Educause Security Discussion mailing list archives

Re: hacking into a registrar's system


From: "Brian K. Dore'" <bkd () LOUISIANA EDU>
Date: Thu, 27 May 2004 09:28:41 -0500

Not exactly hacking, but a serious security problem nonetheless:

http://www.washingtonpost.com/ac2/wp-dyn/A43281-2004Apr1?language=printer

Brian

-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Scott Bradner
Sent: Thursday, May 27, 2004 9:04 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: hacking into a registrar's system

I just got a call from ABC news who wanted to know if I knew
of any cases where someone hacked into a registrar's system to
insert a record to indicate that somone went to the school sometime
in the past (resume padding)

I said that I thought that inserting such a record for sometime
in the past could be quite hard (since it would likely in an
archive section)

I said I could see how someone (at least in theory) could change an
existing grade but more than that would be very had indeed

1/ do you know of any case where someting like thjis happened?
2/ how about cases where someone in the registrar's office
   changing grades (I seem to remember seeing some news stories
   on this type of things)

Scott

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Current thread: