Weird computer?

[Killer360]

Here, at school, during one of my spares I was using a computer in the library and all of a sudden it seemed as though someone took control of my mouse and started exiting windows. It was really strange. Sometimes I would completely lose control of my mouse for 30 seconds. Whoever was doing it selected all the icons on the desktop, right clicked and then stopped. It was really weird.

Can any system get "hacked" like that even in a school?  ??? Just a second ago some large lady sat down and had the same problem.... it was funny.  :D

[Sidoh]

VNC?

I don't think it's possible for a system to be invulnerable (unless it's like uh... unplugged, but that defeats the purpose).  There's probably always a way in; it's just a matter of finding it.

In the labs at my old high school, I used to unplug my mouse/keyboard and plug them into other peoples' computers when they weren't looking.  It sounds like the motions you're talking about are a bit too controlled for something like that, though.

[Killer360]

There was only one other girl in the area and she doesn't know jack about computers. I forgot to mention that after whoever right clicked, the computer completely froze for about 10 seconds. Yes, it was very controlled but even the IT guy was stumped... he was like "are you sure you didn't access any illegal websites!?!!!??". I'm like no??? So I have no idea what happened but it was very strange...

[Sidoh]

There was only one other girl in the area and she doesn't know jack about computers. I forgot to mention that after whoever right clicked, the computer completely froze for about 10 seconds. Yes, it was very controlled but even the IT guy was stumped... he was like "are you sure you didn't access any illegal websites!?!!!??". I'm like no??? So I have no idea what happened but it was very strange...

Sounds something like VNC to me. :-\

[iago]

There was only one other girl in the area and she doesn't know jack about computers. I forgot to mention that after whoever right clicked, the computer completely froze for about 10 seconds. Yes, it was very controlled but even the IT guy was stumped... he was like "are you sure you didn't access any illegal websites!?!!!??". I'm like no??? So I have no idea what happened but it was very strange...

Sounds something like VNC to me. :-\

Yeah, for sure. Or it could be any number of backdoors (netbus, backorifice, pcanywhere, etc.)


(For those of you who don't get the joke: pcanywhere is made by Symantec (now), which is where I work. And it totally fits the definition of a backdoor. :) )

[Killer360]

There was only one other girl in the area and she doesn't know jack about computers. I forgot to mention that after whoever right clicked, the computer completely froze for about 10 seconds. Yes, it was very controlled but even the IT guy was stumped... he was like "are you sure you didn't access any illegal websites!?!!!??". I'm like no??? So I have no idea what happened but it was very strange...

Sounds something like VNC to me. :-\

VNC is? And how did it get on the computer?? You can't install anything if you're a student.

Wait... VNC is a remote desktop application, right?

[Sidoh]

That doesn't mean it's impossible to install applications if you're not supposed to (and don't initially have the necessary permissions to do so).

Yes.

[Killer360]

That doesn't mean it's impossible to install applications if you're not supposed to (and don't initially have the necessary permissions to do so).

Yes.

I mean you don't have administrative permissions so it wouldn't work. You can't even access the control panel so that wouldn't work.

[Warrior]

definitely possible to install VNC on a least priviledged account

[rabbit]

You can install VNC as a usermode server too.  And if they ARE using a backdoor or somesuch, it's probably not out of the question that they could get admin privileges.

[Killer360]

Hmm... strange.

[Hitmen]

Yeah, for sure. Or it could be any number of backdoors (netbus, backorifice, pcanywhere, etc.)


(For those of you who don't get the joke: pcanywhere is made by Symantec (now), which is where I work. And it totally fits the definition of a backdoor. :) )

My school uses some Altiris software that allows pretty much the same thing. Amusingly enough, they are also owned by Symantec.

[Chavo]

You can put a VNC client/server on a USB drive and run it from there if you want ;)

That sort of 'vulnerability' should generally be blocked by network traffic rules.  Clearly your school's IT department is not up to par.

[Sidoh]

I mean you don't have administrative permissions so it wouldn't work. You can't even access the control panel so that wouldn't work.

You totally missed what I was saying.  There are exploits classified as "privilege escalations," which is completely self explanatory.

Just because control panel isn't visible in the start menu or there's some policy stored in a registry key saying you can't get there doesn't mean that it's even difficult to do so.

[Ender]

I mean you don't have administrative permissions so it wouldn't work. You can't even access the control panel so that wouldn't work.

There's this whole concept called "hacking" that's based on this dilemma. It came out in like the '40s.