ulTRAX'S ARCHIVE

MISC TOPICS



WTV & CODES

Created: 9-21-2000. Updated: 10-31-2000. Page design and Entire Site ulTRAX@webtv.net.


~ MISC TOPICS INDEX ~

WTV &CODES:
The first of these WTV-specific codes were discovered by Idiotic in August '98 as he began to explore the WebTV Viewer: a WebTV simulation for PCs. To the best my knowledge, Idiotic was the first to download the Viewer with the intent of dissecting it. He was also the first to get source codes for WTV pages. Since then additional &codes have been found... and it was eventually discovered what each did.

Since the codes seemed harmless, I consulted with Idiotic and the first batch of these codes were released in early September '98. They were an immediate hit... appearing in sigs everywhere. What a mistake it was. It was soon clear that some of these codes posed a security risk and WTV's FALL '99 Client upgrade has disabled these codes on regular webpages and in mail.

So, what are these &Codes?

If you have ever used the 411 PowerOff code, you know it taks your to your box's TechInfo Screen. That URL is file://rom/htmls/TechInfo.html. It displays information such as your current Client Build version, you Silicon ID #, system configuration, etc. Unlike the WTV-SETUP:/GET codes, this page is NOT generated at WNI but within your box... afterall, if you are using a PO Code you are off-line. These &codes also appear in several other WTV pages like WTV-TRICKS:/INFO. It should be noted that many of these codes are related to the WTV-SETUP code. For more information please visit here or here.

If you were to see the actual TechInfo's page source code you'd only see &codes like &ssid and &vers. These &codes are able to display current information about your Browser's configuration and settings as well as some personal information.

All too many users have been taken aback seeing their personal information... like their zip code or phone number, in someone else's letter or post. They were unaware only they could see this information. The perp had merely included &Codes in his sig or web page.

If that's all these codes could do, they would not be a problem... except for the countless calls WNI got from Users dissatisfied about their modem speed. But, in late November '98 MasterDon figured out a method to use "forms" to grab this information from others... that is if they clicked on a button in a post or web site. Soon, the hacking NGs were filled with posts trying to con readers into pressing one button or another.

Even more insidious, in January of '99 Nonymous found a way to use a web site referrer service to grab these codes... including the potentially private information. All a user had to do was read a post or open a letter. The referrer was sent back to the service which in turn automatically e-mailed perp! The victim was totally unaware anything had happened!

But it gets worse: In February '99 ECWFRK and MirrororriM discovered they could use this referrer service to get both a user's BYOISP phone number and password! It was a haphazard process... and more than likely the BYOISP dialup was a toll call. In all cases above WNI was notified and it's no wonder WNI's fall '99 Client upgrade has disabled these codes! The referrer service was also notified how it could be abused.

Actually, there are hundreds of these &codes used in HTML. The first list here is restricted only to those specifically used to provide technical information about the WTV Browser and it's doubtful they'll work with a PC. Below are the HTML special enity codes.

USING &CODES:To use the &Codes they must be used within an HTML tag and they must end with a semi-colon. For example

<html> &rate</html>

which would display as:

"33.6k bps (compressed)"

your actual connect speed might be different of course.

THE &CODES: Some of these codes are related to the Setup codes found in WTV-SETUP:/GET. I will include more info as I am able. Thanks to speed-exp for most of the TV SETUP codes.

TECHNICAL DATA

&CODE: ACTIVATED DESCRIPTION
&vers &vers; Client Version
&wtv-bootvers &wtv-bootvers; Boot Version
&wtv-syscfg &wtv-syscfg; System Configuration
&wtv-chipvers &wtv-chipvers; Chip Version
&wtv-ssn &wtv-ssn; Silicon Serial ID #
&rate &rate; Modem Speed
&wtv-appvers &wtv-appvers; Client Build
&cpu &cpu; CPU Speed
&wtv-vidinfo &wtv-vidinfo; Video Decoder
&wtv-scrres &wtv-scrres; Screen Resolution. Can this be changed?
&wtv-1800addr &wtv-1800addr; WNI Server IP


BROWSER SETTINGS


&CODE: ACTIVATED DESCRIPTION
&thumb &thumb; Thumbnail URL
&find &find; Contents of your "FIND" box
&wtv-adv-opt &wtv-adv-opt; Advanced Options. Classics have this option. Plus boxes do not.
&url &url; URL of current page
&exurl &exurl; Last URL visited
&title &title; Title of current page
&date &date; Current Date
&fsize &fsize;font size: small, medium or large
&kbd &kbd; On-screen keyboard config: alphabetical or standard
&brdrs &brdrs; Shade of screen border
&wtv-muzac-on &wtv-music-on; ?
&tempo &tempo; Music Tempo
&connpw &connpw; Connect to web when powering on
&vol &vol; background music volume: setup-bgm-volume


PHONE SETUP


&CODE: ACTIVATED DESCRIPTION
&audio &audio; Audible dialing
&pulse &pulse; Pulse dialing on/off
&tone &tone; Tone dialing on/off
&dtone &dtone; Wait for dial tone
&hack &hack; Call waiting on/off
&nowait &nowait; No callwaiting
&wtv-sens1 &sens1; call waiting sensitivity
&wtv-sens2 &sens2; call waiting sensitivity
&wtv-sens3 &sens3; call waiting sensitivity
&wtv-sens4 &sens4; call waiting sensitivity
&slow &slow; Dialing Speed
&med &med; Dialing Speed
&fast &fast; Dialing Speed
&outstr &outstr; Dialing prefix from wtv-setup:/phone-basic
&wstr &wstr; Call waiting block prefix from wtv-setup:/phone-call-waiting
&phone Your phone #. This has worked periodically
&ldp &ldp; Long distance dialing prefix
&free &free; 1-800 number override
&anum &anum; Special Dialup # from file://rom/htmls/AccessNumber.html
&hasit &hasit; ?
&dout &dout; ?
&broke &broke; ?


BYOISP SETUP


&CODE: ACTIVATED DESCRIPTION
pname &pname; BYOISP provider name
&lname &lname; ISP user login name
&banum &banum; BYOISP Dialup 1
&banum2 &banum2; BYOISP Backup Dialup. May be blocked.
&bpass &bpass; BYOISP password. May be blocked.
&byoisp &byoisp; BYOISP


PLUS TV SETUP:


&CODE: ACTIVATED DESCRIPTION
&tv-zip &tv-zipcode; ZIP for TV listings. Set at TV Home
&tv-download &tv-download; AutoRetrieve of TV listings. Set at TV Home
&tv-dl-time &tv-dl-time; AutoRetrieve time of TV listings. Set at TV Home
&tv-cable &tv-cable; Using cable TV? Set at TV Home
&tv-antenna &tv-antenna; Using TV antenna? Set at TV Home
&tv-satellite &tv-satellite; Using satellite system? Set at TV Home


DISHPLAYER ONLY


&CODE: ACTIVATED DESCRIPTION
&sat-nfo-rid &sat-nfo-rid; reveiver ID
&sat-nfo-cid &sat-nfo-cid; smartcard ID


MISC.


&CODE: ACTIVATED DESCRIPTION
&brdre &brdre; ?
&mod &mod; This is supposed to be Last Modified Date, but always says 1969
&legalese &legalese; Either "invisible" or left blank. Have no idea what this does.
&ext-videoin &ext-videoin; Extension video inputs?
&size &size; ?

ISO CODES
Some Special Characters in HTML such as <, >, & have reserved meanings and so may not display properly if just typed in as themselves. To get around this "entity names" were developed. When typed in a document, the character will appear. Some characters, such as the pound sign and accented characters are not covered in the ISO international character sets, and so also have entity names. Please note not all &codes work in all browsers. While WNI has disabled the Tech Codes above they did not do the same with the HTML enity codes. &amp; & (Ampersand) &lt; < (Less than) &gt; > (Greater than) &#96; ` (Grave accent - back apostrophe) &#97; - &#122; (Not used) &#127; - &#159; (Not used) &#160; (Non-breaking space) [&nbsp; ] &#161; (Inverted exclamation) [&iexcl; ] &#162; (Cent sign) [&cent; ] &#163; (Pound sterling) [&pound; ] &#164; (General currency sign) [&curren; ] &#165; (Yen sign) [&yen; ] &#167; (Section sign) [&sect; ] &#168; (Umlaut - dieresis) [&uml; ] &#169; (Copyright) [&copy; ] &#170; (Feminine ordinal) [&ordf; ] &#171; (Left angle quote, guillemotleft) [&laquo; ] &#172; (Not sign) [&not; ] &#173; (Soft hyphen) [&shy; ] Many browsers do not properly handle this character. RFC 1866 recommends using the &shy; entity name instead of this ISO code. &#174; (Registered trademark) [&reg; ] &#175; (Macron accent) [&macr; ] &#176; (Degree sign) [&deg; ] &#177; (Plus or minus) [&plusmn; ] &#178; (Superscript two) [&sup2; ] &#179; (Superscript three) [&sup3; ] &#180; (Acute accent) [&acute; ] &#181; (Micro sign) [&micro; ] &#182; (Paragraph sign) [&para; ] &#183; (Middle dot) [&middot; ] &#184; (Cedilla) [&cedil; ] &#185; (Superscript one) [&sup1; ] &#186; (Masculine ordinal) [&ordm; ] &#187; (Right angle quote, guillemotright) [&raquo; ] &#188; (Fraction one-fourth) [&frac14; ] &#189; (Fraction one-half) [&frac12; ] &#190; (Fraction three-fourths) [&frac34; ] &#191; (Inverted question mark) [&iquest; ] &#192; (Capital A, grave accent) [&Agrave; ] &#193; (Capital A, acute accent) [&Aacute; ] &#194; (Capital A, circumflex accent) [&Acirc; ] &#195; (Capital A, tilde) [&Atilde; ] &#196; (Capital A, dieresis or umlaut mark) [&Auml; ] &#197; (Capital A, ring) [&Aring; ] &#198; (Capital AE dipthong, ligature) [&AElig; ] &#199; (Capital C, cedilla) [&Ccedil; ] &#200; (Capital E, grave accent) [&Egrave; ] &#201; (Capital E, acute accent) [&Eacute; ] &#202; (Capital E, circumflex accent) [&Ecirc; ] &#203; (Capital E, dieresis or umlaut mark) [&Euml; ] &#204; (Capital I, grave accent) [&Igrave; ] &#205; (Capital I, acute accent) [&Iacute; ] &#206; (Capital I, circumflex accent) [&Icirc; ] &#207; (Capital I, dieresis or umlaut mark) [&Iuml; ] &#208; (Capital Eth, Icelandic) [&ETH; ] &#209; (Capital N, tilde) [&Ntilde; ] &#210; (Capital O, grave accent) [&Ograve; ] &#211; (Capital O, acute accent) [&Oacute; ] &#212; (Capital O, circumflex accent) [&Ocirc; ] &#213; (Capital O, tilde accent) [&Otilde; ] &#214; (Capital O, dieresis or umlaut mark) [&Ouml; ] &#215; (Multiply sign) [&times; ] &#216; (Capital O, slash) [&Oslash; ] &#217; (Capital U, grave accent) [&Ugrave; ] &#218; (Capital U, acute accent) [&Uacute; ] &#219; (Capital U, circumflex accent) [&Ucirc; ] &#220; (Capital U, dieresis or umlaut mark) [&Uuml; ] &#221; (Capital Y, acute accent) [&Yacute; ] &#222; (Capital THORN, Icelandic) [&THORN; ] &#223; (Small sharp s, German, sz ligature) [&szlig; ] &#224; (Small a, grave accent) [&agrave; ] &#225; (Small a, acute accent) [&aacute; ] &#226; (Small a, circumflex accent) [&acirc; ] &#227; (Small a, tilde accent) [&atilde; ] &#228; (Small a, dieresis or umlaut mark) [&auml; ] &#229; (Small a, ring) [&aring; ] &#230; (Small ae dipthong, ligature) [&aelig; ] &#231; (Small c, cedilla) [&ccedil; ] &#232; (Small e, grave accent) [&egrave; ] &#233; (Small e, acute accent) [&eacute; ] &#234; (Small e, circumflex accent) [&ecirc; ] &#235; (Small e, dieresis or umlaut mark) [&euml; ] &#236; (Small i, grave accent) [&igrave; ] &#237; (Small i, acute accent) [&iacute; ] &#238; (Small i, circumflex accent) [&icirc; ] &#239; (Small i, dieresis or umlaut mark) [&iuml; ] &#240; (Small eth, Icelandic) [&eth; ] &#241; (Small n, tilde) [&ntilde; ] &#242; (Small o, grave accent) [&ograve; ] &#243; (Small o, acute accent) [&oacute; ] &#244; (Small o, circumflex accent) [&ocirc; ] &#245; (Small o, tilde) [&otilde; ] &#246; (Small o, dieresis or umlaut mark) [&ouml; ] &#247; (Division sign) [&divide; ] &#248; (Small o, slash) [&oslash; ] &#249; (Small u, grave accent) [&ugrave; ] &#250; (Small u, acute accent) [&uacute; ] &#251; (Small u, circumflex accent) [&ucirc; ] &#252; (Small u, dieresis or umlaut mark) [&uuml; ] &#253; (Small y, acute accent) [&yacute; ] &#254; (Small thorn, Icelandic) [&thorn; ] &#255; (Small y, dieresis or umlaut mark) [&yuml; ]