news/stories/2011/march/cryptanalysis_032911
>
> I can't help wondering if this is some kind of puzzle the FBI is
> presenting as a publicity device and/or recruiting tool. I do know that
> the FBI has been showing up at security conferences saying they are
> understaffed for dealing with cybercrime, and encouraging people at
> these conferences to consider working for them. Maybe the crypto puzzle
> is an attempt to find members of the public with an aptitude for that
> sort of thing. I also remember that Bletchley Park did something
> similar in WW2. IIRC they ran advertising looking for people who liked
> crossword puzzles, among other things.

It seems to be for real.

[unanimatedew]

I am sure they are busses. The problem is getting a bus schedule from 12 years ago. The current schedule is:
http://www.metrostlouis.org/PlanYourTrip/MetroBusPDFSchedules.aspx
And if you look at the "RED Line" (assuming "REDE" is red), the 75 rte and the 74 (there is no current 71) you see these lines are close, or connect, to the 1400 Chouteau address, connect to one another and near where his body was found.

RED Line: http://www.metrostlouis.org/Libraries/Metrobus_Maps/Map02031411.pdf

#74 Florissant (possible "FLRSE"?): http://www.metrostlouis.org/Libraries/Metrobus_Maps/Map74083010.pdf

#75 http://www.metrostlouis.org/Libraries/Metrobus_Maps/Map75031411.pdf

And all you have to do is look on mapquest for how these connect.

[unanimatedew]

In the lin the "71 route" hasn't been around since the '30s...long before this guy's time.

[adacrypt]

On Mar 30, 12:56 am, Globemaker <alanfolms...@cabanova.com> wrote:
> On Mar 29, 7:35 pm, Globemaker <alanfolms...@cabanova.com> wrote:
>
>
>
>
>
> > On Mar 29, 5:26 pm, Francois Grieu <fgr...@gmail.com> wrote:
>
> > >http://www.fbi.gov/news/stories/2011/march/cryptanalysis_032911
>
> > (MND MXNEA RSE-N-STA-YNRE)  (A(SM))
> > TFRNE NPTNSE NPBSE R CBRNSE NPRSE INC
> > PRSE N MRSE OPRE HLDWLDNCBE(TFXLEI TCXLNLBE)
> > AL-PRPPIT XLY PPIY NCBE MGK SEWCDRCBRNSEPRSE
> > WLD RCBRNSE NT OGNEN TXSE-CRSLE-CLTRSE WLD NCBE
> > (NO PFSE NLSRE NCBE) NTEGDDMNSENCURE RCBRNE
> > (TENE TFRNE NCBR TSE NCBE INC)

> > (FLRSE PRSE ONDE 71 NCBE)

> > (CDNSE PRSE ON SE DE 74 NCBE)
> > (PRTSE PRSE ON REDE 75 NCBE)
> > (TF NBCMSP SOLE MRDE LUSE TOTE WLD N INLD NCBE)
> > (194 WLD'S NCBE) (TRFXL)
>
> ---------------------------------------------------
> ALPNTE GSLSE - SE ERtE
> VLSE MTSE-CTSE-WSE-FRTSE
> PNRTRSE ON PRSE WLD NCBE
> N WLD XLRCMSP NE WLD STS ME XL
> DVLMT 6 TUNSE NCBE XL
> ---------------------------------------------------
> (AIU NSRSTEN MU NARSE)
> KLSE-LRSTE-TR SE-TRSE-MKSEN-MRSE
> (SAE6 NSE SE N MBSE)
> -------------------------------------------------
> NMNRCBR NSE PTE 2PTE WS RC BREEE
> 36 MLSE 74 SPRK SE 29KE NO8, OLE 173RTRSE
> 35 6LE CLGSE VUNVTREBKRSE PSESHLE
> 651 MTCSE HTLSE N CVTVTRS NMRF
> 99.85.S 2UNEPLSE VCRSE OLTSE NSKSE NB SE
> NSRE OVSE PVT SE WLD NCBE (3X0RL)
> ------------------------------------------------------
> PNMSE NRSE 1 N2 NTRLERCB RNSE NTSRCR6 NE
> LSPNSE N GSPSE MKSE R BSE N CBE AV XLR
> HM CRE N MRE NCBE 1/2 MUNDDLSE
> ----------------------------------------------------------
> D-W-M14HPL XDRLX
> ----------------------------------------
>
> Maybe road directions to hidden treasure/stash. That's my guess.
> Somebody please do letter frequency analysis.- Hide quoted text -
>
> - Show quoted text -

> Maybe road directions to hidden treasure/stash. That's my guess.
> Somebody please do letter frequency analysis.- Hide quoted text -

Letter Frequency Analysis.

74 x spaces
1 x apostrophe
12 x left calliper bracket
12 x right calliper bracket
6 x hyphen
2 x integer digit ‘1’
2 x integer digit ‘4’
1 x integer digit ‘5’
3 x integer digit ‘7’
1 x integer digit ‘9’
4 x uppercase ‘A
18 x uppercase ‘B’
24 x uppercase ‘C’
16 x uppercase ‘D’
56 x uppercase ‘E’
7 x uppercase ‘F’
3 x uppercase ‘G’
1 x uppercase ‘H’
6 x uppercase ‘I’
1 x uppercase ‘K’
19 x uppercase ‘L’
8 x uppercase ‘M’
45 x uppercase ‘N’
8 x uppercase ‘O’
17 x uppercase ‘P’
31 x uppercase ‘R’
31 x uppercase ‘S’
18 x uppercase ‘T’
2 x uppercase ‘U’
6 x uppercase ‘W’
6 x uppercase ‘X’
3 x uppercase ‘Y’

Total = 444 characters (mainly uppercase characters)

Even to a complete greenhorn attempt at cryptanalysis such as I am
only capable of, this frequency spread in all uppercase characters
suggests the thug is unaware of lexical frequency of characters - a
Kasiski / Babbage style attack would be worth trying by an experienced
person.

- adacrypt

[unanimatedew]

To expand upon this post, when I looked up the bus schedule I was trying to find any abbreviation that could match "NCBE" or similar. Assuming the "E" is "end," we deal with NCB. The #27 is the North County Shuttle, or what we'd probably call the NCB, North County Bus.

What I found more interesting is the Transfer Center info at the bottom of the page where they show the 75 as one of the transfer busses.

http://www.metrostlouis.org/Libraries/Metrobus_Maps/27Map112910.pdf

[jim atkins]

On Mar 29, 6:35 pm, Globemaker <alanfolms...@cabanova.com> wrote:
> On Mar 29, 5:26 pm, Francois Grieu <fgr...@gmail.com> wrote:
>
> >http://www.fbi.gov/news/stories/2011/march/cryptanalysis_032911
>
> (MND MXNEA RSE-N-STA-YNRE)  (A(SM))
> TFRNE NPTNSE NPBSE R CBRNSE NPRSE INC
> PRSE N MRSE OPRE HLDWLDNCBE(TFXLEI TCXLNLBE)
> AL-PRPPIT XLY PPIY NCBE MGK SEWCDRCBRNSEPRSE
> WLD RCBRNSE NT OGNEN TXSE-CRSLE-CLTRSE WLD NCBE
> (NO PFSE NLSRE NCBE) NTEGDDMNSENCURE RCBRNE
> (TENE TFRNE NCBR TSE NCBE INC)
> (FLRSE PRSE ONDE 71 NCBE)
> (CDNSE PRSE ON SE DE 74 NCBE)
> (PRTSE PRSE ON REDE 75 NCBE)
> (TF NBCMSP SOLE MRDE LUSE TOTE WLD N INLD NCBE)
> (194 WLD'S NCBE) (TRFXL)

This is simply a shorthand note with dialect. No code to break.
tene- then
tfrne - transfer
flrse - first
cdnse - continue
You can do this throughout the note given enough time. He simply wrote
a note in his shorthand with his dialect The ('s are groupings. The
note is not consistent and there are some mistakes but obviously it's
a shorthand note using a dialect. The 'se' ' is like firse, the 'ne'
is the n sound. He might have pronouced transfer- trasfern, he puts an
e at the end of his s and n sound.He put the s sound on the end of a
lot of words. He way of pronoucing if in the note Tiff. Tiff would
would be if and sorthanded to tf. Thank of cajun talking person using
shorthand.
What bothers me is why this is even out here.

[unanimatedew]

And even more expansion: I looked up the 36 (since 36 is one of the numbers in the second page of notes) and found that it too transfers to the 75. Not only that, but if you look at the top of the page you'll see the Christian Northeast Church, but back in 99 it the church had just acquired the 30 or so acres of land it now sits on, so it was open area. The reports say that his body was found on the corner of a field on an old dirt road off 367. I'm not saying he was found in this area, but it could be.

http://www.metrostlouis.org/Libraries/Metrobus_Maps/Map36031411.pdf

[unanimatedew]

One more expansion. The very last line has the number 4. The #4 bus passes where? 14th & Chouteau...right next to his house!

http://www.metrostlouis.org/Libraries/Metrobus_Maps/Map04031411.pdf

[BrianWallace]

This seems like a quite valid idea. For everyone who is just looking for cheap abbreviations, this guy has been writing codes that his family could not figure out for years. Also, the FBI, who is in the area, talking to everyone and looking at all the evidence hasn't cracked this in over a decade. Its not going to be cracked by simple frequency attack. Think outside the box, theres nothing that says he wanted anyone else in the world to read this, he likely only put enough information for him to know what it meant, and people who lived with him all his life would know about bus routes next to his house. I'm finding a hat that is remotely edible, so I can say, if its just abbreviations with "SE added to the end" I will eat my hat. You need to think as a cryptographer and as a detective. This is important so the FBI can get some more insight into his actions in his last 3 days alive.

[Greg]

Given that the victim suffered from chronic heart and lung problems (http://www.stltoday.com/news/article_bcc02074-5b1a-11e0-b199-0017a4a78c22.html) and that his last know whereabouts were the hospital, I would say that the page that has "NOTES" at the top looks a lot like a page from the pads that doctors and nurses use to take patients' exam notes. I would say that this page looks like he may have been taking notes from his last visit to the doctor, maybe to discuss organ transplantation. From the police description of his death, it could very well be from heart/lung failure.

Assuming he's not very educated, the notes are a kind of phonetic shorthand. The reference to 99.84 could have been his temperature. He refers to "dkrse", which could be an ill-formed shorthand for "doctors"

In the first line, the "ERtE" does not contain a "t" (look at his other T's which are all capitalized) indicates ER plus (+) E -- with ER possibly being the emergency room.

"PTE 2 PTE" is "point to point" or "patient to patient"

"651 mtcse htlse" = 651 matches heart lungs?

I don't know; just one way of looking at it.

[Thriller]

Forgive me for the length of this but try to stay with me and use "the google" as I describe.

All this seems to be centered on the Florissant area. And not the street but the neighborhood.

The cars and references to the #6 SAE socket wrench for the brakes on the 74S mercedes 3.6 liter SEL for 29000 dollars with a Mercedes Benz dealer serving Florissant neighborhood perhaps in the are (walking distance or on the transit route) SPRK which is St Ferdinand's Park in Florissant. And so forth, like the 6 liter engine Porsche and the 651 Mitshubishi, it all fits. An in Florissant, the Red Sox coach Al Nipper from Hazelwood which is covered in the news for Florissant.

Then there are the WLD references to Wildwood, on the route to Maplewood, and HLD could be Hazelwood, as one of his WLD writes as a MLD if you look at it. HLDWLD might be a bus route. Sprk is St Ferdinand Park

The n2 n trailer which leads you to the foreign auto parts store that has Croft's Trailer there could be relative. You could read the cryptic as "burns nitrogen" and n2 is nitrogen, but maybe the trailer company deals in truck trailers and not mobile homes.

VUNVTREBKRSE could be a reference to the University City REturn BacK Rock road to St louis airport but passing through Florissant which is near a Porsche dealer. Maybe a plan to test drive a Porsche?

And Pagedale bus rte goes to Maplewood and then you connect to Wildwood. Pagedale is right there next to University City, and you end up near Rockwoods south of Wildwood after changing bus routes. Maybe he had plants of maryjuwannna in the Rockwoods park? Or stole some and got killed?

You can't make this stuff up, he was from there, obviously not a coder so this is all personal mnemonics by a person who is clever and may have a very personal or psychological reason, or works for a bookie or deals in contraband.

The concrete stuff is hard to brush off, like that #6 SAE socket wrench and all the foreign cars. The Florissant bus is 36 but that is more likely a coincidence. Hazelwood School? Drugs maybe, could be a pitcher on the team or his girlfriend, what ever.

All I can say is that it would not be a secret if this fellow had a rap sheet so he could have been a person with a disability check and a yen for Foreign Cars. So of course, you might pick up some cash fixing them and need a #6 SEA for fixing the brakes.

Here is what I would do if I was a G-man: look at the background and see if there is any foreign cars or sports fanaticism. You know? a FAN? Of something.

Or go to Florissant and Hazelwood and see if the Wildwood connection creeps up, or University City. Or boosting foreign cars was a problem in those areas back in 1999. Florissant is just all over everything.

The NCBE connection to biotechnology between England and 1999 conference in St Louis was interesting, but Mr McCormick was no botanist. The Arab Lady Lawyer from UK from the Women, Law Development Foundation thing doesn't show she gave a paper in St Louis in 1999 but that Foundation had something going on then. And then there is the Al Queada handbook thing about using "cut outs" so he could have been a loose end as everything else in his background looks common and no police record. I mention it because there is another forum that I saw last night.

In that forum the person made very cogent and plausible connections to a Koranic prayer. Only thing, I can't find the prayer so s/he leaps further than I have to.

No, I like the Florissant consistency with foreign car outlets there and the connection with Al-PRPPIT for Al Nipper of Hazelwood. It works better than St Louis Place Park.

But this PRSE N MRSE OPRE HLDWLDNCBE(TFXLEI TCXLNLBE)really alarmed me. Pres and Mrs Pres or Pres HazelwoodWildwood and whatever NCBE is, then to TXL airport from London England And as in N and land as in L to TXL airport BErlin. Makes sense right? But that's what we have all been doing.

But now look at this: Four types of automotive wire are available for use in truck, trailer and marine applications. The GPT wire (SAE J1128-GPT) has a PVC jacket. SXL (SAE J1128-SXL), GXL (SAE J1128-GXL), and TXL (SAE J1128-TXL) have a cross-linked polyethylene jacket that is resistant to oil, grease, gasoline and acids. All are stranded bare copper construction. http://maps.google.com/maps?q=automotive+wire,+st+louis,+MO&um=1&ie=UTF-8&sa=N&hl=en&tab=wl

Maybe I just correlated the SXL GXL and TXL after searching the SEA 6 thing.

Look it up, and you get outlets in Florissant, CrossKeysAuto and the Firestone AutoCare, and there is an Emerson Wire Company in Florissant. Also Precision Restorations on Forest Avenue (and if you google the N2 N TRLER CB you get the Central West End Association's Map which coordinates N2 and lands you at Chase Park Plaza. Well, just down the street is Reliance Automotive. WOW! In fact there is another place on Hanley Rd. All from Forest Park vicinity.

All these bus routes correlate to cars and tools, while the SXL and GXL and TXL, and GPT and SAE alphabet soup is beyond coincidental. The man had a list of cars and tools and trailer related wire with several trailer and car places.

So, I need to test this. I go do the google to the 194 thing in St Louis, MO and then I go back to the search again typing in the W of the WLD'S and right away it asks me Washington? and I go, enter. Then I get 194 Washington in Florissant and also some other choices, street or aveenu, choices like that. And there it was: The corner of North Vanedeventer Ave. It looked familiar: 35 6LE CLGSE VUNVTREBKRSE PSESHLE and so I googled it all except I substituted venedeventer, nothing. I substitute porsche, nothing and then I added St Louis, MO and it's there.

But it isn't north, it is South Vandeventer and it's a trailer truck company! Vandeventer Truck Sales and it is just near Chouteau Ave. where Mr McCormick lived.

Again, too many hits abound on the same thing and the other N2 N TRLER CB showed a former Chase Bank in the Borough or Neighborhood of Vanedeventer.

SO I think the poor man was going from one place to the next looking for the trucking company and by the time he got it right, a few people, perhaps just one, perceived he had money to buy car parts and he was killed for the money.

All the other stuff like TFRNE NPTNSE NPBSE R CBRNSE NPRSE INC is hard enough but look at the man's writing, NPTNSE shows he uses S for street a lot and he ends every word with E, but it isnt NPTNSE at all. It is N8TNS and when you go to his house and look up the street (google maps) South 18th St is the next cross street. N for St or South 8 T pronouced Tee and N for St or .8tn St South.

(MUNSAISTENMUNARSE)looks the same way problematically. MUN and that N is MU. and you see it at the end of a sentence as with E at the end of a word.
MU.SAISTE.MU.ARSE could be MU.5a 15th. or Meet U. at 5Am 15th. then MU.ARSE AR5E?

So here is my thought. Both notes are mostly unrelated, the later note is the one where he goes to Vandeventer and finds (or thinks he finds) out that it is not a street. Maybe he went to an ATM with his card or card of another. He heads for North Vandeventer until he finds out that the place he is looking for is a mile from where he lives. ANd the automotive wire is on the earlier note, the car parts and wrench are on the Vandeventer page.

He goes up to Page or down Delmar and when he finds out, he heads back or decides to go to Imo's Pizza heading out from a bank northwest instead of southeast. Whatever, and Imo's just because it is one of a few eating places up in that part where maybe he goes. It was a plan he could refer to and perhaps he made a wrong turn and headed north on Vanderveter and then turned around. Again whatever, these notes were so he could get his bearings if he was in walking distance. Does anyone know if he had a bicycle?

I am well satisfied that all of this personal cryptic code is just something he did since a kid and it made him seem very smart to others. And he was or he would not have been so good at it.

Here is a person who could not really read English at all and made a good effort to cover it up. So he could read his own writing and it made sense to him. But was not a shared script. That's all. Another wonderful creation victimized to death.

People do not wander into empty fields to die. He was put there and by a person who knew it would be a while before he would be noticed there and perhaps knew him and that no one would miss him for a long time.

Anyone caring to follow my stream of conscious here, let's pray for the man. We got to know him, maybe he had a bad side, but he seemed to be into sports, and cars and maybe just tried to get through the day with food and clothing and a roof.

My final observation is the consistent WLD and CB and the HLD and then LD. I am going to gues that it is the Mormon Church on Howdershell Road, and that CB means a church is Wildwood. He may have been going to AA or getting food for attending religious classes, or getting food from a couple of food pantries.

So the infamous NCBE is .church. If the HLD for Hazelwood and LD for LDS and NCBE for Church then it is the Hazelwood LDS Church and all the other NCBE is that E is the end or space or break and N is just an idiosyncratic think. Maybe to Capitalize C in Church. And you do not see WLD LD Church because there isn't one, Maybe Kirkwood, and if you look at the Mormon directory to see what the LDS and Community of Christ addresses are, you get to see why he had all those overlapping bus routes. http://yellowpages.aol.com/search?query=Churches-Church+Of+Jesus+Christ+Of+LDS&area=Wildwood%2C+MO&invocationType=localTopBox.search and you see "near" Wildwood but not in Wildwood. Two in Hazelwood, and one on Page Ave nearby the Vandeventer Neighborhood.

Just in case he was a Latter Day Saint, I am definitely praying for the man's soul.

Hopefully you will see I have worked the angle suggested by many that this was no code, just his way of making up for not being able to read and write standard English.

Thanks,

THRILLER

[Lisa Jezierski]

WLD N INLD = would not include?

CBRNSE NPRSE INC = Corbin Enterprise Incorporated?

NO PFSE NLS = No professionals

[just4tests]

(194 WLD'S NCBE) (TRFXL)

Could be the followings:

1. "194 WLD" = a container number
2. "TRFXL" = TRAIN FXL

So it could mean that 194 WLD container is on FXL Train.

[Jonathan Wilson]

Nobody wrote:
> azdoc wrote:
>> These notes are not that uncommon, growing up in St Louis we see this
>> all the time. It helps to be from somewhere to understand.. One
>> thought: (FLRSE PRSE ONDE 71 NCBE)
>> florissant buss route 71
>> (194 WLD'S NCBE)
>> Minnesota Wild vs St Louis Blues hockey
>
> If 71,74,75 are bus route numbers, then they usually have a destination, or
> direction, like North/South, East/West. Here is an attempt at translation
> with the following encoding:

Remember that you need to look up the bus route as it would have been at
the time the note was written, not the current routing of those buses (if any)

[adacrypt]

On Mar 30, 3:19 pm, Globemaker <alanfolms...@cabanova.com> wrote:
> On Mar 30, 9:26 am, upsarin <valad...@tut.by> wrote:
>
> > SE-? BSE-?
> > NCBE-? WLD-?
>
> > why amost words ending in SE?
> > many combinations - with SE,RSE, NSE, SE, NRSE, MRSE etc...
> > many combination with BE,NE,TE,KE and etc in the ending words.
> > Symbol - “()-”  make sense?
>
> > graphic presentation of letters:http://xmages.net/storage/10/1/0/b/2/upload/84f59116.jpg
>
> The thug heard about the letter "E" being very frequent in English
> language sentences, so he puts the letter E into his coded messages
> where NOT needed, so it seems more correct in the wrong ways. Fool, he
> does not know with whom he is dealing. It is almost 11am, are you
> ready to call Mr. Van Knofpt?
>
> The parentheses are a memory aid to the thug. He tends to forget
> things after two wild parties.

This to me is a classic example of randomness at work. I don't think
the victim is capable of writing a cipher per se but it his own tinpot
way has managed somehow (personal shorthand seems the most plausible)
to give randomness to his encrypted ciphertext. Even if the key is
not equal to the messagelength (as per the proper requirements for
thoeretically unbreakable class) he has managed to create ciphertext
such that the plaintext string is one of several hundred at least
(could be 444 if all requirements were ideally met i.e. the key is
random and is equal to the messagelength). Let us say that the key is
only part of the messagelength, because the message is quite short
there is little chance of unicity theory being applied being and there
is still a large possibility space of likely plaintext strings.

I believe that this cipheretext is theoretically unbreakable by happy
coincidence (for the victim).

You have demonstrated a few of the elements of the possibility space
of plaintexts already but you could be at it for the rest of your life
and end up with total uncertainty (Shannon) of what the correct
plaintext string is. - adacrypt

[Globemaker]

On Apr 1, 3:21 pm, adacrypt <austin.oby...@hotmail.com> wrote:
> You have demonstrated a few of the elements of the possibility space
> of plaintexts already but you could be at it for the rest of your life
> and end up with total uncertainty (Shannon) of what the correct
> plaintext string is. - adacrypt

SERBS

SERBS 3 lines from end.

whole words in code : SERBS STAY NEAR TO NO TENET! BET ON EON SEER.
SEW EAR, SET CURE.

correctly abbreviated elements : U, Pt, N, B, C, Sm, H, S, I, Se, K,
Al, P, Pr, Nd, Np, W, O, Ne, V, Tc, etc...

(MND MXNEA RSE-N-STA-YNRE)  (A(SM)) 
minimum distance and maximum nearness experiments of radiation sensor
tables ready,
asssemble device saturday morning

TFRNE NPTNSE NPBSE R CBRNSE NPRSE INC 

test free nuclear energy plutonium nearness sensor. neptunium bombs
exptreme radiation can burn sensor, need president in carbon

PRSE N MRSE OPRE HLDWLDNCBE(TFXLEI TCXLNLBE) 

president not morose on press. hold wilderness nuclear container
beryllium.
teraflux late connection lining loads of beryllium

AL-PRPPIT XLY PPIY NCBE MGK SEWCDRCBRNSEPRSE 

allright, president pre-paid it crossly, pre-pay nuclear container
beryllium, making sewer clandestine device, recommend brawns encircle
president

WLD RCBRNSE NT OGNEN TXSE-CRSLE-CLTRSE WLD NCBE 

wilderness remote control brawns not opposed going east now, transfer
sensor chromium selenium-combined, later release wilderness nuclear
container beryllium

(NO PFSE NLSRE NCBE) NTEGDDMNSENCURE RCBRNE 

no! prefabricated sensors of netherland source replacing nuclear
container beryllium

(TENE TFRNE NCBR TSE NCBE INC) 

believe france nuclear brats expect nuclear container beryllium in
carbon

(FLRSE PRSE ONDE 71 NCBE) 

full report on sensor wanted by president on december 1971, include
nuclear container beryllium

(CDNSE PRSE ON SE DE 74 NCBE) 

clandestine president on september to december 1974 on nuclear
container beryllium

(PRTSE PRSE ON REDE 75 NCBE) 

pretense of president on readiness for 1975 nuclear container
beryllium

(TF NBCMSP SOLE MRDE LUSE TOTE WLD N INLD NCBE) 

too facile, not believed, commanders speech only misrepresented a
loosers wilderness, not inpressed with nuclear container beryllium

(194 WLD'S NCBE) (TRFXL) 

194 days until wilderness nuclear container beryllium true full
explosion

ALPNTE GSLSE - SE ERtE 

alpha particles glazed sensor - evacuated route east

VLSE MTSE-CTSE-WSE-FRTSE 
valise materials explosive - contain sensors - will send experts from
transpo security

PNRTRSE ON PRSE WLD NCBE 

pulsed nuclear resonance trashed sensor on president's wilderness
nuclear container beryllium

N WLD XLRCMSP NE WLD STS ME XL 

in wilderness extremely large containment explosion! need wilderness
sanitationists to get me extracted

DVLMT 6 TUNSE NCBE XL 

dead:5 loose mountain tunnel, 6 tons encased nuclear container
beryllium, need extraction

--------------------------------------------------- 
(AIU NSRSTEN MU NARSE) 

as i understand no senior senator must know about our sensor

KLSE-LRSTE-TR SE-TRSE-MKSEN-MRSE 
cleanse, lay to rest every senator who troubles to make sense of
morose

(SAE6 NSE SE N MBSE) 

set about eliminating 6 not seven senators. must be secretive

------------------------------------------------- 
NMNRCBR NSE PTE 2PTE WS RC BREEE 

new mexico nuclear reserve can break in september 2 1999. plutonium
explosive weapons receive breaking every emergency exigence

36 MLSE 74 SPRK SE 29KE NO8, OLE 173RTRSE 

$36 million sent to 74 south park, sensor 29 kiloton energy november
8, open lead at route 173 routinely secured

35 6LE CLGSE VUNVTREBKRSE PSESHLE 

route 35 sixth left, closing surveillance vulnertability berkshire
person unreliable

651 MTCSE HTLSE N CVTVTRS NMRF 

651 mitchel's hotel in converting nuclear material ready to fire

99.84.S 2UNEPLSE VCRSE OLTSE NSKSE NB SE 
code 998452 un place volcanic release on long timers nuke the suckers
never been sensible

NSRE OVSE PVT SE WLD NCBE (3X0RL) 

ensure overlords prevent sensor wilderness nuclear container beryllium
three times ordinary length

------------------------------------------------------ 
PNMSE NRSE 1 N2 NTRLERCB RNSE NTSRCR6 NE 

plan must not release one un national tribal leader capable of
response not senior cronies not any.

LSPNSE N GSPSE MKSE R BSE N CBE AV XLR 

later response not guessed presume killing serbs not criminal behavior
extremely ludicrous

HM CRE N MRE NCBE 1/2 MUNDDLSE 

human cremation and more nuclear container beryllium half the world
destroyed ala serbia!
---------------------------------------------------------- 
D-W-M14HPL XDRLX 
do what mi 4 has planned, xtreme danger lurx

[adacrypt]

A salient thing to me is the strength of not having any structure in
his algorithmic data which the victim has unwittingly achieved - if
anything is to be learned from this it is the fact that mathematics
(having strongly discernible structure at all times no matter how it
is transformed) is anathema to cryptography and must never be used -
numbers as codepoint markers yes, inductive numbers from traditional
number lines - no.

adacrypt

[Mary]

I think the most important fact here is that the man was a high school
dropout who no one claims was gifted in mathematics. This fact alone
rules out any high level cipher -- I once tried presenting the basics
of RSA to a freshmen calculus class -- it didn't go well. The lack of
any table, written key, or failed attempts at encrypting in the
victims possession (or in his house) rules out Vigenere ciphers as
well as any other complex transposition or substitution ciphers --
unless the key were included in the cipher text. Without more
information I believe this code is unbreakable (if it is a code at all
and if the message has meaning). For what they are worth, the
following are my observations:

There is only one instance on the letter H in the cipher text yet H is
the 4th most frequent consonant in the English language (after N, T,
and S). Other consonants like R, C and P which should be rarer occur
far more frequently. This combined with the above mentioned lack of a
key and of mathematics training suggests to me one of the following:
1. large portions of the cipher text are not portions of the plain
text but rather noise or components of the cipher.
or
2. The plain text is non-English or derived from a small subset of the
English language (possibly abbreviation).

Among others the combinations: WLD, NCBE, PQSE, and PRSE occur far too
frequently to be written off as common language or random. These
combinations are likely indicative either of the cipher, or are
abbreviations for particular words, people or places.

In the 9th, 10th and 11th lines the character sequences ONDE71,
ONSE74, and ONREDE75 respectively occur, each followed by the NCBE
combination. The subtle differences between the three may give insight
into the victims method of encryption (or of abbreviation)

This is a reach, but the character sequence RGLSNE in the 6th line
caught my eye because it is preceded by RLSE and U which is identical
only missing the G and N. If there is a key hidden in the algorithm
this may be part of it.

If anyone knows more about the victim (names of his friends, where he
worked, what languages he spoke, etc.) that would be appreciated and
may help to crack the code (if it is a code)

Sorry for writing so much, I hope this helps someone else in cracking
this thing, or that it leads to the release of more detailed
information about the victim.

[Gui Rio]

Maybe letter S isn't a S but a 5

[Sam]

I think (ACSM) but not (A(SM))

ACMS - is the first key, that can be read as SCAM (3214)
second key (4123)

ALPNTE GSLSE - SE ERtE = PLan get l[SE-SE] tree
1/2 munddIse = 1/2 numd side

Just try to check it

First page can say how decode page 2.
More info in Russian : http://freehabr.ru/blog/algorithm/358.html
I hope this helps

[Francois Grieu]

http://www.fbi.gov/news/stories/2011/march/cryptanalysis_032911

[Globemaker]

On Mar 29, 5:26 pm, Francois Grieu <fgr...@gmail.com> wrote:
> http://www.fbi.gov/news/stories/2011/march/cryptanalysis_032911

(MND MXNEA RSE-N-STA-YNRE) (A(SM))

TFRNE NPTNSE NPBSE R CBRNSE NPRSE INC

PRSE N MRSE OPRE HLDWLDNCBE(TFXLEI TCXLNLBE)

AL-PRPPIT XLY PPIY NCBE MGK SEWCDRCBRNSEPRSE

WLD RCBRNSE NT OGNEN TXSE-CRSLE-CLTRSE WLD NCBE

(NO PFSE NLSRE NCBE) NTEGDDMNSENCURE RCBRNE

(TENE TFRNE NCBR TSE NCBE INC)

(FLRSE PRSE ONDE 71 NCBE)

(CDNSE PRSE ON SE DE 74 NCBE)

(PRTSE PRSE ON REDE 75 NCBE)

(TF NBCMSP SOLE MRDE LUSE TOTE WLD N INLD NCBE)

[Globemaker]

---------------------------------------------------

ALPNTE GSLSE - SE ERtE

VLSE MTSE-CTSE-WSE-FRTSE

PNRTRSE ON PRSE WLD NCBE

N WLD XLRCMSP NE WLD STS ME XL

DVLMT 6 TUNSE NCBE XL

---------------------------------------------------
(AIU NSRSTEN MU NARSE)

KLSE-LRSTE-TR SE-TRSE-MKSEN-MRSE

(SAE6 NSE SE N MBSE)

-------------------------------------------------
NMNRCBR NSE PTE 2PTE WS RC BREEE

36 MLSE 74 SPRK SE 29KE NO8, OLE 173RTRSE

35 6LE CLGSE VUNVTREBKRSE PSESHLE

651 MTCSE HTLSE N CVTVTRS NMRF

99.85.S 2UNEPLSE VCRSE OLTSE NSKSE NB SE

NSRE OVSE PVT SE WLD NCBE (3X0RL)

------------------------------------------------------
PNMSE NRSE 1 N2 NTRLERCB RNSE NTSRCR6 NE

LSPNSE N GSPSE MKSE R BSE N CBE AV XLR

HM CRE N MRE NCBE 1/2 MUNDDLSE

[biject]

maybe it not really a cipher but short hand.
When I was in school I hated writing but would take
notes when trying to write something fast. I could
study from them if I used the notes in the next day
or two. But if I waited more than a week I could
not read my on notes. I suspect this is something
like that. Its not encryption just fast short hand
for notes that he would use quickly. The guy
himself most likely could not read the notes enough
to understand what he wrote if the notes a month old.

David A. Scott
--
My Crypto code
http://bijective.dogma.net/crypto/scott19u.zip
http://www.jim.com/jamesd/Kong/scott19u.zip old version
My Compression code http://bijective.dogma.net/
**TO EMAIL ME drop the roman "five" **
Disclaimer:I am in no way responsible for any of the statements
made in the above text. For all I know I might be drugged.
As a famous person once said "any cryptograhic
system is only as strong as its weakest link"

[WTShaw]

388 Characters from Set26:
abcdefghijklmnopqrstuvwxyz

e 72 18.50899742930591%
s 61 15.681233933161954%
n 39 10.025706940874036%
r 37 9.511568123393316%
l 28 7.197943444730077%
t 25 6.426735218508997%
m 18 4.627249357326478%
c 16 4.113110539845758%
p 14 3.5989717223650386%
b 12 3.0848329048843186%
v 10 2.570694087403599%
d 9 2.313624678663239%
k 7 1.7994858611825193%
w 7 1.7994858611825193%
x 7 1.7994858611825193%
u 6 1.5424164524421593%
a 5 1.2853470437017995%
o 5 1.2853470437017995%
h 4 1.0282776349614395%
g 3 0.7712082262210797%
f 2 0.5141388174807198%
i 1 0.2570694087403599%

Order is esnrltmcpbvdkwxuaohgfijqyz
Highest Percentage is 18.50899742930591
1/20th Highest Value is 0.9254498714652956
388 Characters from Set26:
abcdefghijklmnopqrstuvwxyz

eessnnrrllttmmccppbbvvddkkwwxxuuaaoohhggffiijjqqyyzz

ee
ee
ee
eess
eess
eess
eess
eess
eess
eessnnrr
eessnnrr
eessnnrr
eessnnrrll
eessnnrrlltt
eessnnrrlltt
eessnnrrllttmmcc
eessnnrrllttmmccppbb
eessnnrrllttmmccppbbvvdd
eessnnrrllttmmccppbbvvddkkwwxxuuaaoohh
eessnnrrllttmmccppbbvvddkkwwxxuuaaoohhggffii

eessnnrrllttmmccppbbvvddkkwwxxuuaaoohhggffiijjqqyyzz

[Globemaker]

(MND MXNEA RSE-N-STA-YNRE) (A(SM))
reminder; mexican dope reserved in station at saint louis mo

TFRNE NPTNSE NPBSE R CBRNSE NPRSE INC

train from north east, next place train south east, are crammed
beneath south east n-word person incorporated

PRSE N MRSE OPRE HLDWLDNCBE(TFXLEI TCXLNLBE)

person Morse has been required to hold wild party in central Balwin
Transfer extra load to clubhouse in Lower Baldwin Missouri

AL-PRPPIT XLY PPIY NCBE MGK SEWCDRCBR NSEPRSE

Albert- Property extra large property in central baldwin, making sewer
cached receive brothers narco stuff in personal exchange

WLD RCBRNSE NT OGNEN TXSE-CRSLE-CLTRSE WLD NCBE

wild party received bronze net of golden texas chronix load trash
exchange at wild party "aNd Cache Bulk in East st. louis"

(NO PFSE NLSRE NCBE) NTE GD DMNSEN CURE RCBRNE
New Orleans personal finance new loads received "aNd Cache Bulk in
East st. louis" new texas gold, deliver monsen dope received a burn

(TENE TFRNE NCBR TSE NCBE INC)

have to fry new guy and cover body remains, total soul enflamation
"aNd Cache Bulk in East st. louis" impossible

(FLRSE PRSE ONDE 71 NCBE)

find larsonny person on route 71 "aNd Cache Bulk in East st. louis"

(CDNSE PRSE ON SE DE 74 NCBE)

city delivery in South East , deposite rt 74

(194 WLD'S NCBE) (TRFXL)

route 194 wild party "aNd Cache Bulk in East st. louis" transfer extra
large!
frequency analysis
esnrltmcpbvdkwxuaohgfijqyz  question
etaoinshrdlucmfwypvbgkqjxz  english
======p-v-k---x
--aoi---h-
Conclusion: not substitution cipher, abbreviations of catch phrases.
Initials of suspect PVK. Paul Van Knofpt. Address 194 Baldwin Street,
East St. Louis , call him at 1-618-194-7475 after 11am.

[shiba...@hotmail.com]

On Mar 29, 5:26 pm, Francois Grieu <fgr...@gmail.com> wrote:
> http://www.fbi.gov/news/stories/2011/march/cryptanalysis_032911

I think they are busses or freeways...71,74,75. some kind of notes on
items he wanted to keep seperate...maybe he was out looking at cars.

[Jean-Marc Desperrier]

Globemaker wrote:
> TFRNE NPTNSE NPBSE R CBRNSE NPRSE INC
> train from north east, next place train south east, are crammed
> beneath south east n-word person incorporated

You seem to have forgotten to transcript NPBSE, which using the same
logic would be : "next place bus south east". "buS east" is a possible
second best choice.

I'm really impressed with your result, you seem to have convincingly
broken this in just a few hours (there's just a few words that can be
said to be still slightly dubious). Now did the FBI really put it's best
cryptographic men on this ?? Or did they in fact already find a similar
result but were not convinced that was it, because of the
irregularities, letter inversion, etc. But given the profile we have of
the author, a stenographic system with a bit of "randomness" fits the
bill completely.

[kg]

Jean-Marc Desperrier <jmd...@gmail.com> wrote:
>I'm really impressed with your result, you seem to have convincingly
>broken this in just a few hours

Why am I confused about who's joking and who's missing the joke here?

--
kg

[upsarin]

[Globemaker]

On Mar 30, 9:26 am, upsarin <valad...@tut.by> wrote:

The thug heard about the letter "E" being very frequent in English

[unanimatedew]

Just a small note: When I first looked at the notes I thought the far right piece was (ACSM), not (A(SM)).

[Douglas Eagleson]

On Mar 29, 5:26 pm, Francois Grieu <fgr...@gmail.com> wrote:
> http://www.fbi.gov/news/stories/2011/march/cryptanalysis_032911

ALPNT -plain text opposite.

TFRNE - key text.

Rotate right the number of letters of the key.

6
20
8
12
21

A- G
L- F
P- x
N- z
T- o

Now shift right x places.

X- 2

G- H- I
F- G- H
x- Y- Z
Z- A- B
o- P- Q

Now scatter search for a word.

BIHQZ- Birthday Quiz

RT
UI

EGLSE -cipher test
N9TSE - key text

12
9
6
7
21

E- Q
G- P
L- R
S- z
E- Z

shift x(2 places) places to right

Q- S
P- R
R- T
Z- B
Z- B

STRBB- Street baybe

Making the id of the baybe the phrase in brackets. marked by a line to
"N9". SO Birthday directly the phrase.

(MNDNKNEAPSE-N-S-M-knare)

MINDN SPEAEKEN

NS McNair

Making everything in () a birthday phrase.

JUST A trial run, but the birthday attack is the method of encryption.

[Globemaker]

On Mar 30, 11:06 am, unanimatedew <unanimatedart...@gmail.com> wrote:
> Just a small note: When I first looked at the notes I thought the far right piece was (ACSM), not (A(SM)).

Yes, the parentheses on the first line also baffled me for several
seconds. But during the ensuing times of staring, the built-in visual
brain functions automatiacally interpretted the scratchings-out and
scribbled retracings as being nested parentheses. Here are variations
that come to mind:
'(ACsmj)'
"{'A(sm)}"
(A(5in.j\)..)
'(AC5mjU)

Without context from FBI background knowledge, the imagination is
allowed to innovate without restraint, brainstorming possible
paragraphs out of a hundred possible stories to fabricate. So my
proposals are not serious, just completed to possible fruition status.

[retsirof]

I find these notes very interesting and I must say i don't see anyone here getting close to figuring this thing out. However I have made a few observations that may help.

First 71,74 and 75 are all highways that converge in Cincinnati...about 250 miles from St. Louis.

Second the section containing those numbers seems to be directions and the frequency that CBNE is used might help someone decode this message

It appears to me that the majority of words end in the letter E. This makes me think he may be using a pig latin type coding in combination with some other type of coding. However it looks to me as though who ever wrote this wrote it with some fluidity and could make these translations on the fly in his head.

Just food for thought.

[Derik Patton]

WLD N CBE
WLD R CBR
WLD'S N CBE <-- this one stands out as it is the only ' in the note.

These are the most recurring sections of the note, breaking this will more than likely open the note up more.

Though I hardly doubt WLD stands for "Wild Party"

[azdoc]

These notes are not that uncommon, growing up in St Louis we see this all the time. It helps to be from somewhere to understand..
One thought:

(FLRSE PRSE ONDE 71 NCBE)

[Inside (rus)]

sounds close...

[mattley35]

Interstates 71, 74 & 75 all meet up in Cinncinati not far from St. Louis. Maybe this is near whatever the note speaks of is referring to.

[offlimi...@gmail.com]

I don't pray, and I surely don't pray for the dead.

How come nothing here mentions 17th street or Cole street? Also nothing here mentions the driver saying he is driving under the 6 ton limit east? You also didn't say nothing about where the driver was told to park the trailer. 🤔

[Andy]

The guy couldnt read or write.