- General Topics -

1. What is BOXP? Where can I get it?

You can get BOXP from the BOXP website in the downloads section at http://boxp.sourceforge.net.

2. Who wrote BOXP? Why was it written?

BOXP is based in BO2K, that was written by DilDog of the Cult of the Dead Cow. Many of the commands that BO2K comes with were directly ported from Sir Dystic's original Back Orifice source code. It was written with a two-fold purpose: To enhance the Windows operating system's remote administration capability and to point out that Windows was not designed with security in mind.
BOXP was writed by Javier Aroche that is a full re-write of the original BO2K with the goal of more flexibility and power for the Developers, based in a solid FrameWork.

3. Is this a 'hacker tool', or is it an 'administration tool'?

This tool, like other tools you might have around the house can be used legitimately, or it can be used to harm people. You can take a hammer and beat people in the head with it. Doesn't mean we need to go around beating people in the head with hammers to teach them that they should watch out for maniacs wielding hammers. Imagine a whole world of people that don't know a hammer from sponge, let alone what a hammer is good for, and you'll find what situation we're in here. Hackers can use it to hack. Administrators can use it to make their lives a lot easier. Administrators, be responsible with this tool. End-users, don't trust random people on the internet, and they won't hit you with a hammer... Too bad it has to be this way, but Microsoft wasn't thinking of making the computer foolproof when they put together their operating systems.

4. What is BOXP good for? What are the legitimate uses for it?

For Remote administration... of course. Administration of many Windows boxes through encrypted channels. Performing common tasks on many machines without having to walk over to each and every one of them. Controlling a Windows machine that is many miles away with the kind of flexibility that UNIX users have enjoyed for decades, without a ridiculous VPN setup.

5. How big is BOXP, anyway? Gimme statistics.

Well, the BOXP Server with basic plugins (auth_null, enc_null, io_tcp and srv_control) installed is ~50K. Nice small footprint. The client software is ~200K. That's because is non-MFC application. The whole suite will fit on a single 1.44MB floppy disk.

6. Are there licensing terms for BOXP? How much does it cost?

It costs nothing. Freeware. It's also open source. It's available under the GNU Public License. For end users, the license is simple. Use it, distribute it. Don't claim that you wrote it, because you didn't. We also aren't going to support the software. We don't have ANY manpower to do so. So, if you can't figure it out with everything we've put on this web site, you're shit out of luck. Have a look at the project forums, try the mailing lists, whatever. For developers, more detail about source code usage is available in the Developers FAQ.

7. What about export controls?

The US still has antiquated laws in place that keep citizens and corporations from exporting encryption that is already available in other countries anyway. The reasons why these export restrictions are still in place are beyond me. This probably stems from the fact that the US Government, on the whole, fears technology because they don't understand it. It would be in the best interest of America, for these laws to go away, and stay away. They only stifle scientific development, and free thought and speech.

- Compatibility Topics -

8. What does it run on? What do I need to use BOXP? Hardware requirements? Operating system?

BOXP will currently run on Windows 95, Windows 98, Windows ME, Windows NT, Windows 2000, and WindowsXP systems. All of the various parts of the BOXP suite have been testing and found to be working on all of these platforms. It only runs on Intel platforms at the moment. Since everything is open source, hopefully more support for other operating systems and environments will be added.

9. Will clients exist for other operating systems?

Well sure, why the hell not. We'll try to make a more concerted effort to collect what people develop and put it on the BOXP website.

10. What about servers? Can I control a Mac from my Linux box?

Well sure! Well.. not yet. But someday. There's no reason why the server couldn't be ported. To Mac, to Linux, to BeOS, to CP/M. Have fun. Develop and be prolific. We dare ya.

11. What are the differences between BOXP and the original BO2K? Is it backward compatible?

BOXP is the full rewrite of the BO2K source code. It sports a much enriched plugin architecture that can extend every part of the FrameWork. By default, BOXP comes with out any capability for Input/Output, Encryption and Authentication modules pre-installed, you need to addem them with the Configuration Tool. But in BOXP the backward compatibility is not supported, this mean that all plugins must be ported to the new linkage.

- Running BOXP -

12. How do I run more than one server at a time?

You install two servers. Each with a different installation filename, and running on different ports. But, this is not suggested, as it is not necessary. BOXP servers can run on multiple ports and accept connections over any number of mediums at once. You only need one server to do everything.

13. How can I tell if BOXP is running on my machine?

Well, it depends. If you install it as Administrator on a Windows NT machine, you'll see it in the process list running as a service. Otherwise, there are no really good ways to tell if it's running. You will probably want to check your RunServices and Run registry keys as well as your startup groups to make sure that there isn't anything in there that you didn't specifically put in there (Good idea regardless!). If you don't understand what I just told you, go get the 10 year old kid down the street that 'knows computers' and get him to tell you. And give him a few bucks for it too, he deserves it.

14. How can I tell if BOXP is running on someone else's machine?

There's no good way to tell. Until someone finds a good way to tell. And then we'll make that not work any more. You shouldn't be able to tell if BOXP is installed remotely.

15. So, I'm running BOXP. How do I get rid of it?

Connect to the server with the client, and go to 'server control', and run the 'shutdown server' command with the 'DELETE' option. If you don't have the password, or you didn't mean to run it, you may have to get someone to help you hunt through your registry and startup groups to delete the appropriate registry keys. Don't install this program on your machine unless you really KNOW what you're doing. And don't be dumb and let someone else put it on your system. Trust no one.

16. What is a connect string (address, conn str, etc)?

A connect string is a description of how you want to connect to a remote machine. It specifies a remote address (usually an IP address, but not necessarily), followed by the network type, the encryption type, and the authentication type. A typical example of a connect string is: 192.168.55.20,TCPIO,AES,NULLAUTH

17. What is a binding string (bindstr, bind str, etc)?

A binding string is a description of how you want to set up a listening service on the server machine. It specifies a binding characteristic (usually an IP port or an IP address:port pair, but not necessarily), followed by network type, encryption type, and authentication type. A typical example of a binding string is: 15380,UDPIO,CAST,NULLAUTH

18. I'm using the BO Peep plugin and it seems choppy and slow, what am I doing wrong?

You may be trying to send over a really big screen over a really slow network. Be aware that when VidStream starts up, it synchronizes by sending over the whole remote screen. That takes a while. If things lock up, wait for a little while. it'll come through.

- BOXP Support -

19. What support is available for BOXP? Can I buy support for my company?

There is none. And you can't. You'll just have to get along. We don't have any personnel to sit around and answer questions or fix things, but in our Online Forums you could be some help. http://boxp.sf.net/forum/.

20. Where is the official BOXP documentation?

On the BOXP website. http://boxp.sf.net. If you aren't reading this on the website, someone probably ripped this faq off. Go there for the newest info.

21. I love BOXP, but I wish there was a feature to ...

We love BOXP too. But we can't do everything. Go to the Dev Corner section, and you'll see there a link to submit a Feature Requests. Also, if you're a programmer, feel free to join all of the other developers that would like to write BOXP stuff, and write a plugin, or extend the server. Send us what you've done and if we like it, we'll put it in the next distribution. We love to see peploe around BOXP...

22. Where can I get plugins for BOXP?

Right on the website. In the Software section. There will probably be other places on the net that have BOXP plugins, and I'm sure you know how to use a search engine, so I bet you'll find them if you look.

23. Where can I ask questions and get them answered?

Try in our Online Forums at http://boxp.sf.net/forum/ or suscribe and mail to our mailling lists avaliable in SourceForge Project page.

24. Are there IRC channels or UseNet groups for discussion of BOXP related topics?

Well, no more, IRC channels and UseNet groups are not support for BOXP.

- BOXP Security and Development -

25. How do I know that I can trust BOXP on my network?

First things first, BOXP uses strong encryption, making it a very difficult problem for system crackers to mess with your connections. BOXP is also very low profile, making it good for network surveillance. BOXP also comes with full source code available, so if you don't trust us, and want to see exactly what the software is doing, either take a look at it yourself, or have someone you trust do it for you.

26. I don't believe you. Where is the source code?

It's in the Dev Corner Section.

27. How can I recover my password if I have physical access to the machine?

You can find the server executable, open it up with the configuration tool, and look at the password. It's all plaintext in the executable anyway. Someday, that will change, when new authentication plugins are developed.

28. I want to write plugins. Do I have to download all of the BOXP source?

Nope, but may be it could useful to understand how BOXP works!. You only need to download the BOXP SDK. Go to the Dev Corner Section.

29. Is there another FAQ for developers only?

Yes. It's in the Dev Corner Section on the BOXP website. Go there and browse around. It's in there.