News for hackers. Stuff that matters.
Re:I got an FBI record at age 11 from dabbling in cryptograp... by lokimedes on Friday January 28, 2022 @02:54PM (#30119521)
I had sysadmin rights on my school’s Windows servers after some very simple social engineering (for a 10 year old). The real irony was that I was called to the principal’s office on multiple occasions because I seemed to be able to fix things on the network that the local “admin” (e.g. music teacher) couldn’t. Fun times indeed.

It completely ruined my respect for authority figures. Which in retrospect has been the most valuable outcome from being the local “that kid from Wargames”

Re:I got an FBI record at age 11 from dabbling in cryptograp... by Teknoman117 on Friday January 28, 2022 @05:32PM (#30121366)
I was in high school from 2007 to 2011. Half of it in rural Alabama, the other half in the Bay.

Even being in the tech capital of the world, the school administration's views on technology and information access were so backwards. Our school basically didn't allow accessing any websites that weren't on some allowlist. Teachers had accounts to bypass the content filter.

We had a game design class that happened after school. Usually that period was reserved for making up classes you failed, but ROP courses that didn't align with the district's curriculum goals were taught as well.

Needless to say, pretty much every resource we needed was blocked. So the teacher would give out his content filter bypass credentials, because the school wouldn't entertain any exceptions to students not being allowed to have them even though they knew there were classes on campus that would have tremendous difficulty. A couple of times a student would leak the credentials to others on campus and it'd take all of 5 minutes to get to everyone on campus via social media.

They'd always treat everyone who knew the bypass accounts as "guilty unless proven otherwise". I ended up in detention a few times for even knowing it. Parents complained to the school a bunch, school just always blanket said "bypassing the content filter as a student is against policy for any reason. No exceptions."

Makes me think back to 1st grade in 1999 when I was first given internet access and being told not to use Google because "it wasn't safe". Couldn't have been that bad because it took another half decade for me to inadvertently end up on the "adult" part of the internet.

Re:I got an FBI record at age 11 from dabbling in cryptograp... by riversflow on Friday January 28, 2022 @08:47PM (#30122934)
Similar time period, I used portable Firefox and then Chrome on a thumb drive to bypass our content filter. I actually find this surprising in retrospect, but I'd guess they were using Content Advisor on Internet Explorer[1]. I carefully guarded my secret.

[1] this pdf appears to lend credence to that idea(no affiliation). https://www.kvcc.edu/pdfs/MyItLab/myitlab_BestPractices_Home...

Re:I got an FBI record at age 11 from dabbling in cryptograp... by Teknoman117 on Saturday January 29, 2022 @02:45AM (#30124581)
If I were smarter, I probably would have learned about proxy servers. I was tantalizingly close as is. I had set up port forwarding on our home router and a dyndns account to access my (Linux) desktop via ssh. I'm almost surprised it took me another few years to bump into SOCKS proxies. I already had 99% of the setup, just not the final step. Oh well I guess.

Our school was Windows land as well. They blocked execution of certain programs by some policy in Windows explorer in Windows XP (they had never adopted Vista, and 7 was still "too new"). Funny thing was, if you knew the path to them, you could just point Firefox or Chrome at a file:// URI and run it out of your downloads directory. Oops.

There was also that time I got detention for riding my bike in the school parking lot. Which was dumb, because I always showed up 30+ minutes before any cars did because I made a deal with the sculpting teacher that I wouldn't have to do sculpting if I showed up early to class and learned about the chemistry of clay glazes along with helping him mix them for class, which was honestly far more interesting to me.

Our AP Chemistry teacher was a nuclear engineering postdoc from MIT who spent her entire career helping clean up after US military nuclear accidents.

High school was a weird time. It just boggles my mind still to this day to have a school staffed by some wonderfully brilliant teachers and have an administration that seemed to lived in fear of a student body who dared learn something or learn from someone they didn't approve of.

Re:I got an FBI record at age 11 from dabbling in cryptograp... by laurent92 on Saturday January 29, 2022 @04:38AM (#30125072)
> They blocked execution of certain programs by some policy in Windows explorer in Windows XP. Funny thing was, if you knew the path to them, you could just point Firefox or Chrome at a file:// URI and run it out of your downloads directory. Oops.

Microsoft security baffles me. You could run Windows Update in the browser (and also antiviruses using ActiveX). Who would think of making it possible to alter the OS… from the browser?

Re:I got an FBI record at age 11 from dabbling in cryptograp... by lozenge on Saturday January 29, 2022 @06:35AM (#30125555)
I think those restrictions were really for ATMs and kiosks, but school administrators see them and decide to turn them on. If the user is able to open more than one application there is no hope in locking down functionality. Windows Help Viewer lets you open a web browser for example.

My school disabled right click in Windows Explorer, I'm still not sure why.

Re:I got an FBI record at age 11 from dabbling in cryptograp... by 867-5309 on Saturday January 29, 2022 @05:31AM (#30125297)
sacrificing security for convenience
Re:I got an FBI record at age 11 from dabbling in cryptograp... by bfuller on Saturday January 29, 2022 @01:39PM (#30129019)
I set up a proxy server for myself to use at school and showed a few friends, and then suddenly everyone at my 2000 person highschool knew who I was. Incredibly I didn't get in trouble for it, my principal thought it was clever. Simpler days.
Re:I got an FBI record at age 11 from dabbling in cryptograp... by efreak on Sunday January 30, 2022 @04:04PM (#30141072)
No need for Firefox/chrome to "download" software, you could get a java-based file manager; this allowed browsing the filesystem and running software on the public library computers, which were far more locked down than any school computer I've ever seen (they had software to enforce 15/60 minute session limits, session reservations, etc, and group policies that disabled external storage, explorer, and the start menu; most browser functions were disabled). If you've got a Citrix-based application available, there's usually some way to trick your way into that system; in my case it was by going to file->open in the weird processor, and right-clicking it to open it in (the remote session) explorer, which had my local media mounted (flash drive), and allowed access to the remote browser. If you can get a cmd prompt, you can also sometimes get around restrictions with that, possibly by using it to open task manager. In college, these weren't locked down so much as intended to be single-purpose (for running Photoshop, etc from home), and I used similar tricks to gain access to a command prompt so I could register fonts for my projects using FontLoader[1].

Of course, despite every PC being on a domain, there was still the local administrator account, which was easily obtained by leaving an unused computer running ophcrack overnight. Eventually I found out that the roaming network administrator account password was simply ford, as the admin left a local account on a computer that wasn't networked; this pretty much lasted me through high school. For bypassing the firewalls? That was simple; I got a free shell account, and later my own server, an early openvz vps.

Once I got my own server, I spent long amounts of time trying to increase the amount of RAM available to me (since it was fair-share CPU on a decent server, building and similar jobs ran far faster than my current digital ocean VPS). At this point, I found out about sshfs on my own computer, and spent ages trying to find a decently cheap Xen VPS so I could use kernel modules for sshfs and swap. Eventually, I gave up. One period of my last semester I was a TA, rarely with any work to do, so I spent most of my time on IRC and setting the wallpaper to be Cyanide & Happiness comics.

/me trouts Piper around a bit with a large slap

1: this used to be available at https://bitbucket.org/cryptw/fontloader but not anymore. This might be the source, not sure. https://github.com/stevenstrike/FontLoader

Re:I got an FBI record at age 11 from dabbling in cryptograp... by blfr on Saturday January 29, 2022 @05:09AM (#30125207)
> Even being in the tech capital of the world, the school administration's views on technology and information access were so backwards. Our school basically didn't allow accessing any websites that weren't on some allowlist.

That sounds very big tech to me, exactly the model towards which Facebook et al. are moving.

Re:I got an FBI record at age 11 from dabbling in cryptograp... by alar44 on Saturday January 29, 2022 @05:31AM (#30125300)
Sounds like normal best practice for a secure environment full of shitheads to me. The hell does this have to do with Facebook? What website am I on?
Re:I got an FBI record at age 11 from dabbling in cryptograp... by PickledHotdog on Saturday January 29, 2022 @01:06PM (#30128698)
I think they're alluding to the "walled garden" analogy that gets bandied about in reference to "big tech"
Re:I got an FBI record at age 11 from dabbling in cryptograp... by RotaryTelephone on Friday January 28, 2022 @05:28PM (#30121330)
Had a similar problem with feeling betrayed by authority figures when I was called in to be questioned about a hacking incident while in middle school just because I was good at VB in programming glass. Can really ruin a kid's confidence for years to come in case anyone in such position is reading this now.
Re:I got an FBI record at age 11 from dabbling in cryptograp... by nefitty on Friday January 28, 2022 @06:11PM (#30121768)
I can point to several false accusations I suffered as an elementary school student that made me deeply skeptical and wary of authority.

"Even if I color in the lines, or intentionally dabble in creative thinking, some adult might yell at me... Hm. I don't need their permissions. They obviously don't see how great I am so they are a dumb nuisance."

Re:I got an FBI record at age 11 from dabbling in cryptograp... by gilbetron on Saturday January 29, 2022 @10:27AM (#30127035)
Same thing happened to my friend in high school, there was someone causing some mischief with some of the school computers, and just because he was into BBSs and computers, he was a big suspect, but he was a good talker and was able to avoid any punishment.

He was a good friend because he kept silent about the fact that I was the one doing it ;)

Re:I got an FBI record at age 11 from dabbling in cryptograp... by rootsudo on Friday January 28, 2022 @05:33PM (#30121379)
Public network shares, cain&abel, learning about NTLM downgrading and well, these were the days when Wifi was "new" and wireless B and G was considered wow, 54mbps.

Back then, everything really felt like magic.

Old netsend trick, pre windows xp SP2.

There were enough stories at this time online that I knew it was best to say nothing. Did nothing bad, just explored, learned quite a few things and well was surprised how really easy it was to do things.

Nowadays, I feel kids won't/don't get that chance to explore - which is sad. Internet is curated through apps and "enagement" user experience and cloud services/SAAS.

Maybe they can spot a lifetime link to a google sheets master password document. ;)

Re:I got an FBI record at age 11 from dabbling in cryptograp... by bikingbismuth on Friday January 28, 2022 @09:38PM (#30123260)
Netsend made me feel like a true spooky wizard. It bums me out to see how much of our computing has moved north-south.
Re:I got an FBI record at age 11 from dabbling in cryptograp... by kingcharles on Friday January 28, 2022 @07:04PM (#30122256)
When I was 11 I social engineered the son of the computing teacher to get all the admin passwords. Then I fucked around with a whole bunch of stuff and showed a friend. When they figured out it'd been hacked they weren't sure who did it, but my buddy broke down very quickly and let them know lol.

I was banned from the computer lab for the whole of my secondary school years. It didn't matter though, because when I was 12 (~1989) the headmaster dropped computing from the school curriculum as "computers are a passing fad". They just used the computers for typing up essays after that.

Re:I got an FBI record at age 11 from dabbling in cryptograp... by Anthony-G on Friday January 28, 2022 @07:50PM (#30122570)
> Computers are a passing fad.

That reminds me of the Decca record label executives rejecting the Beatles in 1962 because “guitar groups are on the way out”.

https://en.wikipedia.org/wiki/The_Beatles%27_Decca_audition

Re:I got an FBI record at age 11 from dabbling in cryptograp... by cbozeman on Saturday January 29, 2022 @09:49AM (#30126693)
It's hard not to be critical of this headmaster, but I do have to question both the intelligence and the wisdom of someone who, in 1989, could not clearly see computers had no chance of becoming a "passing fad".

Picking up a copy of The Wall Street Journal at any point in the previous ten years could have clearly indicated that... and any school at which there's a "headmaster"... I would expect the WSJ is not a foreign entity to them.

Re:I got an FBI record at age 11 from dabbling in cryptograp... by kingcharles on Monday January 31, 2022 @06:27PM (#30156320)
The fact the parents allowed it to go through, in hindsight, is absurd. The computing teacher did try to teach us outside of school hours some times, but I failed the Computing GCSE (F grade), which is hilarious as at the exact same time I was being offered a job at Argonaut Games after Jez San tried out my 3D engine.
Re:I got an FBI record at age 11 from dabbling in cryptograp... by jpmoral on Friday January 28, 2022 @05:25PM (#30121297)
>It completely ruined my respect for authority figures.

It looks like they realised they were out of their depth and found someone who could help. Were they wrong to trust you?

Edit: I may have misunderstood your post. Did you mean:

A. The principal and the music teacher asked you to help out a few times because they knew you were skilled

B. You were always the first suspect when anything went wrong

I understood it as A. If so I really don't see how you'd lose respect for them over that.

Re:I got an FBI record at age 11 from dabbling in cryptograp... by pdpi on Friday January 28, 2022 @10:55PM (#30123632)
There's the educational, constructive "Hey lokimedes I hear you're pretty good with this computer stuff want to come and help me while I solve a problem?", then there's the not so educational and not so constructive "Hey lokimedes, I hear you're pretty good at this, want to solve this problem for us?".

The "admin" person calling you for the former? Pretty cool. The principal calling you to their office for the latter? It really does say weird things about authority figures to a kid who's paying attention, especially when mixed with the cluelessness about security.

Re:I got an FBI record at age 11 from dabbling in cryptograp... by Sophira on Saturday January 29, 2022 @01:12AM (#30124180)
It's not just the words though, here. Being called to the principal's office is an exceptional occasion. If they were called to the office that many times, they'd see through the words and recognise that the adults were out of their depth and that's why they were being called.
Re:I got an FBI record at age 11 from dabbling in cryptograp... by LocalH on Friday January 28, 2022 @06:12PM (#30121782)
It sounds like they weren't called to the principal's office to fix things, but after the fact and in a disciplinatory fashion.
Re:I got an FBI record at age 11 from dabbling in cryptograp... by conradev on Saturday January 29, 2022 @12:16AM (#30123991)
I found the password to my teacher's eBoard[1] in 4th grade (a five digit code) and started changing things as a practical joke. Then I started seeing more five digit codes just written on Post-it notes…

[1] https://www.eboard.com

Re:I got an FBI record at age 11 from dabbling in cryptograp... by 908B64B197 on Friday January 28, 2022 @05:07PM (#30121083)
> It completely ruined my respect for authority figures.

It sounds like they were right to trust you? Doesn't sound like you ever did anything bad with admin credentials. And you even used it to fix stuff.

Re:I got an FBI record at age 11 from dabbling in cryptograp... by LocalH on Friday January 28, 2022 @06:13PM (#30121792)
My reading is that they weren't called to the principal's office to fix things, but after the fact and in a disciplinatory fashion.
Re:I got an FBI record at age 11 from dabbling in cryptograp... by conradludgate on Saturday January 29, 2022 @04:20AM (#30124984)
I read the opposite, but it's still meaningful. A sysadmin who can't do his job and has to defer to a kid is embarrassing and at that point how can you trust the "authority" to know what they are doing.