Phisherman's Friends



  • Alaska Children tricking their teachers with a fake windows update, take control of school network.



    BBC News Article - Alaska phishing pupils take over classroom computers



    lose school network.



    awesome security!



  • The sad part is those kids were probably expelled from the school for that, and also are probably facing enough years of jail time that they've practically been executed already.



  • @MiffTheFox said:

    The sad part is those kids were probably expelled from the school for that, and also are probably facing enough years of jail time that they've practically been executed already.

    No, those extreme punishments are reserved for boys who wear NRA t-shirts and girls who share their supply of Midol.



  • @Algorythmics said:

    Alaska Children tricking their teachers with a fake windows update, take control of school network.

    There is hope!



  • @RonBeck62 said:

    @MiffTheFox said:
    The sad part is those kids were probably expelled from the school for that, and also are probably facing enough years of jail time that they've practically been executed already.

    No, those extreme punishments are reserved for boys who wear NRA t-shirts and girls who share their supply of Midol.




    I wouldn't be so sure about that. In high school I noticed there was a remote control service running on all the computers (I forget what it was called, but it was a VNC type thing) so I put the free version of the client side on a flash drive. Turned out there was no password for any computer in the school, so I would occasionally mess with other students. Eventually I got caught (because of a really stupid move on my part) and I had to go to a hearing to possibly be expelled. I think the only reason I got a 10 day suspension instead was because I brought a lawyer, which they weren't expecting.



  • Maybe they were not actually expert hackers, but just used some random tool they found on some internet forums?



  • @spamcourt said:

    Maybe they were not actually expert hackers, but just used some random tool they found on some internet forums?

     

    For phishing? Yes, perhaps they had to download an email client.

     



  • @MiffTheFox said:

    The sad part is those kids were probably expelled from the school for that, and also are probably facing enough years of jail time that they've practically been executed already.

     The article Fark links to made a point of mentioning that, while final punishment had not yet been determined, no one had been expelled, and no criminal charges would be filed regardless.

    Plus, this is Alaksa. They'd just feed 'em to the bears.



  • @taustin said:

    @MiffTheFox said:

    The sad part is those kids were probably expelled from the school for that, and also are probably facing enough years of jail time that they've practically been executed already.

     The article Fark links to made a point of mentioning that, while final punishment had not yet been determined, no one had been expelled, and no criminal charges would be filed regardless.

    Plus, this is Alaksa. They'd just feed 'em to the Russians



  • Having found that everyone at my highschool appeared to have root access to absolutely everything (everything mostly being a collection of wanky Acorns), I wrote a script that copied some of the most hardcore pornography I could find, and pasted multiple copies of it into every users folder.



    The best the school headmaster do was essentially say "We know it was you, so you'd better admit it, so that we can actually punish you."



    At which I obviously laughed in his face, and asked if he thought I was born yesterday. There ended the sum total of my punishment.



    It upsets me that the youth of today are not apparently able to do similar without some jumped up failure trying to punish them for it.



  • @eViLegion said:

    Having found that everyone at my highschool appeared ...in... some of the most hardcore pornography I could find, ... I was born... for it.



  • @Buttembly Coder said:

    @eViLegion said:
    Having found that everyone at my highschool appeared ...in... some of the most hardcore pornography I could find, ... I was born... for it.

    Awesome!



  • @MiffTheFox said:

    The sad part is those kids were probably expelled from the school for that, and also are probably facing enough years of jail time that they've practically been executed already.

    Is that Russian pedo-bear?



  • @blakeyrat said:

    Is that Russian pedo-bear?

    Soviet Winnie the Pooh.

    Or rather it would be if my website was up at the moment.



  • @the principal said:

    Now that we have all the machines back in our control, nothing new can happen.
    Just the same stuff once more, then.

    @the principal said:

    Yes, something new is going to have to happen.
    Make up your mind!



  • @Zecc said:

    @the principal said:

    Now that we have all the machines back in our control, nothing new can happen.
    Just the same stuff once more, then.

    @the principal said:

    Yes, something new is going to have to happen.
    Make up your mind!

    I thought the best quote was

    @the principal said:

    I don't believe any hardware issues were compromised

    what is that i dont even


     



  • @MiffTheFox said:

    @blakeyrat said:
    Is that Russian pedo-bear?

    Soviet Winnie the Pooh.

    Or rather it would be if my website was up at the moment.

     

    In Soviet Russia...

     

    ...in Soviet Russia...

     

    ...I can't even come up with something to go with that.  I'll just leave it at "in Soviet Russia."

     



  • @drurowin said:

    @MiffTheFox said:

    @blakeyrat said:
    Is that Russian pedo-bear?

    Soviet Winnie the Pooh.

    Or rather it would be if my website was up at the moment.

     

    In Soviet Russia...

     

    ...in Soviet Russia...

     

    ...I can't even come up with something to go with that.  I'll just leave it at "in Soviet Russia."

     

    In Soviet Russia, Winnie Poohs on your website.

     



  • @lethalronin27 said:

    In high school I noticed there was a remote control service running on all the computers (I forget what it was called, but it was a VNC type thing) so I put the free version of the client side on a flash drive. Turned out there was no password for any computer in the school, so I would occasionally mess with other students
     

    Did you mean "no password for theremote control service" - it was unprotected?

    If so, do you know if there were consequences for those that installed and failed to secure the service?

    I'm thinking of The Social Network in which Zuckers pointed out the ease he was able to conduct his neferious activities (and the answer to the campus-wide problem was written in plain sight on his window) plus highlighted how he wasn't thanked for identifying a security hole that had been overlooked by the admins.



  • @Cassidy said:

    @lethalronin27 said:

    In high school I noticed there was a remote control service running on all the computers (I forget what it was called, but it was a VNC type thing) so I put the free version of the client side on a flash drive. Turned out there was no password for any computer in the school, so I would occasionally mess with other students
     

    Did you mean "no password for theremote control service" - it was unprotected?

    If so, do you know if there were consequences for those that installed and failed to secure the service?

    I'm thinking of The Social Network in which Zuckers pointed out the ease he was able to conduct his neferious activities (and the answer to the campus-wide problem was written in plain sight on his window) plus highlighted how he wasn't thanked for identifying a security hole that had been overlooked by the admins.

    I never saw The Social Network, but yes. There was NO password for the remote control service. As far as I know, there were no consequences for the guys who installed it. It was a VERY small school though (my graduating class was 29 people). The IT department was 2 guys who basically supervised themselves. No other staff member at the school understood or cared what they did.



  • @Cassidy said:

    @lethalronin27 said:

    In high school I noticed there was a remote control service running on all the computers (I forget what it was called, but it was a VNC type thing) so I put the free version of the client side on a flash drive. Turned out there was no password for any computer in the school, so I would occasionally mess with other students
     

    Did you mean "no password for theremote control service" - it was unprotected?

    If so, do you know if there were consequences for those that installed and failed to secure the service?

    I'm thinking of The Social Network in which Zuckers pointed out the ease he was able to conduct his neferious activities (and the answer to the campus-wide problem was written in plain sight on his window) plus highlighted how he wasn't thanked for identifying a security hole that had been overlooked by the admins.

    I never saw The Social Network, but yes. There was NO password for the remote control service (I don't know why I worded that the way I did). As far as I know, there were no consequences for the guys who installed it. It was a VERY small school though (my graduating class was 29 people). The IT department was 2 guys who basically supervised themselves. No other staff member at the school understood or cared what they did.



  •  

    @MiffTheFox said:
    The sad part is those kids were probably expelled from the school for that, and also are probably facing enough years of jail time that they've practically been executed already.

    Back when I was at school, many years ago, I was lucky enough to be transferred to a new school which, despite every other school in the country (or so it seemed) having leapt onto the BBC Model B bandwagon, actually had PC clones, a (IIRC Token Ring) network, individual logons and a network share for storing documents.

    However, this being the laet 80s, with storage limitations and close to 1000 students, everyone was allocated just 50k of space on the fileserver. Now, considering all most kids did was 'word processing' and the client for which was basically a plain text editor, 50k was actually ample for pretty much everyone.

    I had a PC copy of Elite, and I liked to play it during breaks & lunchtimes. I'd made myself a 5.25" floppy with a copy of DOS Elite on it, so I could use any PC with a working floppy drive and be able to play. I'd worked all the way up to 'Deadly' status and was closing in on 'Elite'.

    But, being a school with ignorant kids and low budgets, many of the machines didn't have a working floppy drive, and the ones that did would be the first to be taken, so often I'd be stuck, frustrated, unable to play. One day I happened to watch the maths teacher who was also in charge of the whole thing, and saw him in an interface showing each student and their quota! A plan was hatched. The next day, a discrete shoulder-surf got his username and password, I quickly jumped to a machine in a discrete location, logged in as him, and after a while working out the admin interface and the commands, I now had a 500k quota instead of 50k, enough room to put Elite in, so I could run it from any machine, not just the ones with working floppy drives.

    All was good for several weeks, I was getting my Elite fix every lunch time, and I was happy. Then, I got pulled out of class and marched to the Headmaster where my crime was laid out. My parents were called into the school, arguments and accusations flew for several hours, and eventually I was suspended from school for 2 weeks.

    What do I do for a living now? Well, these days I do the JOAT sysadmin role for SMBs running everything from servers down to desktop support, but for years my specialism was.... Network Security.

    So, yeah. Once of the few things I learned at school which ended up being relevant to my eventual career, I got a 2 week suspension from school for learning it.


  • @Zadkiel said:

    ...snip long story...

    Yeah it seems things go like that pretty often for kids interested in computers. After my suspension was over (same as you, 2 weeks) I wasn't allowed to use a computer in school for 3 months, and to make sure I really wasn't using a computer I had to sit in the vice principal's office during free periods. Whenever I was there I would read a book on C++ (partially so I could rub it in the guy's face), now I'm a programmer.


Log in to reply