As promised, here is additional info I have figured out on this thing.
As you mentioned, pressing Alt-M on the initial registration screen takes you to a screen that looks like the connect screen which prompts you for a password. I've tried several of the passwords from previous threads with no success.
I also discovered that pressing Shift-Ctrl-Alt-E on the initial registration screen brings up a prompt on that same screen asking for a password. I've tried several passwords, but everytime I enter a password it seems to lock the thing up. Not sure what it's trying to do. Hitting the power button seems to be the only way out of that screen.
Now... the most useful key combo I've discovered: pressing Shift-Ctrl-Alt-Home on the initial registration screen brings up a screen that sounds like it's the same as the Control Panel on the Websurfer Pro. It has the following fields and info:
User Name: SFRE000074@SFREE.SPRYNET.COM Proxy IP: 0.0.0.0
Password: let7turn Gateway IP: 0.0.0.0
Dial Prefix: DNS: 184.108.40.206
Home Page: http://www.websurfer.com Dial Script:
E-Mail Page: http://www.websurfer.com/email/index.HTML
Favorite Page: http://www.planetoasis.com
Search Page: http://www.metacrawler.com
User Page: http://220.127.116.11/user.htm
Preference Page: http://18.104.22.168/userprof.htm [ ]Dial Pulse <-Checkbox
Help Page: http://22.214.171.124/help.htm [Dial] <-Button
Error Page: http://126.96.36.199/error.htm  Version 1.6 Beta 2
I filled my username, password, dial prefix (for caller id), phone number, and DNS for my isp and was able to connect. When I shut the power off and come back in, it keeps prompting me to register. I'm not sure how to bypass that process.
After getting it to connect successfully, I went back in and changed the home page, e-mail page, and search pages to ones that work and they seem to stick. I'm not sure how the favorite page, user page, preference page, help page, and error page worked when this thing was live, so I left them alone for now. I may set them to a web server I have control over and see what requests it sends.
Also, there is an unlabeled field containing a 0 just before the version number. I'm not sure what it does, yet. I'm going to keep playing with it, though.
Also, does the little mousepad on your keyboard work? I can't get mine working. The little mousepad on the handheld remote works, and the select buttons on the keyboard work, but not the mousepad on the keyboard. :(
I'd like to know what version yours says if you can duplicate this and see if there are different versions out there.
I don't know if you've opened yours up or not (I'm sure you have since you're on this BBS... ;) ), but this has a slot on it for a flash SIMM kind of like that found on the WebPal. It might even be the same type.
I'd like to get some kind of dump of the OS to see if there's any useful info there. The BIOS in this is on a flash chip similar to the I-Opener's, and it appears to be an AMI BIOS, but blast if I can get into the thing.
This thing has the same SMC super I/O chip found on the WebPal. It supports floppy, 2 ide channels, isa slots, serial and parallel ports and a slew of other items, so if it could be hacked, you might could add in an ISA card, etc. by adding the appropriate components.
Good luck on your hacking and let me know if you discover anything else useful.