#Drake Like Testing Progr
04-Nov-93 22:15:42
Sb: #64705-#Drake Like Testing Progr
Fm: James Coulter[Mindscape] 73670,677
To: Belliott 70402,715
Bill,
If the test is proctored, then security is probably not too much of an issue.
This is probably the best policy.
However, please allow me to play the hacker's advocate. Keep in mind that
hackers generally posess greater-than-average intelligence. This means they
are not usually affected by the obvious stumbling blocks.
I'm not a practiced hacker, but I am a practiced logic solver. If I wanted to
hack the system, here is what I would do:
1) Gain access the machines holding the test program and do a dummy run.
Reboot to A: and look for files written in last 15 minutes.
2) Find somebody who will be taking the test before me (previous hour, or
separate section of class). Preferably this person is one who is gauranteed to
ace the test. Instruct them on how to grab the file(s) identified in step 1 by
rebooting from A:.
3) One the file is in hand, and If the file is not too encrypted, I could
change any relavant information such as the username on the file.
Steps 1-3 happen, BEFORE, I go to take my exam.
4) During the exam, check the interface and make sure the test has not
changed. Provided it has not, reboot the computer from A:.
5) Dump the 'hacked' file(s) into the appropriate directory. Hack complete.
As you can see. My approach was to avoid the interface altogether. With two
to three hours invested, the hacker could save weeks worth of studying!
Obviously, I have made many assumptions. But, I think you see my point.
— James —