Results 1 to 8 of 8

Thread: Got access to QNAP network appliance in school...

  1. #1
    Registered+
    Join Date
    Sep 2012
    Posts
    37
    Thanks
    0
    Thanked
    1 time in 1 post

    Got access to QNAP network appliance in school...

    Well basically me and a friend found a way into the schools network host via internal network links. We access the home page and login with the username Admin and password Admin. We have access to everything on the schools servers, all files and have administrator access on everything.

    Now I was just wondering, IF we do get caught, what could the consequences be? I mean, the schools IT staff shouldn't have a password the same as the username for a starter. There's a lot of security flaws within our schools computer network and me and my friend are always the ones to come across it but usually end up in trouble for trying to help them and make it more secure.

    If any sneaky people are here on Hexus, what should we do with this information? Download it all onto an external hard-drive and look at it all at home? We think we can only access it from school computers but going to try turning on the cloud service to see if we can connect from home, through tor of course. What else could we do with this information?

    Thanks guys!

  2. #2
    Senior Moment blueball's Avatar
    Join Date
    Aug 2005
    Location
    Edinburgh
    Posts
    2,246
    Thanks
    680
    Thanked
    335 times in 263 posts
    • blueball's system
      • Motherboard:
      • Gigabyte P35-DQ6
      • CPU:
      • Q9650 (4 x 3GHz Cores)
      • Memory:
      • 8Gb (4 x 2Gb) Kingston PC2-6400 DDR2
      • Storage:
      • 1TB RAID 0 (2 x Samsung F1 500Gb)
      • Graphics card(s):
      • Gigabyte 2GB GeForce GTX 670 OC Windforce 3X
      • PSU:
      • CoolerMaster Silent Pro 850W
      • Case:
      • Lian-Li A17
      • Operating System:
      • Win 7 Ultimate x64
      • Monitor(s):
      • 24" Samsung T240 (1920x1200)
      • Internet:
      • Virgin Media 50Mb

    Re: Got access to QNAP network appliance in school...

    The very fact that you are accessing it without permission is against the law. Tell them that you have discovered a weakness in their system. If you do get caught you could feasibly face a jail sentence although in reality that might be a last resort.

    http://www.legislation.gov.uk/ukpga/1990/18/contents

    Read section 1!!!
    Rgds,

    BB
    Hexus Trust here and here

  3. #3
    Registered+
    Join Date
    Sep 2012
    Posts
    37
    Thanks
    0
    Thanked
    1 time in 1 post

    Re: Got access to QNAP network appliance in school...

    We are in the UK I've never heard that we could go to jail. We are using other peoples accounts in school so it kinda can't be traced to us? We aren't doing anything that can harm the integrity just looking around.

    I mean this has huge possibilities and the fact we could access it so easily means that a hacker attack could resort in the loss of everything.

  4. #4
    Senior Moment blueball's Avatar
    Join Date
    Aug 2005
    Location
    Edinburgh
    Posts
    2,246
    Thanks
    680
    Thanked
    335 times in 263 posts
    • blueball's system
      • Motherboard:
      • Gigabyte P35-DQ6
      • CPU:
      • Q9650 (4 x 3GHz Cores)
      • Memory:
      • 8Gb (4 x 2Gb) Kingston PC2-6400 DDR2
      • Storage:
      • 1TB RAID 0 (2 x Samsung F1 500Gb)
      • Graphics card(s):
      • Gigabyte 2GB GeForce GTX 670 OC Windforce 3X
      • PSU:
      • CoolerMaster Silent Pro 850W
      • Case:
      • Lian-Li A17
      • Operating System:
      • Win 7 Ultimate x64
      • Monitor(s):
      • 24" Samsung T240 (1920x1200)
      • Internet:
      • Virgin Media 50Mb

    Re: Got access to QNAP network appliance in school...

    See my update to previous post.

    By using other peoples accounts you are making things worse. You may think this is fun but you are breaking UK law.

    I agree that it is serious but you have to let them know (anonymously if necessary by creating a gmail account) that their system is insecure. Then you need to stop accessing the relevant areas.!
    Rgds,

    BB
    Hexus Trust here and here

  5. #5
    Registered+
    Join Date
    Sep 2012
    Posts
    37
    Thanks
    0
    Thanked
    1 time in 1 post

    Re: Got access to QNAP network appliance in school...

    I see, thank you. Our IT technicians don't really have any idea what they are doing, if we tell them we will most likely end up in trouble and they probably won't fix it like all the other stuff..

  6. #6
    Senior Moment blueball's Avatar
    Join Date
    Aug 2005
    Location
    Edinburgh
    Posts
    2,246
    Thanks
    680
    Thanked
    335 times in 263 posts
    • blueball's system
      • Motherboard:
      • Gigabyte P35-DQ6
      • CPU:
      • Q9650 (4 x 3GHz Cores)
      • Memory:
      • 8Gb (4 x 2Gb) Kingston PC2-6400 DDR2
      • Storage:
      • 1TB RAID 0 (2 x Samsung F1 500Gb)
      • Graphics card(s):
      • Gigabyte 2GB GeForce GTX 670 OC Windforce 3X
      • PSU:
      • CoolerMaster Silent Pro 850W
      • Case:
      • Lian-Li A17
      • Operating System:
      • Win 7 Ultimate x64
      • Monitor(s):
      • 24" Samsung T240 (1920x1200)
      • Internet:
      • Virgin Media 50Mb

    Re: Got access to QNAP network appliance in school...

    As I said, if you feel you will get in trouble (and by using other peoples accounts you should) then create a one-off email account and email the school anonymously to let them know.
    Rgds,

    BB
    Hexus Trust here and here

  7. #7
    Registered+
    Join Date
    Sep 2012
    Posts
    37
    Thanks
    0
    Thanked
    1 time in 1 post

    Re: Got access to QNAP network appliance in school...

    I see! Cheers buddy!

  8. #8
    Admin Team peterb's Avatar
    Join Date
    Aug 2005
    Location
    Southampton
    Posts
    13,153
    Thanks
    1,372
    Thanked
    1,923 times in 1,544 posts
    • peterb's system
      • Motherboard:
      • Nascom 2
      • CPU:
      • Z80B
      • Memory:
      • 48K 8 bit memory on separate card
      • Storage:
      • Audio cassette tape - home built 5.25" floppy drive
      • Graphics card(s):
      • text output (composite video)
      • PSU:
      • Home built
      • Case:
      • Home built
      • Operating System:
      • Nas-sys
      • Monitor(s):
      • 12" monocrome composite video input
      • Internet:
      • No networking capability on this machine

    Re: Got access to QNAP network appliance in school...

    You have potentially committed an offence under the computer misuse act.

    HEXUS is a UK based site and does not condone activity that is unlawful.
    (\__/)
    (='.'=)
    (")_(")

    My broadband speed - 750 Meganibbles/minute

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •