Live data from Hacker News

Saying “sup” with `net send`

drew.shoes

131–140 of 144 posts

Re: Saying “sup” with `net send`

#132
post #54

I worked for Microsoft during those times doing security for Windows. In the early 90s employees still occasionally used the Messenger service (the service behind “net send”) for messaging. It was originally intended for alerts like print job completion or server powering down, but it became widely abused. It could actually be used over the internet if the target machine was addressable, eg had a non-rfc1518 address.…

> most of them …surely begs an interesting question!

Some services like Browser and WINS are still needed by some organizations; I’m not involved anymore but I understand that Microsoft has added security features where they can to those services.

Re: Saying “sup” with `net send`

#133
post #87

My entire school district was in the same domain/workgroup and so I remember sending a net send to literally every computer on the network, 4 high schools (mine had a population of 4K students), 3 middle schools and a dozen elementary schools. The IT department came running into the computer lab to figure out who had done it. I simply closed the window, switched back to MS Word and played dumb. Good times. A few mont…

Do you mean suspended? Expulsion is a permaban and means you have to find a new school to attend. In any case, your tenacious dedication to the cause was admirable.

I think you'd be surprised.

In my own personal experience, I was immediately expelled for getting access to admin in the AD for our district. Didn't cause any "pranks" or anything.

This was around 2015, I think schools are just much harder on "hacking" incidents these days.

Re: Saying “sup” with `net send`

#135
post #18

Heh. If you used the underlying windows api calls, you could spoof the sender. Something I discovered when I did just that, in the Windows 2000 days. Combine it with a for loop and you could generously message everyone on the LAN with little effort. There's a reason why everyone around me turned off the net service after a while...

Hehe yes, the API was called something with named pipes IIRC. I created a GUI in Delphi that could spoof net send sender and used it at LANs and school.

Re: Saying “sup” with `net send`

#136
post #87

My entire school district was in the same domain/workgroup and so I remember sending a net send to literally every computer on the network, 4 high schools (mine had a population of 4K students), 3 middle schools and a dozen elementary schools. The IT department came running into the computer lab to figure out who had done it. I simply closed the window, switched back to MS Word and played dumb. Good times. A few mont…

Do you mean suspended? Expulsion is a permaban and means you have to find a new school to attend. In any case, your tenacious dedication to the cause was admirable.

Yes. I was suspended “indefinitely” and after about a week of not hearing from them I just showed back up at school one day. I was escorted to the main office by my teacher who said “uhh bud I don’t think you’re supposed to be here” and then they informed me I was being expelled and sent to a different school. They asked me to write an essay about my experiences during this time, while family came to pick me up, and I told them to get lost.

Ultimately this experience hardened me in a number of ways. In my new school I had a really cool counselor who knew about my wrongdoings but was still supportive. I distinctly remember the discussion about needing a fine art requirement to graduate - but I was red flagged for absolutely no computer classes so couldn’t take computer graphics. Ended up taking ceramics and it was hands down the most fun class I had ever taken in all of school. Ended up meeting my girlfriend there too, losing my virginity, etc. all-in-all it was a blessing in disguise.

The irony is that the school I got kicked out of was a special science and technology magnet school with a ginormous superiority complex. They could have easily turned me into a white hat assistant to help them with the network but they were so insecure (literally and emotionally) that they wanted to make an example of me.

Re: Saying “sup” with `net send`

#137
post #59

This brings back good memories from High School. Here's a bunch of things we used to do: 1. Set fun messages on all the HP Printers: https://www.irongeek.com/i.php?page=security/jetdirecthack 2. Bypass firewall restrictions by setting http:// to https:// (later had to resort to SSH tunneling using Putty). Got me banned from our library for a month when I was on Facebook and a teacher passed by. 3. Our student directo…

Oh man!

This reminds of all the shenanigans we had back in school (in the prime of Windows XP). Among the things of:

1. Doing the same thing you did with #7, as in flippin the screen. However, our computers were so slow that you could spam the rotation combination for 30sec and it would go on for at least 5minutes or even more before it was finished. It was almost faster to just do a hard reset most of the times.

2. Our network was miss-configured, which let us to connect two ethernet ports on the same switch together and take out a whole class room. Or better yet, if someone had forgot to lock the room for building switch and do the same.

3. Pupils were not allowed on school wifi back then, but somehow our IT-department wasn't up to date when those popular WEP vulnerabilities were released. Didn't take long for pupils to dual boot Backtrack and sniff out the password. School had to invest in better security until next semester.

4. MSN was blocked on school network. This later became a source of inspiration for those studying programming back then. As an example: there was a program published unto the public network share (deep down) called msn-unlocker.exe which wouldn't unlock MSN for you, but rather create directories inside directories recursively until windows registry and harddrive just gave up.

There is of course a lot more stories here, but I'll keep those for reunions and bar nights with friends :)

Re: Saying “sup” with `net send`

#138
post #59

This brings back good memories from High School. Here's a bunch of things we used to do: 1. Set fun messages on all the HP Printers: https://www.irongeek.com/i.php?page=security/jetdirecthack 2. Bypass firewall restrictions by setting http:// to https:// (later had to resort to SSH tunneling using Putty). Got me banned from our library for a month when I was on Facebook and a teacher passed by. 3. Our student directo…

> 3. Our student directory set a cookie to a 6 digit identifier in the cookie. We could access any student's grades and details by just setting it to another ID, or looking at their lunch card.

It still amazes me that weev went to Federal prison for doing essentially this on the internet and telling others how he did it

Re: Saying “sup” with `net send`

#139
I'm late to comment, but wanted to chime in and add that this is how I was expelled from high school.

All of our computers among 50+ elementary/middle and high schools were networked together. We could open CD trays, turn on/off window services, force restarts and other things we thought were funny at the time.

One day, I decided to send the message 'I'm gonna kill you' to a friend and didn't know his computer name. I left the wildcard in there for the domain to our school and poof, 900+ computers got the message. Lots of kids were scared and jumped out of their seat reading the message. I realized quickly i made a mistake...

I was labeled for sending a terroristic threat and kicked out. After some litigation and staying at home for a few months, they let me back into school the next year.

Post reply on HN