Skip to content(if available)orjump to list(if available)

Why I'm teaching kids to hack computers

bonoboTP

I don't think you can recreate this in any top-down manner no matter how well-intentioned.

It has to matter to them, and what's more, it gives you extra boost if you aren't supposed to do it and no parent or teacher pats you on the shoulder, but rather your friends or people in online forums like it, or simply you like it for yourself, seeing that the computer does what you want.

I learned computers by making a website for my school class, where we would put pictures from events and excursions, hosted a chat and a phpbb, designed the graphical elements in cracked warez Photoshop etc. This forced me to naturally pick up the skills. HTML, JS, burning ISO to CD, downloading things etc. Also warez games, learning about the Program Files difectory at like age 8 and how to copy the cracked exe there. Or setting up port forwarding for multi-player gaming.

Or when I modded GTA (3/VC/SA) with new car models that I built in 3D modeling software based on hunting down the orthographic projection blueprints of our family car, or adding the police vehicles from my country in GTA, messing with textures etc.

Or translating games from English, reverse engineering the binary file that contained the strings, I figures out that the length of each string was also there and I had to modify that too, learn about big endian and little endian, learn to work with a hex editor, understand what hex is. It was super exciting. If I had a lecture from some teacher about hex representation with some exercises at the end of the chapter for homework, I likely would have found it boring. But here I had context, I had a goal, and I had no idea what I was looking at when I opened the hex editor, I just saw that people used similar tools for translating other games and so I tried on less popular games where nobody had a specialized tool yet, it felt like making discoveries, going deep into the jungle and prevailing.

Now to contradict myself, I did have a lot of fun also while solving PythonChallenge.com, even though it's artificial tasks. But at least I found it myself online and wasn't handed to me and nobody knew or cared that I was working on it.

So I think this is just really hard to externally motivate if the kids don't have any desires or drive to see some effect caused by them. And maybe even I wouldn't do it in the current software and phone environment.

But we also have to remember that a generation ago it was also not many people who were really into computers.

sikimiki

In the early 2000s, growing up in a third-world country with limited resources meant computers and operating systems were constantly breaking. That scarcity pushed me to tinker and experiment, I learned to troubleshoot hardware, reinstall OSes, and reverse-engineer odd behaviors. I even experimented with keyloggers out of curiosity. That practical, trial-and-error schooling is where a lot of the so called “common sense” about security comes from. It is less theory, more failing, fixing, and learning what actually keeps one safe online.

I think it all stemmed from curiosity to learn and tinker. I wonder if gamifying it is enough but it’s a step.

cat-whisperer

Started modding Android ROMs at 13. That age is perfect; old enough to understand consequences, young enough to not care about breaking things.

Hardware hacking tools have gotten more accessible since then. The Flipper Zero makes this easier now; 256KB RAM, open firmware, $200. Compare that to needing a full PC setup in the 2000s. Lower barrier, same curiosity-driven learning.

Guided challenges vs pure exploration; both work. The structure gets more people started. The ones who stick around will break out of the sandbox anyway.

zkmon

Early 90's were more fun. I modified DOS command.com file to change the outputs it prints, drilled holes into laptop to attach broken hinges, break electronic garbage to salvage wires and interesting things, disassemble disk drives, ...

marak830

Haha that reminds me, Qbasic using the help file to figure out how to program. Taking apart a HD and getting my fingers pinched between the two bloody strong magnets.

Amazing what you learn when you have no other distraction xD

kace91

“El hambre agudiza el ingenio”, we say in Spanish. Hunger sharpens the mind.

Growing up with fewer resources than others paradoxically leads to better outcomes sometimes, since you’re conscious of the barriers around you and that motivates you to overcome them.

If I had grown up with the latest iPhone I would never have cared about rooting and custom ROMs, for example.

twostraws

I suspect gamifying it isn't enough, but as you say it's a step, and if it helps more people get involved then hopefully others can provide more steps to follow.

agigao

Such a great idea and product!

Thanks for all the hard work.

However, please get rid of micro-transactions...

I'm fine paying full price of the product for my kid, but not micro-transactions.

harperlee

Game for kids, where you dedicate a third of the screen to a locked hint list and a very prominent "Buy Hint Tokens" button? Hard pass.

https://www.hacktivate.app/img/framed-ipad-3.png

The game industry needs to move away from milking vulnerable people with pay-to-win schemes.

fainpul

Also the game costs 20 bucks but it's offered as "Free" with "in app purchases". But you can only play one challenge until you need to buy the game. That's just false advertising. Just be upfront about it and sell the game for 20 bucks instead.

fodmap

Right, that's absolutely disgusting. The only reason that would be somewhat OK is if that's part of the game, and you can hack it to get tokens for free.

zwnow

I've watched my grandma play a mobile game a few days ago. It has been a simple word search game. A level takes her about 2-3 minutes to beat. Every single time she beats a level, she is getting 1-2 30 second advertisements that she has to sit through. Its honestly so sad to see. Thankfully she knows that all mobile ads are bullshit and how to close them, but still... This market is shameless.

Liftyee

Neat... Brings memories of the national cybersecurity courses you were talking about.

I never figured out how to do that "cat flag" terminal privilege escalation.

charcircuit

>how to do SQL injection, how to use rainbow tables to figure out hashes, how to use steganography to hide data in images, and more.

I feel like there are more practical and timeless topics that will still be relevant in 2040. Frameworks (abstraction) have largely solved SQL injection and bad cryptography.

Personally I would avoid a cybersecurity focused corriculum and just focus on regular software engineering. Being able to think like who you are attacking and knowing the common pitfalls is most of the battle.

rogermungo

Nice.. But Damn.. Apple only : (

twostraws

Yeah, sorry; I know my limitations, and would rather do one thing very well than two things kinda average.