Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Max White]

Exactly why my redneck technomancer is going for them. 

[Aqizzar]

Now might be an interesting time to mention that my boss let me perform a SQL-Injection hack, as an instruction to new hires.  It was on a company-owned test system of course, but that was kinda cool.

That's literally everything that I know about the world of computer hacking.

[dei]

I should stay out of this thread. I couldn't even pass the idiot test on Hack This Site two or three years ago due to my Autistic brain being unable to think in abstract ways.

All I had to do was click a button. How was I supposed to know that I was supposed to edit the HTML code and alter an if statement just to get the button to be clickable? However I do often fantasize about working for the United States government and engaging in cyber warfare with other countries even though I will never have the skills and I'm incredibly paranoid about said government watching my every move.

At least I remembered that site. I'm going to fuck off from this thread now.

[Scelly9]

Alright, hacking. I've done a bit, mostly breaking into people's wifi and screwing with them, but I once tried to spread a virus to get an army of bots. That didn't go well, after I was bested by the FREAKING port forwarding settings on my router. Whoever designed that page is a sadistic bastard. Anyway, I went around bruteforcing random crap and generally being an asshole. I don't do that anymore, and honestly I was never any good at it anyway.

[lordcooper]

And so continues Novel's epic quest to start at least half the threads on the board.

[Scoops Novel]

With spice.

[Thief^]

I brought down my high-school's entire computer network with an overly-zealous chat program I'd written (in VBscript no less). Apparently reading a network file *constantly* is not good.

That doesn't count as hacking/cracking though.

Working out the staff password to the personal reports database may count though. Was fun writing things on other peoples reports
(actually figured out after that that the student login form was just the database being put in search mode, and pressing the key combo to exit search, and the one to bring up the full forms list, meant pretty much unrestricted access to the DB)

[Telgin]

Now might be an interesting time to mention that my boss let me perform a SQL-Injection hack, as an instruction to new hires.  It was on a company-owned test system of course, but that was kinda cool.

That's literally everything that I know about the world of computer hacking.

That's pretty cool.

Our web dev team of 4 (including myself) are all surprisingly security aware while also being pretty careless of the fact.  We aren't susceptible to most SQL-injection attacks since we use prepared statements in all of our code, but we have some pretty awful security practices in other respects.  We frequently send passwords in plaintext in our requests, over unsecured channels.  I'm a bit worried that nothing bad has come of it yet.  I work to push us toward safer practices when I can, but there's a lot of inertia to work against.

As far as actual hacking goes, I haven't done much of it myself despite having a good theoretical understanding of how to do several types.  I've reverse enginereed a few programs and done some things with that (including DF where I was able to do some freaky and entertaining things with marriages, lovers and pregnancies), but not much actual hacking.  It's a lot more difficult to "hack" modern software in the traditional way, not so much because security practices have improved with the everyday programmer moreso that many programs are written in less vulnerable languages than C and C++ and operating systems taking a proactive approach to security by doing things like randomizing the address space.

This is not true of web security however, which tends to remain terrible.  I'm sure that a few minutes around a wi-fi hotspot and a packet sniffer could get you plenty of people's account credentials, and you don't ever even have to exploit phishing, XSS attacks or session fixation to get it.

[misko27]

Exactly why my redneck technomancer is going for them. 

Such words should never be put together.

Anyway, sicne everyone seems so aware, does anyone want to teach me some details? I'm learning Coding in general due to school, but this is of course not exactly being taught 

[pisskop]

Exactly why my redneck technomancer is going for them. 

Such words should never be put together.

Anyway, sicne everyone seems so aware, does anyone want to teach me some details? I'm learning Coding in general due to school, but this is of course not exactly being taught 

Seconded.  ptw
Outside of my own experiementing and poking around the internet, what the Navy thought I should know is all I gots.

[Darvi]

I hacked into my mom's modem. 'twas both fun and profitable.

[GlyphGryph]

Exactly why my redneck technomancer is going for them. 

Such words should never be put together.

Anyway, sicne everyone seems so aware, does anyone want to teach me some details? I'm learning Coding in general due to school, but this is of course not exactly being taught 

The HackThisSite link is a pretty good place to get started, truth be told. Then find a game without any mod support, and make some mods for it (this is the essence of computer hacking in a lot of ways - finding out how to tear apart some existing software and it put it back together in a better way. Get an Arduino, and learn how to program directly into a chip-set and get a decent low level understanding of how systems work - and these are actually useful in breaking through security as well. See: The recent hotal break ins where a configured Arduino was used to get by the electronic locks and break a lot of stuff. They are far more powerful than they seem at first glance, and excellent learning tools. For web security hacking, set up your own, local webserver and build a basic website with login credentials. Then try to break it. When you do, fix it, and repeat.

Most computer intrusions experts aren't really hackers, tough. It's been a long time since black-hat hacking has been nearly as useful as social engineering for turning systems to your own end. The analogy early about the car still stands - knowing where people usually hide their spare keys, or, hell, convincing them to give you the key, is almost always going to be easier than breaking into it, tearing open the control panel, and trying to hotwire the thing, all in the middle of a busy parking lot patrolled by security.

[Wayward Device]

Most computer intrusions experts aren't really hackers, tough. It's been a long time since black-hat hacking has been nearly as useful as social engineering for turning systems to your own end. The analogy early about the car still stands - knowing where people usually hide their spare keys, or, hell, convincing them to give you the key, is almost always going to be easier than breaking into it, tearing open the control panel, and trying to hotwire the thing, all in the middle of a busy parking lot patrolled by security.

I'd argue that it's been that way for data theft throughout history, even in say, the Bronze age or the Renaissance. The best way to acquire information from a secure system, be it a line of horse messenger posts secured with passwords and crippled Mongol veterans or one of the high tech communication networks we've built in the last few decades, is to trick the people running it into thinking you are one of them. Not only will you get your info, but the odds are that the system will actively help you do it. 

[Tellemurius]

I brought down my high-school's entire computer network with an overly-zealous chat program I'd written (in VBscript no less). Apparently reading a network file *constantly* is not good.

That doesn't count as hacking/cracking though.

Working out the staff password to the personal reports database may count though. Was fun writing things on other peoples reports
(actually figured out after that that the student login form was just the database being put in search mode, and pressing the key combo to exit search, and the one to bring up the full forms list, meant pretty much unrestricted access to the DB)

high school is always a best start for hackers
i caught other kids running keyloggers and shit but i just remote access into the domain controller (when you are still running windows server 2003 and didn't locked the default admin account you got some problems in IT) and made me a admin
only thing i trashed for senior prank was replace all of the math teachers with lolcats pics on the school website

[Thief^]

lol