Live data from Hacker News

Back Orifice (1998)

web.archive.org

201–210 of 231 posts

Re: Back Orifice (1998)

#201
post #75

Oh man, yeah also adding to the list of people that abused their highschool computer labs with this. We had so much fun, but we eventually drew the ire of the school IT admin. After class one day the teacher took us aside with the admin and asked if we had installed BO on the computers, which we of course denied... they "believed" us, heh, but gave us a stern warning that whoever was doing it should stop. We would ha…

Hex-editing Intergrade at certain points allowed you to bypass authentication and go RIIIIIGHT in. I didn’t know what that meant at the time, but my buddy sure did. He was kicked out of school a few weeks later for editing his grades.

Oh wow, yep, that's exactly what we figured out. Their save file format stored the password hash, but didn't actually encrypt or obfuscate the grade data beyond just whatever serialization they were doing. We were starting on figuring that format out when we noticed that creating a new save file with or without a password changed a byte right before the password off and on... flip it off and the app no longer prompted for the password... edit/save in the app, flip it back on, and that was that. edit: I should add, rather than get expelled we got a ton of extra credit for it since it was at least sort of sanctioned.

Re: Back Orifice (1998)

#202

Earlier quoted context omitted.

you might be interested in seeing the founders of yc https://www.ycombinator.com/people/

Immediately searched for dang when I saw there were portraits there. He seems to be the only one who doesn't show his face!

The ghost in the shell

Re: Back Orifice (1998)

#204
post #187
post #183

Earlier quoted context omitted.

An interesting bit about the internals and development of the BO code: The BO server was written in C and consisted mostly of a single while(1){ switch(command): ... } loop, the only functions were where callbacks were required, and it reused the same 5 variables in main() for everything. I got feedback from more than one security professional that this made it very difficult to reverse engineer. I think when I was w…

The only bug I recall being reported on BO was in the built in HTTP server (which I wrote from scratch in C), if you shared a specific directory with the HTTP server, on Internet Explorer it would not let you click through to sub-directories because of a missing slash at the end I think. I only ever tested it with Firefox which seemed to not care if the slash was present. I found out about this from people who though…

Was Firefox around in 1998?

Re: Back Orifice (1998)

#206

Earlier quoted context omitted.

Not only that, but some in the modern generation seem to genuinely see hackers as the scum of the earth

I know it’s a movie, but in Hackers they were also seen as the scum of the earth: “Hackers penetrate and ravage delicate public and privately owned computer systems, infecting them with viruses, and stealing materials for their own ends. These people, they are terrorists.”

Agent Richard Gill! You're hacker enemy number one, man. You're a boner!

Re: Back Orifice (1998)

#207
post #181

Hi party people, this is Sir Dystic, author of the original 1998 Back Orifice. Great to hear all of you reminiscing about my software! One thing that I did not predict when I released BO: The distribution ZIP contained three files, a readme.txt, the BO server and the BO client. In retrospect, the BO server should probably not have been distributed with the original .EXE extension as a LARGE portion of people apparent…

You're... you're still putting l33t sigs at the end of your messages, like it's still the late 90s and this is USENET.

Frickin' love that.

Re: Back Orifice (1998)

#208
post #204
post #187

Earlier quoted context omitted.

The only bug I recall being reported on BO was in the built in HTTP server (which I wrote from scratch in C), if you shared a specific directory with the HTTP server, on Internet Explorer it would not let you click through to sub-directories because of a missing slash at the end I think. I only ever tested it with Firefox which seemed to not care if the slash was present. I found out about this from people who though…

Was Firefox around in 1998?

He probably meant Mozilla

Re: Back Orifice (1998)

#209

Earlier quoted context omitted.

I just wanted to write it was a crime still back then and take the example of the first worm in 1988 : https://en.m.wikipedia.org/wiki/Morris_worm TIL: a Harvard student named Paul Graham was quite close to Robert Morris. It is a small world.

you might be interested in seeing the founders of yc https://www.ycombinator.com/people/

I never really looked at this page before. Wow, I still kind of think of YC as a small company but the reality is that they have more employees than I thought.

Re: Back Orifice (1998)

#210
post #181

Hi party people, this is Sir Dystic, author of the original 1998 Back Orifice. Great to hear all of you reminiscing about my software! One thing that I did not predict when I released BO: The distribution ZIP contained three files, a readme.txt, the BO server and the BO client. In retrospect, the BO server should probably not have been distributed with the original .EXE extension as a LARGE portion of people apparent…

[deleted]
Post reply on HN