|
Hacking
[Intelligence/Wits
+ Computer]: Anyone with computer skills can perform
most ordinary, legitimate computer applications. However, breaking
into other people's computers is usually quite difficult. The
accompanying chart details the time and difficulty levels for
hacking various systems. All hacking rolls use Intelligence
(for long-term hacking) or Wits (for fast response)
+ Computer. A failure on this roll indicates
that the hacker cannot gain access to the system, while a botch
means that the hacking has been detected — which often means
that a system operator on the other end will trace the hacker's
location immediately. Success means that the hacker actually
penetrated the system. The number of successes that you obtain
on a hacking roll is the total number of dice you can use while
working on the system. Even if a hacker has a Intelligence
+ Computer total of 9 dice, if he only rolls two successes
he can only use two of these dice while inside the system. Hacking
rolls can be made extended tasks, but doing so increases the
risk since the hacker is working with the system for longer
time.
Note that it's possible to try to "upgrade access" once the
hacker is inside the system, by putting additional successes
toward the access limit. However, this action suffers a difficulty
penalty of one each time you roll to upgrade access. If you
didn't find the backdoors and passwords right off, it takes
progressively more work to think of better ones, after all.
Once inside the system, you must make further rolls to alter
programs or to locate the exact file desired. Finding a file
containing information on a specific subject is normally difficulty
6. If the hacker knows all or part of the actual name and location
of this file, the difficulty reduces substantially, by up to
a maximum of three. Multiple successes reveal multiple files
on the same subject (if multiple files exist), or pinpoint the
file exactly. Sorting though a computer for a correlation between
various disparate bits of data or other complex and demanding
tasks increases the difficulty. Actually altering programs on
the fly is tough; the hacker must find the proper data, dive
into it and (hopefully with the proper editing programs) figure
it out and manipulate it. Aside from uploading or downloading
information, a hacker's options are limited unless he wants
to try runtime data alteration, which generally requires yet
another separate extended success roll. Truly complex maneuvers
are best left to magic. Again, a botch on any of these rolls
reveals the presence of a hacker to the system operator. If
a hacker is discovered, all hacking rolls become resisted rolls
between the hacker and the system operator (which can be a good
thing if the sysop is incompetent...). If the system operator
ever accumulates five successes in this resisted test, the hacker
is ejected and the sysop may make another roll to find any backdoors
the hacker left. The difficulty and number of successes required
varies according to the hacker's precautions and skills. If
the hacker wins by five or more successes, she is fully inside
the system (even if she was not inside before), and she may
obtain additional data before the sysop can attempt to eject
her again. Such rolls suffer from the usual limit of the hacker's
initial success, though, due to limits on access. Sysops in
the secure systems used by large corporations or the government
look for hackers regularly. Once every 4 to 12 hours, (depending
on the security level of the system) a sweep may occur. The
Storyteller rolls the sysop's Intelligence + Computer,
and checks successes against a difficulty of the hacker's Intelligence
+ Computer. In some highly secure systems used by the
military, the intelligence community or the Technocracy, system
operators look for hackers continually, and sweeps occur as
often as once an hour. Once a hacker has been detected, the
sysop may either attempt to eject him, or wait to see what he
does. It's also possible for a sysop to send a trace program
or a nasty virus after the hacker. Although doing so is usually
illegal, it's certainly a possible threat to hackers in very
secure or secret systems. In this case, the sysop is essentially
"hacking the hacker," but he doesn't need to roll to gain access
(the hacker's already inside the sysop's system, after all).
In fact, he could very well fire a program bomb right down the
line into an unsuspecting hacker's core. Thankfully, such programs
can only wipe information or reprogram the computer, or very
rarely cause the computer to do something that physically damages
itself.
| System |
Hours |
Difficulty |
| Palmtop |
1 |
5 |
| Laptop or PC |
2 |
6 |
| Mini or small network |
3 |
7 |
| Mainframe or large
network |
4 |
8 |
| Supercomputer |
5 |
9 |
| Trinary Computer |
+/-2 |
+/-1 |
| Security Software |
+1/-3 |
+1/-3 |
| Sloppy Filing |
+1/-3 |
+1/-3 |
| Cracking Software |
-1/-3 |
-1/-3 |
| Social Engineering |
-1/-3 |
-1/-3 |
| Backdoor |
-4 |
-2 |
|
|