01 Oct 2021, 01:26
No s**t
The grading system:
The passwords are 6 digits of numbers.
The account names are all public.
There is no ip ban or access control to limit bruteforcing.
There is no login record or login monitoring.
Google auto fills the password so if someone gets access to an open computer they can steal the codes.
The test system:
Never closes the test after taking it, simply greys out the link.
All tests are labeled in sequence and can be guessed.
System takes best attempt and does not check for weirdness.
No system to show attempts taken or rectify having too many attempts recorded.
Computer login system:
all accounts are administrators.
Computer login is the same as unprotected test system which can be broken into.
Computer login can be done from anywhere on the system such as in a quiet corner.
But yes. Such a mystery how it could be hacked. No reason at all.
The grading system:
The passwords are 6 digits of numbers.
The account names are all public.
There is no ip ban or access control to limit bruteforcing.
There is no login record or login monitoring.
Google auto fills the password so if someone gets access to an open computer they can steal the codes.
The test system:
Never closes the test after taking it, simply greys out the link.
All tests are labeled in sequence and can be guessed.
System takes best attempt and does not check for weirdness.
No system to show attempts taken or rectify having too many attempts recorded.
Computer login system:
all accounts are administrators.
Computer login is the same as unprotected test system which can be broken into.
Computer login can be done from anywhere on the system such as in a quiet corner.
But yes. Such a mystery how it could be hacked. No reason at all.