Hier erstmal die Regeln wie sie im Mage 3rd Edition Regelwerk stehn:
Hacking [Intelligence/Wits + Computer]: Anyone with computer skills can perform most ordinary, legitimate computer applications.
However, breaking into other people's computers is usually quite difficult. The accompanying chart details the time and difficulty levels for hacking various systems. All hacking rolls use Intelligence (for long-term hacking) or Wits (for fast response) + Computer. A failure on this roll indicates that the hacker cannot gain access to the system, while a botch means that the hacking has been detected — which often means that a system operator on the other end will trace the hacker's location immediately. Success means that the hacker actually penetrated the system.
The number of successes that you obtain on a hacking roll is the total number of dice you can use while working on the system. Even if a hacker has a Intelligence + Computer total of 9 dice, if he only rolls two successes he can only use two of these dice while inside the system. Hacking rolls can be made extended tasks, but doing so increases the risk since the hacker is working with the system for longer time. Note that it's possible to try to „upgrade access“ once the hacker is inside the system, by putting additional successes toward the access limit. However, this action suffers a difficulty penalty of one each time you roll to upgrade access. If you didn't find the backdoors and passwords right off, it takes progressively more work to think of better ones, after all.
Once inside the system, you must make further rolls to alter programs or to locate the exact file desired. Finding a file containing information on a specific subject is normally difficulty 6. If the hacker knows all or part of the actual name and location of this file, the difficulty reduces substantially, by up to a maximum of three. Multiple successes reveal multiple files on the same subject (if multiple files exist), or pinpoint the file exactly. Sortin g though a computer for a correlation between various disparate bits of data or other complex and demanding tasks increases the difficulty. Actually altering programs on the fly is tough; the hacker must find the proper data, dive into it and (hopefully with the proper editing programs) figure it out and manipulate it. Aside from uploading or downloading information, a hacker's options are limited unless he wants to try runtime data alteration, which generally requires yet another separate extended success roll. Truly complex maneuvers are best left to magic. Again, a botch on any of these rolls reveals the presence of a hacker to the system operator.
If a hacker is discovered, all hacking rolls become resisted rolls between the hacker and the system operator (which can be a good thing if the sysop is incompetent…). If the system operator ever accumulates five successes in this resisted test, the hacker is ejected and the sysop may make another roll to find any backdoors the hacker left. The difficulty and number of successes required varies according to the hacker's precautions and skills. If the hacker wins by five or more successes, she is fully inside the system (even if she was not inside before), and she may obtain additional data before the sysop can attempt to eject her again. Such rolls suffer from the usual limit of the hacker's initial success, though, due to limits on access.
Sysops in the secure systems used by large corporations or the government look for hackers regularly. Once every four to 12 hours, (depending on the security level of the system) a sweep may occur. The Storyteller rolls the sysop's Intelligence + Computer, and checks successes against a difficulty of the hacker's Intelligence + Computer. In some highly secure systems used by the military, the intelligence community or the Technocracy, system operators look for hackers continually, and sweeps occur as often as once an hour. Once a hacker has been detected, the sysop may either attempt to eject him, or wait to see what he does. It's also possible for a sysop to send a trace program or a nasty virus after the hacker. Although doing so is usually illegal, it's certainly a possible threat to hackers in very secure or secret systems. In this case, the sysop is essentially „hacking the hacker,“ but he doesn't need to roll to gain access (the hacker's already inside the sysop's system, after all). In fact, he could very well fire a program bomb right down the line into an unsuspecting hacker's core. Thankfully, such programs can only wipe information or reprogram the computer, or very rarely cause the computer to do something that physically damages itself. Programs can't be made to cause computers to explode without technomagical influence.
Hours: The number of in-game hours required bet ween each roll of the extended task. This number relates the time that it takes to actually hack into the system and locate the desired files. Once there, the hacker must then alter or download these files.
Trinary Computers: Trinary computers are intrinsically more powerful than ordinary binary computers. If the hacker is using a Trinary computer, she reduces the time required to hack into another system by two hours and reduces the difficulty of all her computer rolls by one. Conversely, if the hacker is attempting to hack into a system based around one or more Trinary computers, she must increase the time by two hours and the difficulty of all computer rolls by one. If the hacker uses a Trinary computer to hack into another Trinary computer, the bonuses and penalties cancel out.
Security Software: This software encrypts files and prevents unauthorized intrusion. Characters can write their own security software, but doing so requires weeks of work. At the end of this time, make a single Intelligence + Computer roll with a difficulty of 7. For every two successes rolled (round up), the software increases the difficulty of all unauthorized intrusion by one. Most businesses buy their security software. Commercial security software will not add more than three to the difficulty of hacking rolls.
Sloppy Filing: Some people do not label their files in any sort of logical manner, and they are not careful about what directories they place them in. Everyone using such a computer (even legitimate users) receives a difficulty penalty of one to all Computer and Research rolls involving that computer. In addition, all tasks performed on that computer take longer than they would on cleaner system — double the usual times, for a simple guideline.
Cracking Software: Cracking software allows hackers to view code, finds patterns and generate long strings of possible passwords more easily. When going up against any system with good security software, both cracking software and social engineering are advised. It is possible for a character to write her own cracking software. (In fact, most hackers do.) The procedure is the same as writing security software, except that the difficulty is 8. It is also possible to design cracking software for specific systems. Doing so means that the software will work only on a system running certain programs, but creating cracking software for a specific system has a difficulty of only 6.
Social Engineering: In many cases, hacking is simply too risky and difficult to be done without external aid. At this point, „social engineering“ often comes into play. Even a single password, acquired by discrete spying (or raiding a business's trash) can reduce the difficulty of the hacking roll by one or two. If all else fails, bribing or threatening someone into revealing their password can do wonders, as long as the person does not report the incident.
Backdoor: Once a hacker has entered a system, she can leave bits of code that will allow her to enter the same system more quickly and easily at a future time. Sy stem operators can detect backdoors, but only if they are looking for them. Ordinary commercial and academic systems are usually checked only every few months, but high -security systems get checked on a weekly, or sometimes a daily basis (for top-secret go vernment, Technocracy and other conspiracy-level systems).
Palmtop: A pocket-size Personal Data Assistant or mini-laptop. PC or Laptop: A typical home or office computer.
Mini or Small Network: A moderately powerful computer or several dozen PCs all in a network. Both arrangements are typical of moderatesized businesses or small local governments.
Mainframe or Large Network: Large, extremely powerful computers and/ or hundreds of PCs linked together. Both arrangements are typical of large corporations, governments or universities.
Supercomputers: Large, state of the art computers used by cutting-edge computer firms, NASA, the intelligence community and the Technocracy.
For some more ideas about hacking, the Web and the Net in Mage, check out Digital Web 2.0.
