Can you hack in to a bbs? reddit / bbs ---------------------------------------------------------------------- FALECORE · 2023-08-06 01:45 Lets say i want to make a bbs and to make a account and log in you have to hack in, would that work? like keep old school bbs hacking alive or is it harder to do? ---------------------------------------------------------------------- n0fqy · 2023-08-06 02:12 Asking for a friend? ---------------------------------------------------------------------- [deleted] · 2023-08-06 02:22 [removed] ---------------------------------------------------------------------- [deleted] · 2023-08-06 03:33 [removed] ---------------------------------------------------------------------- RealGianath · 2023-08-06 03:57 You could run one and then learn all the exploits and hack yourself. ---------------------------------------------------------------------- nhaines · 2023-08-06 06:51 I've been thinking about this post for a couple hours, and all I can come up with is that I don't think you know what "hacking" is. If you want to use an augmented reality game to screen new users, there's no reason you couldn't write a game that has the same end effect. But you'd have to really identify the kind of activities and experience you want new users to have. (And then, because BBSes are about communities, you'd need to have something really compelling *behind* all the effort to make people want to go through it, and I don't know what that would be these days.) ---------------------------------------------------------------------- Convecticus · 2023-08-06 09:36 I think there's something to the question, since I'd like to know, "how can I protect my BBS machine from having random people run instructions I don't want". But, so far as I know, most of the random intrusion attempts on a BBS are about trying to get through because of busybox having some bugs. About the closest I've noticed on my BBS, is that a user made an account with the name of, "admin". Which _shouldn't_ do anything, because username on the BBS is pretty meaningless. ---------------------------------------------------------------------- grixit · 2023-08-06 10:36 The first bbs i made used WWIV on a Dos 5 pc. I downloaded the package and it was Pascal source code. I did a quick scan of the code and found that there was a hardwired admin account, which i removed. Then i compiled it and started it up. I advertised it and soon got people calling in. Then we discovered that one of our newbies had an admin account. Which meant very little since we hadn't done much with the setup, but they could have created their own subs and changed other users' access. I kicked them and examined the code more thoroughly. And i found that three levels down in the input procedure, was a backdoor. It was in the character routine, which was supposed to just collect characters one at a time and pass them to the command parser. But it also maintained a separate string and when that string matched a specific sequence, it would give that user special access. That's the closest to real hacking i ever saw. But there were constant rumors that there were ways to crash a bbs program without killing the remote connection, leaving the user at your C:> prompt. In any case, i switched to QBBS with Frontdoor and never had any problems. ---------------------------------------------------------------------- toadstoolpp · 2023-08-06 14:21 there waa an old trick where you could put a ZIP.EXE file in your upload and if the sysop didn't use the full path in their archiving setup the bbs would run your .EXE ---------------------------------------------------------------------- cdtoad · 2023-08-06 14:51 I ran a Renegade BBS and there was a really annoying issue where a user could start to log in and pass some string and it would take the BBS offline. ---------------------------------------------------------------------- UCN_cyberstrator · 2023-08-06 16:54 I see what your trying to do.. you might want to make a type of cryptic puzzle or code you have to hack/crack to get a access login link or something.. It's like only the worthy are allowed in. ---------------------------------------------------------------------- nhaines · 2023-08-06 21:25 Which is why in Unix/Linux the shells only search for commands along the system path. If you want to run anything in the current working directory, you have to prefix with with the path to the current directory (namely `./`). It always annoyed me when I was on a dial-up shell trying to write little 5-line C programs like a temperature converter. But it wasn't too long before I was enlightened. (Helpfully by researching why Linux was so "inconvenient," and not through any... less convenient means.) ---------------------------------------------------------------------- tribute · 2023-08-06 21:58 We'll allow it. ---------------------------------------------------------------------- digitlman · 2023-08-08 03:19 It's been done, yes. ---------------------------------------------------------------------- LakeLifeTL · 2023-09-19 16:09 OP is a apparently a world class hacker. Asking on Reddit is considered —(••÷\[ ÈไìϮε \]÷••)—. ---------------------------------------------------------------------- LakeLifeTL · 2023-09-19 16:11 I developed door games, and people were always looking for ways to crash them. I watched people from the SysOp screen try to input negative numbers, etc. Of course, decent programming techniques dictate that you look for this "out of range" type of input, but they were always poking around. ---------------------------------------------------------------------- FALECORE · 2023-09-19 19:02 Its true I am, i guessed my own password one time