4 ms·

> No, I think that's a bad idea too. I think the test that's sent to the client shouldn't have the answers inside the test itself. We keep comparing this to pap

> No, I think that's a bad idea too. I think the test that's sent to the client shouldn't have the answers inside the test itself. We keep comparing this to paper tests, what's a better solution, printing the answers on the back side of paper test, and then gluing another piece of paper over the answers? Or not printing the answer on the back of the test? So server side security is in this case better because it's a more clean solution? In this case the cleanliness of the solution is irrelevant as long as it works. Students can always sneak in attach a keylogger to the teacher's keyboard and read out the password for accessing all tests. It's about erecting a barrier that is good enough.

grayhatter 5y ago
> So server side security is in this case better because it's a more clean solution? Yes, absolutely. There's nothing a client can do if the server doesn't send it the answers. > In this case the cleanliness of the solution is irrelevant as long as it works. *NO!!* How good a solution is always matters! Another solution to students cheating is for an older student to stand over them as the take the test, and beat them with a stick if they try to view the source of the test. That' would be a solution to this problem, but it's so obviously bad. But hey, it'd work. It'd actually work better than this because it would work on every test, on every site, in every browser, for every computer... Because how clean a solution is doesn't matter, who cares if there's a little blood on the screen? > Students can always sneak in attach a keylogger to the teacher's keyboard and read out the password for accessing all tests. It's about erecting a barrier that is good enough. If a student is able to sneak a keylogger onto the computer of a teacher without getting caught, they're smart enough that the test is pointless to them.
- chromanoid 5y ago
  Ok, so a simple group policy is equal to beating children until blood hits the screen. > If a student is able to sneak a keylogger onto the computer of a teacher without getting caught, they're smart enough that the test is pointless to them. Attaching keyloggers is stupidly simple. Security is always a trade off. This was my actual point. In case of keyloggers it's more a matter of lacking risk awareness since it would probably bring criminal charges.

grayhatter 5y ago

> So server side security is in this case better because it's a more clean solution? Yes, absolutely. There's nothing a client can do if the server doesn't send it the answers. > In this case the cleanliness of the solution is irrelevant as long as it works. *NO!!* How good a solution is always matters! Another solution to students cheating is for an older student to stand over them as the take the test, and beat them with a stick if they try to view the source of the test. That' would be a solution to this problem, but it's so obviously bad. But hey, it'd work. It'd actually work better than this because it would work on every test, on every site, in every browser, for every computer... Because how clean a solution is doesn't matter, who cares if there's a little blood on the screen? > Students can always sneak in attach a keylogger to the teacher's keyboard and read out the password for accessing all tests. It's about erecting a barrier that is good enough. If a student is able to sneak a keylogger onto the computer of a teacher without getting caught, they're smart enough that the test is pointless to them.

chromanoid 5y ago
Ok, so a simple group policy is equal to beating children until blood hits the screen. > If a student is able to sneak a keylogger onto the computer of a teacher without getting caught, they're smart enough that the test is pointless to them. Attaching keyloggers is stupidly simple. Security is always a trade off. This was my actual point. In case of keyloggers it's more a matter of lacking risk awareness since it would probably bring criminal charges.