After the game was revealed, four Bungie devs made tweets, each including one image. We eventually found 12 images to overlay:
- https://twitter.com/We_Are_Mida/status/1661514054693969921
- https://twitter.com/cgbarrett/status/1661482466425831424
- https://twitter.com/cgouskos/status/1661482066322788355
- https://twitter.com/DrLupo/status/1661489310661500930 (from DrLupo’s physical mail)
- https://twitter.com/DeejayKnight/status/1661512887590952960/photo/1 (from Deejay Knight’s physical mail)
- https://twitter.com/Darkness429/status/1661490217373650944 (from Darkness429’s physical mail)
- https://twitter.com/elliottgray/status/1661482440626688001
- https://www.facebook.com/MarathonTheGame/photos/a.130184060070652/130183953403996/
- https://yt3.ggpht.com/EcwOuzE3SBkcA6CzuZIRMBzLfQMQXgZSQVSFcaKkYemgYzDuZnEfJXXXpTAt-DeDX7x9kcaLqxqI=s1920-nd-v1 (from the YouTube page)
- https://twitter.com/MarathonTheGame/status/1661488778354245633
- https://twitter.com/MarathonTheGame/status/1661488778354245633
Overlaying them all in Figma gave us a cover cipher and text:
ANY UNAUTHORIZED
DISTRIBUTION OF THIS
ASSET IS SUBJECT TO
QUESTIONING AND/OR
DETAINMENT PER UESC
[
[
[ CODE 77 7.0904
If we interpret the punch card overlay as an IBM punch card (see 1.4.1 Punch Card Hint), then we get a link to secretsarewaiting.com, which redirected to https://www.youtube.com/watch?v=TFcXob5iu-0. This was a live stream which we had to wait for 7,777 viewers to get an update. While waiting, the stream said
LINK TRANSMISSION IN PROGRESS; TRANSFER UPON UPLOAD COMPLETION TO EXTERNAL URL “MARATHON_VIDOC.NEW”
Once reaching 7,777 viewers, the 1.2 ViDoc played.