Ok, first we need some basic defense...

Hidden mode
Hidden mode buys time and makes sure that you are not instantly spotted by prying eyes.

Encryption
Encryption is your friend, especially if they DO find your hidden signal, now they have to decrypt the darn thing before they can even begin hacking.

Data Bombs (now the fun begins)
Data bombs can be attached to a specific FILE or DEVICE, but only 1 per device or file.

Now we attach a databomb to the following devices & programs.

Encryption (When they try to crack the encryption it goes BOOM (I assume they can scan the encryption first to try and FIND the databomb first.)
Commlink (When they crack the encryption and try an exploit test it goes BOOM (unless they find it)

Now, this might be a bit of a stretch but since the System/OS is listed as a program one could probably add a databomb to that one as well (this mainly be useful to protect a system from “Crash Program action” or at least just kick the hacker in the face a it goes down in flames.

For a hacker with a good commlink it will take up 4 response slots (Encryption, databomb, databomb, OS databomb) yea, so you only have 1 response slot left, but you DO have a minefield.

Of course this will not be used when doing actual hacking but it is a nice casual defense against snoopers and for datacarriers who wants to protect their data.

Data Locks
Even if a hacker might lack access to the data he would still be able to access the device, and thus add a databomb to the device.

For added defense of sensitive data one can add 3 databombs to a data lock.

1.to the datalock itself
2.the encryption is a program and can therefore be loaded with a databomb.
3.the data itself can also be loaded with a databomb

The last two databombs can only be added by the actual program owners who load the program into the data lock.

Like the idea.

Then you could add another Commslink as a DMZ which does the real control of your wirless systems?

Think It might be gaming the game because you are making other levels of firewalls but I do think it would be allowed.

doesn't a databomb destroy the file that it's attached to though? If so, seems short sighted to attach one to your OS. Unless you're in the "If I can't have it , nobody can" camp.

ok, heres a couple of questions ('m still trying to learn the system)

1)If you do the hidden comm/active comm schtick, would you actually be hacking through the active comm? (might be a good defense, especially in highly physcially secure areas. Hack through the public comm, spoof it to look like thats what's being used, and then if trouble comes around, offer up the comm for inspection "see officer, i dont have anything special on there, theres no way it coulda been me, my comm musta been comprimised, i'll make sure to beef up it's security right away officer")

2) for the databombs, i seem to remember "something" about, once they're enabled, they don't take up any system, it's just the actual databomb program that does, but i cant remember where i read this, if it was here on DS or i saw it in the book...

3) Agent Use-- Assuming that i wholey screwed up on number 2, and each bomb does infact use up response, could you not load up an agent for expressly this purpose? as far as i can tell, you are only hit with 1 response decrease with agents (for the agent itself) and not it plus every program you load onto it.

I’d rule that IF you use another commlink to ”hack through” then you would access and hack from another node, and that node will have a lower response.

Let’s put it this way. The commlink you have uses an OS that “contains” up to your response rating in programs, but at the same time your OS is a program as well – this will be reflected in your “firewall” commlink since it will be running the “primary” commlink as a program (the OS should be accessible through that commlink).

This gives us several options – and drawbacks.

The good
You have a secondary line of defense that can be filled with agents and databombs and even secondary encryptions.

Example (Solution 1 – one I find logical since one does not use up ALL resources of the firewall commlink)

Step 1
Firewall Commlink R5 – runs Encrypt, Databomb Device and IC (2 slots left)
Hacker Commlink R5 – runs 4 different programs (1 slot left)

Step 2
Hacker Commlinks connects through Firewall Commlink

Result

Firewall Commlink R5 – runs Encrypt, Databomb Device, IC, Hacker OS (1 slots left)
Hacker Commlink R5 – runs 4 different programs (1 slot left)

Solution 2 (quick and simple but slightly more illogical.

For each commlink connecting to another you lower the response by 1 on the “Firewall” commlink – and thus lowering the limit for the Hacker commlink as well.

The bad
Well, that depends on how you run it.

Unless the hackers are aware of an intrusion a “Crash OS” would be quite bad for them as they would be thrown out of the node.

Databombs have the option of destrying files if the user wish it.

The above systems has lots of advantages and might make hackers/tecno cry

Load Commlink one with false sin and other rubbish and place LOTS of defense within it. Allows you to walk around being "joe public".

Then link second Commslink to it by wire(hay it is in your pocket) Then hook all your wirless kit into the second one. When you need wireless access just open up the gateway between the 2. In fact you could leave it open most of the time and just live on the secuirty of both commslink.

As long as all you wirless stuff is linked to your second commslink you should be golden.

just an idea?

You attach Data Bombs either to Devices or Files - they activate and crash only when those are accessed.

So, not data-bombing Encryptions or running Programs.

OS is not a Program, on the other hand, and daisy-chained Node may serve as chokepoints, but they do not limit performance.

They will count against the devices you can have subscribed, however.

LOL! Honeypots in SR4. I love it.

Another baddie that I did once is to attach a databomb to an IC program. When the IC program goes down, the bomb goes off. Similar to the old Trap IC in SR3 except it doesn't launch anothre IC program, just the bomb.

Not running Databomb, which is different. Why couldn't you put a Databomb on an IC. So the first access to the running program, say to attack it, set it off? It depends on what you class as being protected by Encrpyt.

I assume Scramble is just an artifact from copying SR3 text.

Sorry to dig up an old thread, but a new trick just popped up:

Let's say that you have two commlinks. The first is loaded with a Fake ID, and generic material so you can pose as Joe Public. The second is in hidden mode and skinlinked, unconnected to your first commlink, and connects to all your shadowgear. Now, as I read it, the skinlink alone renders you immune to hacking and jamming attempts; and the first allows you to avoid the problems of going about in hidden mode. If you need it, you add a third commlink with a high Firewall to serve as your communicator.

I can't see any flaws in this setup in the RAW, which means that anyone with 600 is immune to hacking attacks on their gear. If that's true, what's the point of all the threats on hacking gear?

This is why if you are not a hacker or do not posess the appropriate skills (such as in the case of my Adept KK 4.1), it's wise to spend the BPs for a hacker as contact with a loyalty rating of 5 or 6.

absolute comlink security relies on it being at the bottom of the sea, coverd in a unknown number of layers of concrete, diffrent hard and heavy metals, dikote, and watched over by a equal number of 3 digit rating spirits and some very well payed great dragons...

Nah - to ultimately secury a commlink against hacking, just grind it to fine dust... which you burn.

Another trick that I noticed when I read that page: what about jamming your own shadow commlink? You're cut off from the Matrix, but not your PAN.

As the Jammer happens to be strongest in effect at the center, that would certainly kill your PAN first (Signal 0).

Using Skinlink and turning Wireless off is a better idea - one that doesnt get you busted (Jammers are highly illegal, as in the World of SR4, Electronic Warfare has a whole new meaning), too.

Sure, complete destructive interference is so much harder to obtain than simple white noise.

The result would be a good thing, they would gain exciting stories to swap with their cellmates. A bad thing is the GM spending time drafting up NPC stats for a SWAT team without getting an oppotunity to use them.

If I'm reading the rules right, if your commlink is running in hidden mode, it's a Scan + EW test with a threshhold of 15 or more to find it, unless there's a good reason for someone to scan for a hidden node on you particularly, in which case it's 4 (which is still relatively high). For example, if I'm casing a target facility, and I see a turret hidden in a tree, it's a safe bet that it's wirelessly connected to a node somewhere in hidden mode; I need to make a Scan + EW roll and get at least four hits. I know it's there (or at least I strongly suspect it), but my commlink doesn't until I find it.

It might be noted that this roll is a straight-up test, not an Extended test, so you either find it or you don't.

Given that, it might just be safe enough to have a second commlink that you use like a standard commercial commlink just like every other person in the civilized Unwired World does. There's no reason to think that your "business" commlink is even there, since it's obvious that you're already using one.

As far as what program(s) you should be running in a node, consider what the program you least want your target to have when hacking other nodes. I'm not real worried about IC or even Black Hammer or Blackout. I'm most worried about Analyze. After all, they can't attack me if they don't know I'm there.

It follows, then, that Analyze is the most important anti-hacking program you can have. It's pretty good at catching on-the-fly hacking attempts. If you like, run an IC (agent) along with it and tell it to constantly scan for unfamiliar icons. Run an Attack or Black* program in there too for you and your agent to use if it comes to it. But really, once your PAN (which is, after all, a node) goes on alert, just reach down and reboot it. If you're a technomancer, make sure you know a nice Analyze Complex Form, and be prepared to unleash spooky doom and sprites on anything that sets your system on alert.

By the same token, if you're worried about probing, just reboot your commlink every hour or so. Technomancers, sorry; I can't think of anything for you on this one. But at least if you are a technomancer, you're not storing anything important in your head.

Of course, the security measures would be completely different for a node or series of nodes at a static facility, data center, corporation, and the like. But a commlink is something that you carry with you pretty much 24/7 (or have implanted into you), and that makes security a lot easier.

This all changes in combat, but then most things do. Usually, it takes too long to hack into an enemy node and start playing with their stuff (since you need security or admin access to do most of the fun stuff), so mostly you'll probably be running EW, making sure the enemy doesn't call for back-up, and defending your teammates against enemy hackers/technomancers trying to do things like shut off their cyber arms (something I managed to do in my last run; I was thinking of beating him with them, but my hacker has no Unarmed skill, and didn't have Command loaded anyway, and zero dice is a very small pool). So if you're in a fight in the real world, basically be ready for on in the Matrix as well.

In conclusion: good grief, this has gone way too long. Ciao.

Sorry if I lacked further explanation:

Hidden Mode means that WiFi still is enabled, just not broadcasting its presence, hiding instead.
So when you asked about running in Hidden Mode and using Skinlink, I pointed out that even Hidden Mode allows hacking your comlink wirelessly.

Turning it off solves that problem, but cuts your real comlink off from the rest of the matrix, naturally.

The benefit you'd get running a Hidden/Skinlink combo is that not only is your commlink hard to find, none of the devices you're packing around have a wireless signal, either (if they're wifi-disabled and skinlinked). This means that, among other things, a random sweep of the area doesn't turn up that nice smartgun signal coming out of your armpit, and makes it impossible to wifi-spoof to a particular device, bypassing the commlink entirely. If you made the wireless functionality of the Hidden/Skinlink combo toggleable, you could shrink the access points of your PAN down to things that you're touching, making it nearly unhackable.

Nearly? Yeah. You know what you have to worry about now? Handshakes.

"Dimitri stands up, crosses the room, and clasps your hand in a vigorous handshake. 'Ah, my friend, I am so happy to be seeing you again. I heard about your difficulties, and immediately felt concern, both for your person, and for our joint business venture. But I see my concerns were for nothing! You are well, yes? Yes, I see you are... haha, nothing can hurt you, my invincible friend! You dance between bullets like a butterfly dances between raindrops. Come, sit, we shall drink to your health and talk as men do of more opportunities!' With that, he releases your hand and leads you to a table in the back of the restaurant, already covered in steaming dishes of food."

Dimitri's little bit there, spoken in a bad Russian accent, is about 30 seconds long... or 10 turns, if you prefer. Dimitri's running a skinlink, too, wired to his commlink, which is talking over wifi to his buddy Skizzy in the next room, who's running hot sim VR and just waiting for that handshake. That handshake is piggybacking a hacker right into your skinlink network, and he's got about 30 initiative passes of screwing around with your commlink before that handshake ends.

You think that's bad? How about some of those "fly on the wall" drones serving as signal carriers? If you can get one to land on a character without being noticed (say, the back of the collar of their jacket, or some place similar), it can patch into their skinlink network, and suddenly you're broadcasting wifi without even realizing it.

PCs can pull these stunts too, of course. It's just my job as a GM to keep 'em paranoid.

You know what else is fun? Seats rigged to connect to skinlinks, "Stick'n'talk" shotgun shells (like the fly landing on the shoulder, but with more oomph... tap his comms and see who he calls if he starts getting shot at!), opposing security running hardcore jamming on all frequencies but the ones they're hopping to... EW is stupidly fun in SR4.

Hmm, databombs can be added to FILES and/or DEVICES.

Ok, Devices are simple, but what would constitute as a file?

Would the active subscription list on a running commlink be classified as a file? It isn’t a program. Would be a nice defense against snoopers trying to hack your gear.

What would be a file:
Subscription List
Commlink ID (Well, if they can identify your unique device ID they must get it from somewhere)
Certified Credstick ID (there would be some kind of ID file in the device)

Well folks, fill in the blanks…

I am under the impression, that the term file in SR does not mean the same as in reality. Not everything accessible in a commlink does necessarily have to be a file. My guessing is that none of the things you mentioned can be trapped with a data bomb.

I think a subscription list could.
Your commlink ID is like your IP address, it might be stored in a file somewhere, but that's not how the other person gets it. Also, by the time they're in your commlink to be looking at the file, they already know it. As for your credstick ID, see above, but that also wouldn't be stored on your commlink - that would be stored on the credstick. Your commlink might have bank account information if you have a bank account tied to a SIN, or some off-shore account somewhere - and THAT could probably be databombed.

Only a link to the commlink in another node. At the commlink level the Databomb equivalent is called IC.

@Blackhat

Data bombs can be attached to icon that is also protected by Scramble or Encrypt, so at the least you could attach a Databomb to each individual item in the subscription list.

crack the encryption, hack the firewall and then boom, you tripped the databomb.

one thing is for sure, im going to define my comlink metaphor after a clown-mobile