Comment by jlokier | Hacker News Reader

Comment by jlokier | Hacker News Reader

Parent Full thread

I have a similar story.

We had a classroom like yours, with BBC Micros and special BBC fileserver computer of some kind, with the important school stuff on it.

My fun command was a one-liner that repeatedly remote-PEEKed the server's keyboard buffer memory and displayed it on one of the classroom computers.

One day, when the teacher went over to the special server corner to type in the server password, I quickly entered this one-liner into a computer in the main area, and lo as teacher typed the password thinking it was all very private and special, it appeared key by key on my screen. Of course all the children were watching my screen, "hey watch this...".

Yes, the folly of youth :-)

That got me permanently banned from the computer room. I didn't expect that, I thought we'd all laugh it off and tell me not to do it again. Ironically, knowing more about computers than anyone else in the school, I wasn't allowed to study computers at school or use them.

Still won a programming competition there anyway, for making a pretty demo to tell a story :-)

Oh you too! My ban came from discovering where the station number (the 8 bit number uniquely identifying each BBC Micro on the Econet network - like a MAC address) was stored in memory. I did this by the obvious technique of searching memory for this number on several machines and comparing the addresses - it was address 3361. Then I found that by changing this you could impersonate the credentials of the person logged in to the other machine, although it worked better if you also had a co-conspirator turn off their machine at the same time.

The other hack which possibly contributed was writing a kind of "broadcast NOTIFY" that sent your keystrokes to all of the other machines on the network, allowing the user to remote control all the things. The service manual I just found online says that *NOTIFY is a dangerous command which the operator might want to remove - but in fact there was a system call which did the same thing and I used that instead.

I recall the hex address being D22 (so 3362) although it's been 30-cough-something years so I could be misremembering.

I built a full-on remote hacking utility that got to the point where it would download the remote victim's RAM, upload the infamous laugh sound, play it, then restore the RAM so the victim was - usually - back to before they got freaked out.

A small group of us built a multi-screen text scrolling and image display sequencing tool for the various school open days. I still recall the nervous look on the teacher's face as we deconstructed the computer lab to get all the Microvitec Cub's lined up! Those were fun times.

Yeah I think you're right about that address, I misremembered.

I got banned a little later (in the 90s) for writing a QBasic "chat app" that worked across the school network by way of a public NetWare shared drive. I didn't even take IT as a GCSE option because having arguments with teachers who thought a PC's base unit was "a CPU" didn't seem worth it, and my disdain for "IT" (as opposed to software engineering) unfairly remains to this day :-D

Reply on news.ycombinator.com