1.1 Overlay Image

After the game was revealed, four Bungie devs made tweets, each including one image. We eventually found 12 images to overlay:

1. https://twitter.com/We_Are_Mida/status/1661514054693969921
2. https://twitter.com/cgbarrett/status/1661482466425831424
3. https://twitter.com/cgouskos/status/1661482066322788355
4. https://twitter.com/DrLupo/status/1661489310661500930 (from DrLupo’s physical mail)
5. https://twitter.com/DeejayKnight/status/1661512887590952960/photo/1 (from Deejay Knight’s physical mail)
6. https://twitter.com/Darkness429/status/1661490217373650944 (from Darkness429’s physical mail)
7. https://twitter.com/elliottgray/status/1661482440626688001
8. https://www.facebook.com/MarathonTheGame/photos/a.130184060070652/130183953403996/
9. https://yt3.ggpht.com/EcwOuzE3SBkcA6CzuZIRMBzLfQMQXgZSQVSFcaKkYemgYzDuZnEfJXXXpTAt-DeDX7x9kcaLqxqI=s1920-nd-v1 (from the YouTube page)
10. https://twitter.com/MarathonTheGame/status/1661488778354245633
11. https://twitter.com/MarathonTheGame/status/1661488778354245633

Overlaying them all in Figma gave us a cover cipher and text:

ANY UNAUTHORIZED
DISTRIBUTION OF THIS
ASSET IS SUBJECT TO
QUESTIONING AND/OR
DETAINMENT PER UESC
[
[
[ CODE 77 7.0904

If we interpret the punch card overlay as an IBM punch card (see 1.4.1 Punch Card Hint), then we get a link to secretsarewaiting.com, which redirected to https://www.youtube.com/watch?v=TFcXob5iu-0. This was a live stream which we had to wait for 7,777 viewers to get an update. While waiting, the stream said

LINK TRANSMISSION IN PROGRESS; TRANSFER UPON UPLOAD COMPLETION TO EXTERNAL URL “MARATHON_VIDOC.NEW”

Once reaching 7,777 viewers, the 1.2 ViDoc played.