You should note under Mass Attack that the node rolls to spot everyone involved, not just the primary hacker.
You should probably note as an alternative to Disconnect that you can Jam (or Jam on the Fly) yourself offline, which will get you dumpshocked but will also get you out if you are Black IC'd.
Can you source this? "With full admin privileges use a complex matrix action Terminate Connection (Computer + Edit) (1) to disconnect all enemy users. It takes an additional full combat turn for the connection to be terminated." I think you can take an Issue Command to make the node try to Terminate Connection, but this is dumb since you can also just delete all the accounts but yours or what-have-you.
Also, in general, I would be concerned that you are giving most people the wrong impression of what you want to do to hack. For example, if you have an admin account, you don't want to cutesy around with disarming someone's Biofeedback Filter; you want to revoke their account privileges so that they can't do anything.
Top right of UN 101
The central focus of most DOS attacks is a node’s active account list; by editing the list a hacker can sever a connection (see
Terminate Connection, p. 223, SR4). A hacker can also instruct the node to block future access connection requests from a particular
node or access ID (or a range of nodes/access IDs), locking the target out. To accomplish this, the hacker must have access to the node and must make a Computer + Edit (1) Test if they have security or admin privileges; or a Hacking + Edit (2) Test if he does
not. Accounts may also be deleted (if active, the user’s connection must be terminated frst) with a successful Sofware + Editing (1)
Test, assuming you have security or admin privileges; Hacking + Edit (2) Test if you do not.
This whole paragraph is poorly written and unfortunatly covers critical rules. I assumed the first test to cover terminate connection and the second to cover account deletion. You could argue the first test covers "locking the target out" but then what is the difference between that and account deletion?
I interpret the last part of the paragraph to mean you cant delete an account of someone who is online. That is why i brought up blackhammer for removing VR spiders.
Also, a sometimes-useful alternate way of hacking in is to get a public account (either by just logging in, if they give them out, or hacking on the fly), and then use Hacking+Edit to make yourself a legitimate account.
Public accounts don't have subscrptions. I think I mentioned user accounts in the Establish Subscription block but maybe I'll go into that a bit more .
I love your character Archetypes by the way. Thanks for those.