Dust and Mirrors – music for Night’s Black Agents
“I was delighted to be asked to write original music for Night’s Black Agents. The game is truly a masterpiece backed up by some incredible research and it just oozes atmosphere. Superspies vs Vampires? What’s not to like?
For this project I assembled a crack team of amazing composers who each brought something unique to the table. Everyone was very inspired by the source material and that really comes across. I consider myself honoured to be surrounded by so much talent here.
The music itself is made up of tracks which are each designed to work for specific situations but also can be played together as an album for a general mood of tension, action and horror. I hope this creates the perfect mood for your games!”
- James Semple
Dust and Mirrors contains the following tracks, specifically composed for Night’s Black Agents:
1. Main Theme
Mysterious and dramatic music sets the scene for the game ahead!
Hidden surveillance and gathering evidence during dark hours of the night.
3. The Brief
A meeting, telephone call, email or letter is the catalyst for a series of events where danger lurks in the shadows.
An overall sense of dread envelopes you when you discreetly enter the state-of-the-art facility.
A moment to reflect where secret agents become ambivalent when their duty to the mission conflicts with their consciences.
A dangerous chase in a network of power and crime.
7. Suit Up
The final battle approaches, and only you have what it takes.
8. Urban Parkour
Desperate pursuit across rooftops in a city where death is on the line.
9. Purging The Demon
A desperate struggle between human and vampire.
Heavyweight direct brute force is sometimes the agents’ only recourse.
Conspiracy theories take a horrific turn after uncovering an ancient and dangerous secret society.
12. Covert Ops
Behind enemy lines sometimes subterfuge is the best approach.
13. The Great Escape
Confrontation is futile, all you can do now is run for your life. How will you get out of this one?
Emotionally draining circumstance of being trapped in a fiercely unpleasant and smelly environment.
15. An Eye For An Eye
An all out horror piece where the character is alone, vulnerable and miles away from any other human being.
The unfortunate and unforeseen event of meeting with blood-thirsty Vampires.
The true nature and power of the Vampires is revealed. Few can stand against it!
You can feel them watching, waiting patiently for you to come out of your hiding place.
A final reflective moment when the agents examine the life they lead and the choices they have made.
|Stock #: PELGN04D
||Author: James A Semple
|Artist: George Cotronis
||Format: MP3 tracks
As I once more turn my hopeful eye upon The Dracula Dossier, digging back into things vampiric and espionagical, it occurs to me that it might be fun to wonder just who we talk about when we talk about Dracula. In The Dracula Dossier, every player knows going in that the Big Bad up on Level 6 of the Conspyramid is Dracula – making him a lowly puppet might have the advantage of novelty, but vitiates the whole point of using Dracula in the first place. But who, in the first place, Dracula is – that, we can leave mysterious.
These seven possible candidates might show up as just such Director’s options in The Dracula Dossier, most likely built out a bit from these skeletal outlines. Which one shows up in your game – well, that’s why they call it a mystery, isn’t it?
Vlad III Tepes
Vlad the Impaler, the historical voivode (closer to prince than count) of Wallachia, is the most usual of suspects. Even Bram Stoker’s great-grandson Dacre pins the Impaler and the Count together, following in the footsteps of Francis Ford Coppola and the historians Raymond McNally and Radu Florescu, among others. In Vlad’s favor: his name actually was “Dracula,” and he signed it that way. He did like death and bloodshed, whether in battle or on a field of impaled boyars. He had an “unworthy brother,” like the Count. He also fits Van Helsing’s description of the Count: “He must, indeed, have been that Voivode Dracula who won his name against the Turk, over the great river on the very frontier of Turkey-land.” As against the identification: Not only is it too obvious, but too many details of Dracula’s life (his Szekely blood, for instance) don’t match Vlad’s – while the most, er, pointed detail of Vlad’s life (the hundreds of thousands of impalements) don’t show up in Dracula’s reminiscences or Van Helsing’s research.
One thing Dracula is sure of: he is Hungarian, a descendant of Attila, not Romanian. He is also voivode of Transylvania, not of Wallachia. And who was the greatest of the Hungarian voivodes of Transylvania? Janos Hunyadi (1385-1456), that’s who. Like Dracula (and Vlad) he “crossed the Danube and beat the Turk on his own ground,” at Belgrade in 1456. In the fairly confused reminiscence of his lineage (which might, of course, reflect either Harker’s distracted note-taking or deliberate disinformation by Stoker), Dracula’s career fits that of Hunyadi at least as well as it does that of Vlad. Fun fact: Hunyadi’s son Matthias Corvinus became King of Hungary, and later betrayed and imprisoned Vlad in Visegrad.
By Chapter 25, Van Helsing has given up on Vlad’s era and decided that the Count must be: “that other of his race … in a later age.” In their biography of Vlad, McNally and Florescu run down the descendants of the Draculesti line, about fourteen in all. While Mircea II had exceptional physical prowess, Alexandru II enjoyed a good impalement, and Radu Mihnea was rich and extravagant, in the Night’s Black Agents “Linea Dracula” campaign frame I went with John Dracula, who received a patent of nobility from Emperor Ferdinand I in 1535. Intriguingly, the coat of arms he (and his brother Ladislas, another possible candidate) received was that of the Bathory family: a wolf’s jaw with three teeth. Stephen Bathory commanded Vlad in the 1476 war against the Turks that briefly restored his throne; a connection between the Balkans’ two great vampire lineages was too good to pass up. Also, John and Ladislas (like the Count) were Hungarians, descended from Janos Hunyadi through their mother. I picked John over the elder Ladislas mostly because of John’s near-complete obscurity: he had a son (Georg) but no recorded date of death.
Finally we have Nicolaus Olahus, who served (from 1553 to 1568) as archbishop of Esztergom and Primate of Hungary, for that “blasphemous vampire Curia” vibe so common amongst Protestant (or atheist) film-makers. He described himself as “ex sanguine Draculae” (“of the blood of Dracula”), which is just about perfect and echoes the Count’s own word choice to boot. He was an adviser to kings and emperors, ideal soil for that medieval Conspyramid to root itself, and although Hungarian by nationality he researched the ancient past of Romania, another field pregnant with possible game hooks.
We now leave the fields of recorded history for the realm of secret history. It is well known that F.W. Murnau, the director of Nosferatu, pirated Stoker’s novel for his plot. But what if his research turned up the original story that Stoker concealed – and its German connection? Murnau, of course, was wired into the Berlin occult underground – the producer and designer of the film, Albin Grau, was a member of the Saturnian Brotherhood and a student of alchemy and magic. Through his occult mentor Aleister Crowley, Grau could have turned up British intelligence records of the Dracula operation, and made his film using the real name of the Count, Graf Orlok. The German (or “Saxon”) population of Transylvania goes back to the Teutonic Knights, who built castles there in the 13th century – including in Dracula’s home ground of Bistritz and Borgo Pass. If “Dracula” is German by blood, that complicates the story nicely. This theory also provides a lovely secret-service explanation for every print of Nosferatu (but one) being hunted down and destroyed — ostensibly to defend Florence Stoker’s copyright.
Complications multiply even more wonderfully if the connection to Romania is entirely fictional. Stoker’s Notes reveal that he initially wanted to set his novel (by which, of course, I mean “reveal that the original British Secret Service report set the action”) in Styria, a province of Austria famous for both literary and historical vampire infestations. (LeFanu sets Carmilla in Styria.) Stoker’s original draft used the transparent pseudonym “Count Wampyr” for the vampire’s name, clearly indicating that he was covering up the real title. If Florence Stoker hadn’t published “Dracula’s Guest,” a chapter redacted from the original novel, in 1914, we might never know the vampire’s family name. In that tale, “Countess Dolingen of Gratz in Styria” has been buried with an iron stake through her and the epitaph (in Russian) “The Dead Travel Fast.” If she is one of the Count’s brides, that makes Dracula actually Count Dolingen. The common initials also hint at a cover story, which is pretty nice.
Our final possibility offers a wonderful linkage between Night’s Black Agents and Trail of Cthulhu. In 1924, Charles Dexter Ward visits “a Baron Ferenczy” east of Rakus in Transylvania. His castle “was on a crag in the dark wooded mountains, and the region was so shunned by the country folk that normal people could not help feeling ill at ease. Moreover, the Baron was not a person likely to appeal to correct and conservative New England gentlefolk. His aspect and manners had idiosyncrasies, and his age was so great as to be disquieting.” A-hem. Count Dracula is a necromancer, schooled at the Scholomance: “Baron Ferenczy” turns out to be Edward Hutchinson, a necromancer of Salem, Massachusetts. Unless, of course, both “Ferenczy” and “Hutchinson” are pseudonyms; he signs himself first with “Nephren-Ka nai Hadoth” – in other words, Nyarlathotep. That said … if Count Dracula is actually Nyarlathotep, you’re going to need a lot more garlic. And some more agents, most likely.
[Editorial Note: We're trying out formats for city writeup PDFs, between this and next month's Ken Writes About Stuff on Mumbai. Let us know in the comments how you'd like to see our city PDFs look going forward. This one, for example, resembles a more detailed version of the "Quick and Dirty" writeup from Night's Black Agents without adventure hooks. However we do it, we'll have Cat whomp up a lovely map; until then, here's a map of Kabul. -- Ken]
by Jonathan Turner
Terrorism. Drugs. Rival spy agencies. Ancient fortresses. A thriving black market in stolen antiquities. Dragons who live in the mountains. Welcome to Kabul, the capital of Afghanistan.
Kabul’s 3000-year history is defined by conflict. Fought over by the Mughals, the Persians, the Ancient Greeks, the British Empire and the Soviet Union, the city has been destroyed and rebuilt more than once. The current war between the international community and Islamic extremists is just another bloody chapter in the city’s story.
Arriving at the city’s airport, a visitor’s first glimpse of Kabul is drab brown buildings hunkering in a bowl of snow-capped mountains. At 1800 meters, Kabul is one of the highest capital cities in the world, and if the view of the Hindu Kush from the airport doesn’t take your breath away, the altitude probably will.
Kabul is always dry and dusty, and its semi-arid climate and altitude has given rise to its own irritating medical condition, the “Kabul cough.” In winter temperatures plunge to minus 20 degrees Celsius. Many people in the city live without electricity or heating beyond wood fires. A cold night in Kabul is a cold night indeed.
The war between the international community and the Taliban has left Kabul a city on edge, but it is still a vibrant and colorful place. In the streets, ubiquitous yellow and white cabs speed past old men leading donkeys and pick-ups loaded with soldiers. Busy bazaars and even entire streets of shops specialize in everything from antiques to fine Persian carpets. Anything can be bought for a price.
But the insurgency casts a constant shadow over the city. As Afghanistan’s foreign backers prepare to wind down a decade of military support, many Kabulis are worried about what happens next.
It’s not unusual in Kabul to be woken at dawn by the distant crump of a car bomb, followed by gunfire. Lots of gunfire. The struggle between the fairly weak Afghan government and the Taliban and other Islamist insurgents has seen billions pumped into the country by the west. High numbers of Afghan and foreign troops in Kabul mean the city is reasonably secure, but the insurgents know a high-profile attack there means embarrassing international headlines. The primary target is the “Green Zone”, home to the Afghan government, foreign embassies and the international military headquarters. Hotels and other places frequented by westerners can also be targeted though, and agents in the city might find themselves having a rude awakening one morning. Whether it’s the Taliban or the less well-known Haqqani Network, a “complex attack” normally starts with three or four groups detonating car bombs, either as distractions or to breach compound walls. They then then take over multi-story buildings near the Green Zone, or storm buildings in search of hostages. From rooftops they will indiscriminately fire RPGs, small arms and machine guns at any target that looks good. Such attacks are rare, but can last for hours or even days until the attackers are ferreted out. Elsewhere, the biggest threat is kidnapping. Westerners travelling around the city either adopt “soft” protection in the form of trusted local fixers or friends, or the more traditional safeguards of armored vehicles and lots of guns.
The Green Zone
Located in central Kabul, this is the centre of the international community’s footprint in the city, and the seat of the Afghan government. Agents using their old intelligence or government contacts, or searching for a reliable Afghan fixer, will have to get in here. A warren of concrete blast walls and checkpoints manned by Afghan security forces, this area is the focus for many of the attacks which penetrate the city’s “ring of steel”. But for many foreign embassies and their staff, life is fairly normal. Staff walk to work from apartment complexes in the zone, there are regular parties and even the occasion half marathon. All in the all, the area has a Disneyland feel for those who have come into the city from up country. Another famous landmark in the Green Zone is the Gandamack Hotel, named after the fictional home of George MacDonald Fraser’s infamous Afghan adventurer Flashman – and a real Afghan battle. The hotel was founded by a former BBC journalist, and is a home away from home for many members of the media and other ex-pats. The Hare and Hound bar in the basement is a popular watering hole, and aside from the usual hotel services, guests can also hire body armor. It doesn’t pay to be under-dressed on the back streets of Kabul.
Persian for “high fort”, this citadel stands watch over the city’s southern edge. A fortress of some sort has stood in this commanding spot since the 5th century, though the modern citadel was built at the end of the 19th. Run by the Afghan army, a small number of international troops are also based in the fort, operating specialist surveillance balloons. Unsurprisingly, Balla Hissar has been the scene of repeated and bloody fighting through the centuries, and the remains of burned out armored vehicles and abandoned fighting positions litter the hills around it. The original fortress had palaces and barracks in the upper level, while below was the infamous “Black Pit,” Kabul’s most notorious dungeon. Perhaps most interesting to agents is the network of tunnels and trench-lines in the hills around the fortress. With so much destruction and rebuilding in the fort over the centuries, anything – or anyone – could be buried there. They just have to find it.
National Museum of Afghanistan
Keeping the historical treasures of Afghanistan safe isn’t an easy job. The National Museum of Afghanistan, just outside Kabul, has been looted on dozens of occasions. Some of the worst damage was done during the civil war following the Russian occupation, when tens of thousands of objects were stolen and sold, many to overseas clients. The building itself was later used as a military base and destroyed in fighting, but not before courageous members of staff had moved or hidden its remaining collections. In the chaos, many thousands of items disappeared. Exhibits from the museum have since turned up across the world, some on the black market and some simply hidden away for safety elsewhere in Kabul. Their collection includes a huge number of coins, as well as frescoes, Buddhist sculptures, and Roman glassware. Some exhibits, such as a glass phallus said to be have to be touched by Alexander the Great, are absolutely unique. Huge parts of the collection are still missing, and may well be hidden around Kabul or in the hands of private collectors in the city. As the crossroads of Asia, almost anything might have passed through Afghanistan at some stage in ancient history and ended up here.
by Jonathan Turner
We’ve all been there — facing down a vampire and scraping the bottom of the ability pool for points. Next time you’re stuck for just the right moment of badass for that Night’s Black Agents refresh maneuver, use one of these and bask in the approbation of your fellow gamers along with the surge of points to your ability score.
MARTIAL ARTS (HAND-TO-HAND)
Headbutts. Knees. Elbows. I explode in a flurry of nose-crunching, eye gouging close-in attacks. More suited for a bar-room brawl than a battlefield, but a thumb in the eye is a thumb in the eye no matter where it happens.
It’s the perfect moment, like a slow cliff-top dive into the ocean. Time slows as I duck under my opponent’s clumsy punch and flow upwards, my heel strike taking him under the chin with a sound like granite sliding over glass. Inside him, something breaks. Something bad.
This guy knows Krav Maga… but he didn’t train with the elite Maglan special forces in Israel like I did. He throws a hook punch and a heel kick, but I saw them coming last Tuesday. A roundhouse knee kick puts him halfway down, and a throat-strike takes him the rest of the way. So close, I smell the onion bagel he had for breakfast on his breath.
In aikido, you channel your opponent’s force like pouring tea into a teacup. This guy comes at me as hard as he can, which is his last mistake. I turn his straight punch into a wrist grab, shutting down his ulnar nerve and killing the hand, then I flow into a knife-hand strike to the maxilliary sinus. It might not kill, but it hurts.
This is savate de rue, not the pretty style of the dojo, but the bone-crunching, teeth-shattering style of the street. A direct bra arriére cross and a crochet hook has him watching my hands, but his block opens him up for a painful chassé italien to the inner thigh and a devastating fouetté whip kick to the head.
MARTIAL ARTS (WEAPONS)
I didn’t learn my best knife-fighting in a dojo, I learned it in prison. People expect knife-fighters to dance around, so when I rush this guy screaming like a maniac, I can tell from the look in his eyes he’s surprised. And that lets me get close enough to ram the Cold Steel SRK into his chest with every ounce of force I’ve got.
I don’t use knives to fight, I use knives to win. This guy’s big, and he’s fast, but a blade beats a fist every time. I slash his forearm to lower his guard, then smash him in the face with the Gerber’s knuckle duster style guard. Something in his face splinters like a twig.
As this mook comes in swinging, I keep my wrist turned in, the 3.5” blade of my K-BAR hidden behind my hand. The first time he knows I have it is when I punch it sideways into his intercostal space, between his third and fourth rib. He thinks I just punched him… until he realises he’s bleeding to death.
The karamit in my fist is Indonesian, the curved blade ideal for cutting and slicing. I go at this guy like a surgeon cutting out a cancer. Wrist. Shoulder. Forearm. Ear. Anything he shows me gets sliced as I force him to back off and give me space for a proper strike.
There are lots of “experts” out there who claim they can teach you how to knife fight. But they’ll only get you killed. I’m not one of those. I’m the real deal. No wasted effort. Total economy of movement. I wait for him to make a move, then I elbow his guard aside and bury the tanto tip Gerber into his jugular notch.
Parkour’s like doing a jigsaw puzzle in a hurricane, finding where the pieces need to go at a hundred miles an hour. I sprint at this wall and hit it with a passe muraille, toe off a drainpipe, window ledge and edge onto the roof. Then I hammer across the tiles and Kong over to the next roof.
That roof in front of me is higher than this one, but in reminds me of one in London’s South Bank where I learned how to free run for the first time. I know I can make it. I spring into a Saut de Bras, knees up, kick forward into the other wall and hook my fingers onto the ledge. Up and over. All that work with my Mash Monster grip enhancer is paying off!
The fire escape is out of reach, but the alley’s pretty narrow. I kick off and Tic Tac up, twist onto the bottom rung and haul myself onto the ladder. Whoever’s behind me is going to struggle to make that jump.
My target cuts from cover and for a second I’m back in the Kill House in Hereford on that first exercise with simunition — blazing away at a moving target and not believing I missed with everything. But not here. Not now. Track. Lead. Squeeze. BANG!
The glow-in-the-dark Suresight on my Glock 19 Gen4 lines up perfectly as I swing the little pistol around, making sure my snap shot on the fly is as accurate as any on the range.
I punch my SIG P239 towards the bad guy’s muzzle flash and it goes off with the smooth Swiss precision of a Breitling: BANG! BANG! BANG! Every round on target. Every round a hit. Every hit a kill.
The acrylic custom SPD grip on my Beretta Px4 Storm nestles comfortably in my gloved hand as I lay down a constant cadence of fire from the Weaver position. Fire. Move. Fire. Move. Fire. Fire. Fire.
I snap my Five-seveN® Tactical from my Model 6005 tactical holster and cover the room. Polymer slide, DEVGRU camo scheme, custom Picatinny rail with Viridian X5L laser sight and extended mag with 30 rounds of 5.7 x 28mm armour-piercing ammo. I’m ready for anything these bastards feel like throwing at me.
The only thing better than an extended mag, fully-automatic Glock G18c is two extended mag, fully-automatic Glock G18cs. Hang two 5 megawatt ZT-EO5 laser sights off the muzzles to balance the weight and it’s more rock and roll than the Stones. As these guys I’m pointing ‘em at are about to find out…
The muzzle flash of my MP7 is reflected in the Plutonite lenses of my Oakley SI Flak Jacket shades as I lay another devastating burst into the bad guys.
I take a knee and cover the alley with my HK MP7, peering through the Sightmark reflex sight on the top Picatinny rail, gloved hand balancing the German submachinegun’s stubby Osprey suppressor.
I line up on the bad guys with my EoTech Holographic Sight and the FN P90 rocks almost comfortingly in my hands as I lay down a long burst — the Warlock 2 sound suppressor choking the gunfire into nothing more than a muffled cough.
The Magpul angled foregrip on my HK 416 makes aiming as easy as pointing. And when I aim at the bad guys, the ACOG / red dot TA01NSN sight makes it easy to find them. And when I find them, all it takes is a squeeze of the custom Geissele trigger to cut them down to size.
The PP-19 Bizon is a typically Russian firearm. Cheap, ugly and effective. The only fancy thing is the 64-round helical magazine, which gives me twice as many rounds as these mooks. But the best thing about it? If I run outta ammo, I can hit you with it as hard as I like and it’ll still work afterwards.
That tight little junction up ahead is a hazard, but like my driving instructor at the Farm used to say, a hazard can be attacked as well as avoided. I throw the Lexus down into second and push it into the red, engine throttling up into a roar as I gun for the gap, muscling oncoming cars out of the way.
I overcook it into the bend in an effort to cut ahead, the suspension sucking the tarmac like an octopus with vertigo. As I hit the apex, the big Lexus’s tail starts to swing out wide… I steer in just a touch, change down and I’m gone.
Always go less metal. I hammer towards the junction ahead, cutting into the half-empty right lane, powering through and slicing hard left. I slither past a startled looking grandmother as she bimbles out — leaving her squarely between me and the bad guys.
Mud on the road means something big and heavy and fatal ahead. A glance over the hedges and I see a tractor trundling out of a field. I change down, throttle off, don’t touch the brake, time it so I scrape past the front of the tractor just as it pulls into this narrow little lane. That trailer it was hauling looked to have something sharp and spikey on the back. I sure hope on this wet, muddy road the guys behind us don’t slide straight into it.
I didn’t spend all day driving around these back roads not to spot a few shortcuts. I cut off the blacktop onto this forestry track, slam through the gate I left open earlier and past two startled dog walkers. It’s all sliding, slippery mud, but I drove this route yesterday and I know every curve. The guy behind me doesn’t. Left onto the hill, grab some air at the top, wipers already on max as I slam through a ford, up and out onto a parallel road.
by Andrew Brehaut
Modern technologies, such as cellphones and the internet, are often a thorn in the side of the horror or thriller GM. Typical responses involve negating the use of this technology, be it through remote locations (no signal), dead batteries, villainous forethought (the cell towers have been damaged), the people contacted simply not believing the PCs’ story, or simply setting the game prior to the existence of such technology.
An alternative to outright negation is to look for ways that the technology may work only partially: the web of trust breaks and confidential information gets into the wrong hands, or information is corrupted or misunderstood. This is particularly suited to thriller games with espionage elements. Games with active magical forces can obviously go above and beyond the suggestions presented here.
These suggests are not intended to be used to hose the players; instead, when they use modern technology, they open themselves up to new problems. Consider these suggests to be “Yes, and” twists.
In keeping with the spirit of GUMSHOE, try to choose twists that not only cause trouble for the players, but introduce new information. The type of attack reveals something about the enemy. If the attackers reach through corrupt authorities to track your cell, that says something different to a black-bag job on an assets computer.
The following suggestions are based on generalities about cryptography and encryption. As I am not a cryptographer I am certain to have misconstrued some some of the fine points.
Characters in Fear Itself are typically less competent at the technical necessities required to keep communications private and concealed than the agents in a Night’s Black Agents game. As a result, you have more latitude for Fear Itself characters to be the instigators of their own failures than you do in Night’s Black Agents.
A simple guideline to consider is that if the character should be competent, then the failure should only come from depending on a (compromised or lazy) asset or NPC, or when a failed die roll presents an opportunity.
An example of this might be that the player blows a preparedness test for a cellphone in a tight spot. Instead of failing and not getting the phone, the GM might rule that they have a phone, but it has been compromised.
In Nights Black Agents, any network contacts whose pool has dropped to zero – or in a Mirror mode game, any flipped contacts (NBA pg 32) – are perfectly placed to be the weak link in the security chain. They may reveal cellphone numbers, secure keys, passwords, or any other secret information the character uses.
Less competent characters are unlikely to use secure methods at all. The GM has more latitude to hand-wave the details in this context.
Trust and Authenticity
The backbone of digital secret sharing is authenticity; sophisticated mathematical tools provide ways of ensuring that a communication is from who you think it is from, and that only the intended recipient can access it. Authenticity allows an increase in trust in the communications. Typically these schemes require a non-secret ‘key’ (part of a key pair, with one key secret, and the other non-secret) to be shared between the appropriate parties. Given an opportunity to trade encryption keys, and sufficient bits in those keys, this encryption is sufficiently secure that it will not be feasible to break using brute force in a reasonable amount of time. Not to mention, brute force cracking is lazy story telling, especially in a spy game1.
The math involved is the strongest part of any cryptographic system. Instead, the system is more easily broken by attacking the humans involved, or any secondary mechanisms used. While the math is typically tough, it requires that its process is followed strictly; deviation may introduce subtle weaknesses. Not only does the human angle make for a more believable story, it makes for a more interesting one.
A good guideline here is that the human link that breaks should never be the player characters. If they are competent enough to be using secure methods to begin with, it undermines the characters to suddenly cause them to make a mistake. Only in a crunch (e.g. if preparedness is involved) might they not use a secure channel, and in that instance they clearly know. This also means that PC to PC communication is guaranteed to be secure, which avoids an always check for hidden doors situation where the players waste time worrying about their intra-party communications.
The takeaway here is that you need to trust every link in the chain that has access to the secret keys. If the chain is secure, then any secret communicated with those keys is secure. Adding links to the chain increases the chances that the chain is compromised. As mentioned above, these mistakes and unnecessary links should occur at the NPC end.
When unsecured communications are being used, especially textual, there is little guarantee that whoever is at the other end of the system is who they claim to be. Snooping and supplying misinformation are trivial.
Secure communication relies on the sender having the recipient’s public key, and the recipient being able to get the sender’s in a trusted way. Without this, unsecured methods have to be used. The implication here is that communicating with people outside the existing circle of trust leaves you wide open: the police can’t be called without eavesdroppers having an opportunity to listen in.
One final point: Cryptography is extraordinarily hard. Cryptographers typically cannot see the flaws in a system of their own devising. Competent characters should know that they cannot invent their own cryptography safely, but if players push for it, then they are wide open and asking for trouble.
Aliens and Brute Force
Aliens present a reasonable excuse for brute force encryption breaking. Presumably their computational war chest vastly outstrips our own, so they would be able to brute force nearly all encryption with relative ease. The exception here is one-time pads which are still likely to be secure assuming aliens obey our same mathematical laws.
With people as the weak link in a cryptographic system, it helps to know some potential attacks that may be deployed against them:
- Probably the most common method for acquiring secrets is via social engineering. This is basically a confidence game. Email phishing is a blunt form of this. When the target works out of a large organisation, posing as a network administrator will often get easy physical access to a machine, and the willing cooperation of the target.
- Extortion, threats or torture that leverage vices, family, friends or debts is a very direct method for extracting secrets, but effective.
- Another direct method is the black bag job. Simply break in to the physical location containing a computer or device and either copying data or just stealing it.
Sometimes communications must travel through an insecure network. In this case, even when a message is communicated securely, an observer may still be able to gain information. Examples of an insecure network include wireless networks, cell networks, the wider internet, and local wired networks controlled by a third party.
Establishing a secure network on top of an insecure network (a tunnel, or a virtual private network) is possible, but is subject to the same secret sharing challenges sending the message in the first place. One development here is anonymizing networks such as Tor; with Tor, an observer could see you connect to Tor, but have no idea where the information goes2.
Transmitting secrets over an insecure network allows an observer to collect “meta” details about the communication. Things like: when the message was sent, the duration of connection and/or size of the message, where the message was sent from, and possibly where it was sent to. Proxy networks and other tools may be used to obscure the specific details, but with less latitude than true security.
In more complex systems (such as server software like websites or email systems), information inadvertently disclosed by the system may allow an attacker to find weak points or, in a particularly egregious situation, piece together information from the revealed pieces. This is especially dangerous when the information can be correlated with other sources.
Cellphones, especially smartphones, provide many options for problematic twists.
SMS messages and phone calls are not encrypted end to end, and can be accessed relatively easily via the network. Users of iPhones have access to Apple’s iMessage network which sends arbitrarily large messages and images with end to end encryption. However, if an iPhone cannot access the iMessage server for any reason, it falls back to unencrypted SMS by default. Harried characters may forget to check this, or assets may be lax at checking the setting. One other potential weak point of iMessage is that multiple devices can be configured to receive messages at a given address; someone may snoop on encrypted conversations without you realising. You can safely assume similar foibles of any consumer messaging service.
Competent agents can be assumed to have installed apps on smart phones they control to let them securely communicate and that avoid the risks of using consumer messaging. However, the phone itself is still vulnerable to attack at levels lower than the messaging application.
Smartphones such as Android phones, and jail-broken iPhones, allow for arbitrary software to be installed, and in doing so can replace or augment the operating system’s core software. A simple example of an attack at this layer is a key logger: by planting listening code into the software keyboard, the phone can record every piece of text entered system-wide, and secretly broadcast it, thus circumventing any encryption used. A compromised device may also use the device’s cameras, microphone and GPS to capture a broad range of additional ‘passive’ data.
Jailbreaking a phone is done by taking advantage of security vulnerabilities in the phone’s operating system. While typical jailbreaking does require some user intervention (partly as it is intended to be an intentional attack), there have been jailbreaks that only required visiting a website. If a smartphone that is considered secure has been used to access untrusted websites (and any website that is not delivered securely with known-good certificates can be considered untrusted) then it could possibly have been compromised by a malicious site. In the real world the chances of such an attack vector being viable are extremely narrow, but in the fictional world of a spy thriller where agents may not have opportunities to keep their devices up-to-date and are frequently accessing servers in the seedy underside of the internet, the risks rise. A competent agent with time and access is going to use a disposable or public computer to access these sites, but under pressure there may be no choice.
Obviously, if a smartphone with secret keys on it is stolen or lost, it is a serious risk until it can be remotely deactivated. Lock screens are a weak defence against an attacker; iOS and Android have both suffered multiple security holes allowing lock screens to be bypassed.
Light, Sound and other Emissions
Modern mobile devices have more direct ways of creating trouble too. To function they must emit radio waves on various frequency bands, as well as light and/or sound to be functional.
With phones from sloppy assets, or that have been appropriated, there is also a risk of alarms and other sounds occurring. The iPhone, for example, has a switch that disables the ringer but does not disable all sound system wide. The system’s policy allows some sounds, such as alarms, to occur even when the ringer is disabled. This is a particularly appropriate “gotcha” for normal people thrust into dire situations without warning, such as in Fear Itself.
Another class of potential attack in the modern world (and form of information leakage) is that devices such as cellphones that connect to wireless and cell systems broadcast unique device IDs to those networks. In both cases the attacker could compromise the network itself, but because these devices must broadcast their communication, it is often easier to use malicious base stations and traffic snoopers. For wifi this can easily be achieved with cheap plug computers. In both cases basic identifying information can be harvested without the target being aware.
This is possible because the devices need to maintain a low level of background traffic to maintain a presence on a given network (e.g. so that calls or data can be routed to the device). This information can then be pooled over time. For instance if the same IDs appear in networks of two or three geographically separate locations, a conspirator could reasonably assume that it is not a coincidence.
Particularly with wifi, the range of each network is small enough that with a collection of networks or malicious base-stations, a particular device’s movements could reliably be tracked in a known area.
TEMPEST Monitors (NBA Pg 100) are another risk of carrying a cellphone or other broadcasting device.
In games with supernatural, in addition to creatures being extra sensitive to light and sound, they may perceive frequency ranges well above even ultra violet; In these spectrums the radio signals from cell and wifi systems would be clearly visible bursts emanating from the characters.
If the creatures communicate with each other in these frequency ranges, it is possible that may even mask cell or wifi signal for short bursts.
In a situation where a character must be separated from a device, such as at a meeting with criminal elements, they should be concerned about tampering. The question is what could have been tampered with in the time window, and what the signs of it would be.
Some devices are easier to tamper with than others. Those with battery access for instance; a matter of seconds may be all that is needed. Phones without user accessible batteries may seem less vulnerable to tampering, but with the appropriate tools (such as the right screwdriver, a special prybar and a suction cup for an iPhone) you can have it open and closed again in a couple of minutes. The easiest way to check for physical tampering is to open the device and examine it.
Software tampering is harder to identify, but may take longer to perform. This is the equivalent of a jailbreak. It may be achieved over a network, or by connecting the device to a computer. Between five and fifteen minutes for a competent attacker to determine and use the correct attack vector and required waiting for software installs and device restarts would not be unreasonable. Tampered devices may run hotter and/or use battery faster than the usage would suggest. With the appropriate hardware and software tools and some time, the image of a device can be checked against a known good copy and if need be restored.
Finally, devices with SIM cards are vulnerable to tampering. It takes only a couple of minutes and some text messages. This allows trivial call and message snooping.
Back of the sticks?
An alternative to just denying characters use of cellphones due to lack of signal in the remote locations is to allow them to find a patch of poor signal; if they use it, they may be pinned in one spot while making a call, or waiting for their encrypted data to transfer. Maybe not your first choice when being stalked by a vampire.
An alternative to smart phones is cheap, disposable ‘feature’ phones (called ‘burners’) with prepaid data. These can be purchased with cash, no personal information, and can be trivially disposed of after use.
Relying on burners allows trivial anonymity as long as the burners only contact other burners, and do not contact a device known by the observer (that allows the entire network to then be unravelled).
The main downsides to burners is that they can’t have cryptographic keys or software loaded onto them easily. This means that communications are necessarily insecure, but it also means that there is no reliable (cryptographically speaking) way to authenticate with others. Anonymity and trust are naturally opposed. Weak secrets such as pass phrases or PINs can be trivially snooped by any observer that has either compromised the network or has the target surveilled.
Some smartphone burners exist. These often suffer from antiquated operating system versions with plentiful known vulnerabilities and no way to upgrade.
Accessing the wider internet is relatively safe; you can do so anonymously from a variety of publicly accessible computers (Libraries, internet cafés etc) without needing to put your own hardware at risk, with limited chance of your location being uncovered beyond the typical physical risks, and without too much concern about key logging or other snooping.
The biggest restriction is that the character may not be able to get the machine out of its kiosk mode, which means being limited to only the web browser, and potentially some coarse filtered view of the web (administered at a firewall).
If the machine can be accessed out of a kiosk mode (surreptitiously), then it is relatively trivial to connect more securely and directly to known good machines (perhaps virtual machines) to then access out into wider internet unobstructed.
One potential problem here is that the character may need to relay their secret key via USB stick. Beyond the dangers inherent to carrying the key (leaving the key behind would be a potential disaster), there is the risk of any malware on the computer infecting the USB stick, and then in turn the characters own computers. This is more likely to cause a computer to run sluggishly and/or unreliably than it is specifically going to leak information to the enemy.
Characters with heat (see Night’s Black Agents pg 87-88) from government agencies may experience difficulty crossing borders: a failed heat roll may result in laptops and phones being seized for searching (and copying or tampering). While consumer operating systems now provide full disk encryption, characters may be subjected to extra scrutiny due to its presence (“If you have nothing to hide, why do you need the encryption?”); the characters will of course be able to manufacture convincing reasons, but the argument may still be leveraged as an excuse to detain them.
Alerting the Authorities
Players may at some stage wish to call in reinforcements in the form of law enforcement, or media. Instead of ruling it out completely, consider allowing it. Keep in mind that the characters are unlikely to be able (or want) to use authenticated channels to make this communication, so there is limited trust involved. Any respondents will act accordingly.
The characters will probably do one of two things: lie about the situation, or come off sounding like cranks. If they lie, then whoever investigates is likely to be wildly unprepared for what is happening. Meat for the grinder, and stability tests for the characters. With the crank option, the response is likely to be slower arriving.
For law enforcement, consider having a couple of uniforms roll up to investigate. The characters will have to work extra hard to achieve their original objective and keep them alive. If the officers die at the scene, the characters can expect their heat to rise, and attached with it records of the call and tags for any weirdness mentioned. These unexplained deaths will surely crop up again later, too, perhaps pinned to the characters.
In the case of media, a reporter given a crazy but potentially promising tip may wish to do some initial research, and perhaps meet up with the informants. Again, the characters are going to have to work to keep the reporter alive. In a Night’s Black Agents game offering up a small story may only take out a single low level cell of the conspiracy, but is reasonably achievable. Tip offs with larger scope take a lot more time to come to fruition, and will end up endangering more people.
Competent characters will be aware of the security risk of most of these problems. Don’t try to hide this from the players to spring on them later; let them stew in their own juices and make the decision in the heat of the moment. They always get their message in or out, but they know they have let something slip in the process. Allow Sense Trouble rolls to alert characters, particularly if they have points in the appropriate abilities (Cryptography, Electronic Surveillance, etc)
When a network contact is turned, an agent may see telltale signs that their communications have been breached, but not know what exactly.
- If you are interested in reading more about the strength of cryptography, check out the PGP FAQ. While some weaker keys have been cracked, the amount of computing power needed is phenomenal. Using strong keys, and regular secure key rotation should mitigate most of the risk.
1.The default setting of Night’s Black Agents (pg 28) assumes that government agencies do possess tools to crack even the strongest keys. You may prefer to assume this in your games.
- Tor is not perfect though. This article is an interesting read about one attack on Tor using malicious end points.
The following materials are available for use by all agents. If you have any questions or concerns, contact the Special Activities Division through PERISCOPE NORWAY channels.
Maybe you heard that Night’s Black Agents, the supernatural spy-thriller game by Kenneth Hite, scored two silver ENnie awards at Gen Con; and that its new expansion Double Tap sold out at the show.
I ca hear you asking, “Can I try this amazing-sounding game at PAX?” and “Is this an opportunity for me to get my first-person shooter console-loving friends into tabletop RPGs?” YES YOU CAN, and YES IT IS.
Peter Darley is GMing Night’s Black Agents at Indie RPGs on Demand, Washington State Convention Center room #305/306 on these days and times:
- Friday, 1PM-6PM
- Saturday, 11AM-4PM and 5PM-10PM
- Sunday, 1PM-6PM
I’m serious about the FPS thing, by the way. Night’s Black Agents lets you play a badass Jason Bourne or Ziva David style covert operative, going up against a sinister vampire conspiracy in exotic locations across the world. Using high-tech weapons, networks of contacts and cool spy gear, you can evade, outwit and destroy your foes in exciting cinematic ways.
Drag your friends to Indie RPGs on Demand and try this game! You won’t be sorry.
In the latest episode of their electrifying podcast, Ken and Robin talk period Night’s Black Agents, Jasper Maskelyne, Kickstarter doom and Nikolai Tesla.
With all the Conspiracies, the intrigue, the danger, it’s hard to know what exactly is and isn’t on your side. When every shadow from the back alleys of Bucharest to the back benches of the parliament could hide an inhuman enemy, it’s hard to tell what solid ground you can stand on. What can you depend on? Can you make a difference? Trust no one and nothing except the silver bullets in your Glock. To make a difference, aim true.
Even then, sometimes that first shot isn’t a killer. Sometimes you need a double tap.
Double Tap: The Night’s Black Agents Expansion Book includes:
- Sample clues, special spend benefits, and a model Tactical Fact-Finding Benefit for each Investigative ability, along with information, tips, and best practices from cloning a cell phone to hosting a seance to the slang of spycraft!
- For the General abilities, lists of sample clues if they can be used investigatively and more key information and best practices. A new optional Mastery rule keeps your dice hot on every roll — plus over 25 new Cherries!
- 20 new maneuvers, from Alibi to Thrown Clear by the Blast, plus 60 Achievements to add flavor, focus, and flexibility to your play.
- Adaptive Tradecraft and the Cartagena Rules let you low-tech your way out of trouble — and high-action your way back into it!
- More spytech for any mode, from custom face masks to RFID sniffers to jetpacks to EMP weapons — and the “Q Rule” for that laser watch you’ve always wanted!
- Because you demanded it — a big list of guns, customized for 22 clandestine, military, and police groups from SEAL Team Six to the Swiss Guard. Plus eight Gun Cherries — never waste another 6! — and lots more gun gadgets from the CornerShot to UV-emitting bullets to net grenades!
- New rules for adapting the acclaimed night’s black agents Thriller Chase rules to contests of hacking, sneaking, and tracking — plus Manhunt rules for agents hunting monstrous masterminds.
- For Directors, 26 Cameos give you living, breathing NPCs complete with their own clues, and 26 Establishing Shots give you exciting settings to put them — and your agents — into.
- Discover the horrific secrets of the chupa, the ekimmu, the homunculus, and the penanggalan — and recoil from the nosferatu, a complete vampire build straddling the line between biotech and blasphemy. A complete list of vampiric powers lets you build your own bloodsuckers faster than ever.
- Finally, the Suspyramid models war within a Conspiracy, tips for solo-agent play let you lay on the Burn, and variant builds send your campaign to the Victorian Era, WWII, or the depths of the Cold War!
So consider this the next level, a higher pay grade and higher-than-double-0 clearance. It’s time to take the fight to the Conspiracy.
This time, it’s not just a headshot. Better go for the double tap.
|Stock #: PELGN03
||Author: Kenneth Hite, John Adamus, Will Hindmarch, Kevin Kulp, Christian Lindke, James Palmer, Will Plant & Rob Wieland
|Artist: Alessandro Alaia, David Lewis Johnson, Phil Reeves
||Pages: 128pg Perfect Bound
by Paul Baldowski
The existence of All Rolled Up was borne out of my desire for a flexible all-in-one solution to get my gaming gear to the table. My local group will tell you I’m compelled to run games out of some kind of obsession, and it was probably that same obsession that led me to want more than just another dice bag.
My wife and I played around with designs and sketches for weeks. I wanted something that could carry everything I needed – dice, beads, counters, pens, pencils, index cards. If it could hold miniatures and more besides, all the better. I wanted the end result as compact and portable as possible, but accessible and highly usable at the gaming table so it didn’t just get stowed away even once I started gaming.
In the end, I’m not sure who had the brainwave, but I’m bound to claim I had the flash of inspiration when I started playing around with an artist’s roll – a canvas and leatherette carrier for artist’s tools. On the other hand, my wife did show me a tool roll we had in the shed somewhere… so, the specific eureka moment might remain open to discussion for years to come.
From there, my wife took the task in hand to create several prototypes – starting with paper and sticky tape, then lightweight fabric. At this stage, we actually came up with something very close to the final product. However, the current version has a flat base on the dice pouch so you can open it up at the table and everyone can reach in and see what they’re grabbing for. The pockets and pouches also got deeper.
While she worked on the sewing machine and wasn’t dragging me around local haberdashery outlets looking for fabric, I took control of the marketing and publicity – which means I spend most of my time seeing what dice, counters or games I can pair off with which All Rolled Up. We’ve also both had a lot of fun attending conventions and bringing the All Rolled Up to gamers who might not otherwise get that this is a little more than just another dice bag. The demonstration makes all the difference in getting the point across – and while I have tried to do it in various You Tube videos, it often takes a live demo to really make people think, “Actually, I could really do with one of those.”
In the end, we know we have a handmade quality product that we’re happy to use ourselves and recommended to our closest gaming friends. We’re constantly experimenting with new fabrics and colour combinations, as well as tweaking the functionality – like the Chalk Premium, which you can sketch on with a piece of chalk. That one has been incredibly popular, like some anti-tablet reaction to the creeping presence of technology at the tabletop.
It took a real team effort to bring All Rolled Up together, and we’ve loved every minute of the process. We really look forward to spreading the word. And, importantly, I have satisfied my obsessive need for storing my gaming gear.
[Ed's note - if you'd like to grab your own game roll, check out their website!]