Results 1 to 8 of 8

Thread: Got access to QNAP network appliance in school...

  1. #1
    Registered+
    Join Date
    Sep 2012
    Posts
    45
    Thanks
    0
    Thanked
    1 time in 1 post

    Got access to QNAP network appliance in school...

    Well basically me and a friend found a way into the schools network host via internal network links. We access the home page and login with the username Admin and password Admin. We have access to everything on the schools servers, all files and have administrator access on everything.

    Now I was just wondering, IF we do get caught, what could the consequences be? I mean, the schools IT staff shouldn't have a password the same as the username for a starter. There's a lot of security flaws within our schools computer network and me and my friend are always the ones to come across it but usually end up in trouble for trying to help them and make it more secure.

    If any sneaky people are here on Hexus, what should we do with this information? Download it all onto an external hard-drive and look at it all at home? We think we can only access it from school computers but going to try turning on the cloud service to see if we can connect from home, through tor of course. What else could we do with this information?

    Thanks guys!

  2. #2
    Senior Moment blueball's Avatar
    Join Date
    Aug 2005
    Location
    Edinburgh
    Posts
    2,426
    Thanks
    846
    Thanked
    379 times in 294 posts
    • blueball's system
      • Motherboard:
      • Asus Z390A
      • CPU:
      • i9-9900KS
      • Memory:
      • Kingston 64GB (2x32GB) DDR4 2400MHz
      • Storage:
      • 2TB Samsung 970 EVO Plus NVMe PCIE M.2 plus Samsung 860 EVO 4TB SSD
      • Graphics card(s):
      • ASUS TUF RTX 3080 Ti GAMING OC
      • PSU:
      • Corsair HX850 850 W Full Modular 80 Plus Platinum
      • Case:
      • Corsair Carbide 330R Ultra Silent Midi Tower
      • Operating System:
      • Win 10 Pro x64
      • Monitor(s):
      • IIYAMA 3461WQ IPS 34" 3440x1440 plus BenQ GW2765HT IPS 27" 2560x1440
      • Internet:
      • Plusnet 28Mb

    Re: Got access to QNAP network appliance in school...

    The very fact that you are accessing it without permission is against the law. Tell them that you have discovered a weakness in their system. If you do get caught you could feasibly face a jail sentence although in reality that might be a last resort.

    http://www.legislation.gov.uk/ukpga/1990/18/contents

    Read section 1!!!
    Rgds,

    BB
    Hexus Trust here and here

  3. #3
    Registered+
    Join Date
    Sep 2012
    Posts
    45
    Thanks
    0
    Thanked
    1 time in 1 post

    Re: Got access to QNAP network appliance in school...

    We are in the UK I've never heard that we could go to jail. We are using other peoples accounts in school so it kinda can't be traced to us? We aren't doing anything that can harm the integrity just looking around.

    I mean this has huge possibilities and the fact we could access it so easily means that a hacker attack could resort in the loss of everything.

  4. #4
    Senior Moment blueball's Avatar
    Join Date
    Aug 2005
    Location
    Edinburgh
    Posts
    2,426
    Thanks
    846
    Thanked
    379 times in 294 posts
    • blueball's system
      • Motherboard:
      • Asus Z390A
      • CPU:
      • i9-9900KS
      • Memory:
      • Kingston 64GB (2x32GB) DDR4 2400MHz
      • Storage:
      • 2TB Samsung 970 EVO Plus NVMe PCIE M.2 plus Samsung 860 EVO 4TB SSD
      • Graphics card(s):
      • ASUS TUF RTX 3080 Ti GAMING OC
      • PSU:
      • Corsair HX850 850 W Full Modular 80 Plus Platinum
      • Case:
      • Corsair Carbide 330R Ultra Silent Midi Tower
      • Operating System:
      • Win 10 Pro x64
      • Monitor(s):
      • IIYAMA 3461WQ IPS 34" 3440x1440 plus BenQ GW2765HT IPS 27" 2560x1440
      • Internet:
      • Plusnet 28Mb

    Re: Got access to QNAP network appliance in school...

    See my update to previous post.

    By using other peoples accounts you are making things worse. You may think this is fun but you are breaking UK law.

    I agree that it is serious but you have to let them know (anonymously if necessary by creating a gmail account) that their system is insecure. Then you need to stop accessing the relevant areas.!
    Rgds,

    BB
    Hexus Trust here and here

  5. #5
    Registered+
    Join Date
    Sep 2012
    Posts
    45
    Thanks
    0
    Thanked
    1 time in 1 post

    Re: Got access to QNAP network appliance in school...

    I see, thank you. Our IT technicians don't really have any idea what they are doing, if we tell them we will most likely end up in trouble and they probably won't fix it like all the other stuff..

  6. #6
    Senior Moment blueball's Avatar
    Join Date
    Aug 2005
    Location
    Edinburgh
    Posts
    2,426
    Thanks
    846
    Thanked
    379 times in 294 posts
    • blueball's system
      • Motherboard:
      • Asus Z390A
      • CPU:
      • i9-9900KS
      • Memory:
      • Kingston 64GB (2x32GB) DDR4 2400MHz
      • Storage:
      • 2TB Samsung 970 EVO Plus NVMe PCIE M.2 plus Samsung 860 EVO 4TB SSD
      • Graphics card(s):
      • ASUS TUF RTX 3080 Ti GAMING OC
      • PSU:
      • Corsair HX850 850 W Full Modular 80 Plus Platinum
      • Case:
      • Corsair Carbide 330R Ultra Silent Midi Tower
      • Operating System:
      • Win 10 Pro x64
      • Monitor(s):
      • IIYAMA 3461WQ IPS 34" 3440x1440 plus BenQ GW2765HT IPS 27" 2560x1440
      • Internet:
      • Plusnet 28Mb

    Re: Got access to QNAP network appliance in school...

    As I said, if you feel you will get in trouble (and by using other peoples accounts you should) then create a one-off email account and email the school anonymously to let them know.
    Rgds,

    BB
    Hexus Trust here and here

  7. #7
    Registered+
    Join Date
    Sep 2012
    Posts
    45
    Thanks
    0
    Thanked
    1 time in 1 post

    Re: Got access to QNAP network appliance in school...

    I see! Cheers buddy!

  8. #8
    The late but legendary peterb - Onward and Upward peterb's Avatar
    Join Date
    Aug 2005
    Location
    Looking down & checking on swearing
    Posts
    19,378
    Thanks
    2,892
    Thanked
    3,403 times in 2,693 posts

    Re: Got access to QNAP network appliance in school...

    You have potentially committed an offence under the computer misuse act.

    HEXUS is a UK based site and does not condone activity that is unlawful.
    (\__/)
    (='.'=)
    (")_(")

    Been helped or just 'Like' a post? Use the Thanks button!
    My broadband speed - 750 Meganibbles/minute

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •