3 ms·
The loss of sanity I reckon was when they found out about all the backdoors and lax security the old system had. Incrementing int for id's, the session key bein
by reactordev 3y ago
The loss of sanity I reckon was when they found out about all the backdoors and lax security the old system had. Incrementing int for id's, the session key being part of the url as a parameter, the XML. This may be something you're ok with but for those of us who care about security, this would drive me mad as well.
- busterarm 3y agoState University of New York used to famously use students' Social Security Numbers for their student ids up until around 2005. That student id was printed on your student id card and used for just about every system on campus. They finally changed that system after lots of scams/fraud perpetrated against students brought the practice to media attention. Wild.
- bredren 3y agoI believe it was the same situation at Oregon state, around 2003. Perhaps it was easier for the ID vendor to key against a registrar db.
- reactordev 3y agoWow... That's definitely worthy of a daily wtf.
- bcrosby95 3y agoThis was pretty common. I went to two schools that did this in the late '90s and early '00s. T'was just a different time.
- lubesGordi 3y agoI must've missed the hacking part. All I saw was a phishing expedition that resulted in them being able to log in as other users (and scrape their data)?