News for hackers. Stuff that matters.
Re:Show HN: This website moves your mouse cursor by brundolf on Friday April 02, 2021 @02:13PM (#26674115)
Wow. One time in highschool I ran Rainmeter (a harmless HUD program: https://www.rainmeter.net/) from my flash drive on a school computer to show a friend. The next day I got called up to IT because they apparently had software listening for any foreign executables (but not actually blocking them?), and policy was to suspend me from school computers for two weeks. I was taking a CS course at the time, so for two weeks I just had to sit there in class doing nothing.

When the IT guy talked to me, he even said he'd seen Rainmeter in a magazine and tried it out at home and thought it was pretty cool. But the admins had watched Hackers too many times, it seems, and thought it appropriate to treat me like a delinquent :P

Edit: Looks like Rainmeter is still alive and kicking! Maybe I'll give it a revisit

Re:Show HN: This website moves your mouse cursor by don-code on Friday April 02, 2021 @04:44PM (#26675781)
This was close to the way my high school chose to deal with process gaps. Luckily, the two IT guys were more than happy to help me out - I could get off scot-free if I just showed them how I'd done it.

They blocked executables on floppies, but if you copied something to a floppy as a .txt file to My Documents and renamed it, it was runnable.

They then blocked executables in My Documents, but if you put in a batch file, that'd still run.

They then blocked batch files, but if you created a shortcut to "cmd.exe" and ran that off a floppy, you got a shell prompt, from which you could run whatever you want.

They then blocked executing "cmd.exe", but the initial response didn't also include "command.com"...

_Unfortunately_, at that time, I'd already discussed the "cmd.exe" loophole with them, and the "command.com" loophole was basically the same thing that I'd already been told not to do... so I got detention for this one, and promptly stopped.

Re:Show HN: This website moves your mouse cursor by Aeolun on Friday April 02, 2021 @06:02PM (#26676434)
That’s a bit dissapointing. If you want someone to bring you vulnerabilities you have to allow them to experiment.
Re:Show HN: This website moves your mouse cursor by mittermayr on Friday April 02, 2021 @02:24PM (#26674245)
Oh yeah, the school admins were always (probably all around the world) a special bunch of people. From complete bureaucratic permission junkies, to those who opened the doors for curious students to hack around, experiment and in general just talk shop with a grown-up (of sorts). At the time, I felt it was so hard to find people to learn from, everyone was just playing games or hating computers. So those people could (sometimes) be a beacon of light in a not-so-nerdy world.

In another school (where IT was much more advanced, likely a lot like you've encountered), I put a file called DukeNukem.exe on the school-wide network share, and it didn't take long for people to discover it. It just showed an error, game needs some extra permission, and asked you to enter the password to try again. Well, people did that of course and the game didn't work. But another file on the network drive collected EVERYONE's password, one after the other, it took a few weeks until they caught me. They were able to use some Novell admin ninja something something to figure out who placed the file there and again, I was kicked out of IT classes, no other harm.

Re:Show HN: This website moves your mouse cursor by ro_bit on Friday April 02, 2021 @10:09PM (#26677895)
Rainmeter is awesome! The scripting to make your own desktop widgets is so simple to learn even my non technical friends who use rainmeter can make/modify stuff. I think it's a good example of how to make "code" accessible to non-coders