IoT hacking and rickrolling my high school district • Hacker News Board

Re: IoT hacking and rickrolling my high school district

#291

Post by steerablesafe » Wed, Oct 13, 2021, 8:37 AM UTC

pfraze wrote: post #213

bfirsh wrote: post #103

Reminds of me my school leaving prank. I rewrote the whole internet on my school's computers. Google's logo became "Leavers '08", Facebook became "Hatebook" and was red, YouTube only played videos of cats, amongst other things. These were the days when nothing had SSL, so you could just intercept and rewrite traffic! My only requirement was: do no actual damage It was implemented as a Debian live CD that you could dr…

Used to be that Windows allowed programs to hook into each others’ event busses. (It might still, I’m not sure.) This might be why a few of my Highschool’s computers would interpret every 5th right click in minesweeper as a left click

> This might be why a few of my Highschool’s computers would interpret every 5th right click in minesweeper as a left click

This is just pure evil.

Re: IoT hacking and rickrolling my high school district

#292

Post by appleskimer » Wed, Oct 13, 2021, 8:45 AM UTC

jimt1234 wrote: post #206

Working in IT/tech for school district is the worst. My experience from many years ago - around 2002, I think: 1. First day on the job, email to boss: "Hey, the computer lab at Springfield High has a ton of known security flaws that are begging to be exploited." 2. Reply, 1 week later: "Sorry, we don't have any money for that. Just keep everything up-and-running." 3. 3 weeks later the computer lab at Springfield High…

This bring back some experience of mine when we used to have old windows machine with a list of exploits to enter the admin portal and mess with marks

Re: IoT hacking and rickrolling my high school district

#293

Post by halgir » Wed, Oct 13, 2021, 8:49 AM UTC

snerbles wrote: post #226

jimt1234 wrote: post #206

Working in IT/tech for school district is the worst. My experience from many years ago - around 2002, I think: 1. First day on the job, email to boss: "Hey, the computer lab at Springfield High has a ton of known security flaws that are begging to be exploited." 2. Reply, 1 week later: "Sorry, we don't have any money for that. Just keep everything up-and-running." 3. 3 weeks later the computer lab at Springfield High…

> All the computers displayed a popup window When I engaged in `net send` shenanigans at the local community college, at least the IT staff was smart enough to know where to scramble a runner whenever those dialog boxes popped up across campus. "ALL YOUR BASE ARE BELONG TO US" was quite the meme then, but apparently they thought it was some form of cyber-terrorism.

When I had my net send fun back in school, an IT guy found me and just explained that if it becomes a recurring thing, they'll have to disable it on the network. And that they would prefer to keep the functionality available, so it would be a real shame if I ruined that for them. I never did another one, because I understood it would be a dick move.

No condescension, no threats. Just treating me like an adult with a constructive conversation. It never occurred that anyone might overreact like many in this thread experienced. Makes me feel pretty fortunate now.

Re: IoT hacking and rickrolling my high school district

#294

Post by pkpioneer » Wed, Oct 13, 2021, 8:57 AM UTC

LG is acquiring automotive cybersecurity startup Cybellum in a $240M deal: https://pkpioneer.blogspot.com/2021/09/lg-is-acquiring-autom...

Re: IoT hacking and rickrolling my high school district

#295

Post by Timpy » Wed, Oct 13, 2021, 9:30 AM UTC

> I used a loop of the DVD bouncing logo to test stream quality.

This is a beautiful touch, if somebody happened across his testing in the middle of the night they wouldn't suspect anything was amiss.

Re: IoT hacking and rickrolling my high school district

#296

Post by lysurgic » Wed, Oct 13, 2021, 10:26 AM UTC

snerbles wrote: post #226

jimt1234 wrote: post #206

Working in IT/tech for school district is the worst. My experience from many years ago - around 2002, I think: 1. First day on the job, email to boss: "Hey, the computer lab at Springfield High has a ton of known security flaws that are begging to be exploited." 2. Reply, 1 week later: "Sorry, we don't have any money for that. Just keep everything up-and-running." 3. 3 weeks later the computer lab at Springfield High…

> All the computers displayed a popup window When I engaged in `net send` shenanigans at the local community college, at least the IT staff was smart enough to know where to scramble a runner whenever those dialog boxes popped up across campus. "ALL YOUR BASE ARE BELONG TO US" was quite the meme then, but apparently they thought it was some form of cyber-terrorism.

Wow, almost the exact same thing happened to me and I was thrown out of that school, mainly for using another students account to send the base message.

Re: IoT hacking and rickrolling my high school district

#297

Post by throwaway0a5e » Wed, Oct 13, 2021, 10:32 AM UTC

sneak wrote: post #245

belval wrote: post #2

The fact that the administration didn't choose to sue them to oblivion is refreshing. I hope we'll see a trend in the future of educator being smart enough to admit that they made a mistake and to encourage the students to develop their talent. One can only hope.

"sue" suggests civil action and a decision by the wronged party. They're lucky a prosecutor didn't prosecute them for criminal activity. The school would not have any say about whether or not this happens.

>The school would not have any say about whether or not this happens.

Schools are members of the local government "club". Prosecutors don't generally burn political capital giving the bird to other members of the club like that without a good reason.

Re: IoT hacking and rickrolling my high school district

#298

Post by smcl » Wed, Oct 13, 2021, 11:03 AM UTC

cphoover wrote: post #267

snerbles wrote: post #226

Earlier quoted context omitted.

> All the computers displayed a popup window When I engaged in `net send` shenanigans at the local community college, at least the IT staff was smart enough to know where to scramble a runner whenever those dialog boxes popped up across campus. "ALL YOUR BASE ARE BELONG TO US" was quite the meme then, but apparently they thought it was some form of cyber-terrorism.

O mannn I was suspended from HS, and banned for 2 years from touching school computers for net send shenanigans as I wasn't smart enough to cloak the originating workstation. My message to every single computer in our HS: "Hey what's up!" my friend added to this: "Your network (H:/) drive is being deleted." School administrators and teachers did not find this funny.

> and banned for 2 years from touching school computers for net send shenanigans

Ha, yeah I got banned for using net send as an IM app with friends too. There were a couple of us in my school who were skilled, enthusiastic programmers - it is kinda stupid that the punishment they decided on was to prevent us from being educated :-/

Re: IoT hacking and rickrolling my high school district

#299

Post by lysurgic » Wed, Oct 13, 2021, 11:04 AM UTC

gpt5 wrote: post #259

rmorey wrote: post #244

Earlier quoted context omitted.

Another good one on that level was using the Windows keyboard shortcut ctrl-alt-down to rotate the display upside down - totally harmless, but absolutely maddening if you don’t know how to undo it

Unfortunately, this feature was discontinued by most graphics drivers.

This is still a common prank at work on win10 pc’s

Re: IoT hacking and rickrolling my high school district

#300

Post by remix2000 » Wed, Oct 13, 2021, 11:16 AM UTC

I once wrote a script that would pluck the entire student’s computer and rat them out hard in case they tried to exploit some vulnerability. Alas, no one got owned, at least not until I graduated.