Wednesday, July 10, 2013

Anticipating Adventurrito!

This is probably old news by now, but if you haven't already heard of the Chipolte Adventurrito contest, they're trying really hard to keep things "under wraps"  (groan).

When I visited their website, my unyeilding JavaScript geek had to know what kinds of frameworks and libraries they were using on the site (jQuery and SWF - yawn). As I was examining things using Chrome's Developer Tools, I noticed that there was a line of JavaScript that effectively gives away all of the names of the 20 daily challenges.



If you're interested, here's the list of puzzles:

    "id":1,"name":"Pig-spiration Point"
    "id":2,"name":"Ye Olde Mappe Shoppe"
    "id":3,"name":"The Dine-in Hall"
    "id":4,"name":"CMG-TV"
    "id":5,"name":"The F.Y.I. Freeway"
    "id":6,"name":"The Live-stock Exchange"
    "id":7,"name":"A Quiet Mountain Town"
    "id":8,"name":"Open Pasture"
    "id":9,"name":"CHIP Radio Tower"
    "id":10,"name":"The Shady Internet Café"
    "id":11,"name":"Cow Country"
    "id":12,"name":"Free Range Press"
    "id":13,"name":"Culinary Secret HQ"
    "id":14,"name":"Museum of Naturally Raised History"
    "id":15,"name":"Carnitas Call Center"
    "id":16,"name":"Farm and Charm School"
    "id":17,"name":"E-potle"
    "id":18,"name":"E-potle"
    "id":19,"name":"Chipotle Studios"
    "id":20,"name":"The Final Countdown"

The next question is whether they do a good job of securing the puzzles, or will their site will hand out unexpected information when the game begins?  Wouldn't be the first time I've seen that happen - ask me about the DQ "virtual scratch-off game" (years ago) that was written in SWF and sent "select * from ...." statements to the database via HTTP (not HTTPS). Just because you can't see it doesn't mean it's not there.

Stay tuned!