3 ms·
> One person had just acquired the exam results for the whole country. Not only was this a violation of any and all forms of privacy associated with something a
by thex86 13y ago
> One person had just acquired the exam results for the whole country. Not only was this a violation of any and all forms of privacy associated with something as personal as your examination marks, but a mass divulsion of all sorts of personal information - names, date of birth and school.
There is no privacy to begin with, so this is a sensationalist argument at its best.
In India, there is no notion of keeping your grades confidential from others. Your entire neighborhood knows how you fared in your exams, because the notion of privacy and to keep grades as a secret as is in the western countries is not there.
What the author has done is nothing new, except that he got hold of them "technically". I checked my result for the same exam when I was in USA. Not only that, I got the result for the entire school through email, it is that easy.
Case in point:
http://schoolcoderesults.nic.in/cbse-2013/result.php http://schoolcoderesults.nic.in/cbse-2013/result.php
So if you did give the exam, you have access to all the grades and they will send them to you through email, no questions asked at all. Let me repeat: you get all the grades for everyone in the school just through this one click. Should I call this a flaw in the system when the system presents this interface to me?
Even if you did not give the exam, you can get the "School Code" and "Authorization Code", again from the CBSE (the Central Board of Secondary Education). So I can get the grades for anyone from any school in India.
This is not a "cyberflaw". It is a flaw in our culture, if you can call it that.
- kamaal 13y agoYes, How are exam results secret? Sorry but ever since exam results are being posted on the internet. You could practically Google your way to finding some one's result.
- harichinnan 13y agoResults get published in news paper in India. Anyone with your registration number could get all your marks. Its easy to go back one step and know who is the owner or the exam registration number. In our state(Kerala) they publish a ranking of top 15 rank holders in the state for 10'th and 12'th classes and the kids are treated as celebrities with newspaper and tv coverage.
- fakeer 13y agoCBSE[1] officially sends you results via email[2]. Of an entire school and there you get students' names, roll numbers and marks and pass/fail. The you get student's roll number and see the entire result card[3] which also has students' mother's names, father's names and DOB. All you have to know is two codes of a school: affiliation and school code which is public and schools put it on their websites[4] [1]https://www.google.com/search?q=CBSE https://www.google.com/search?q=CBSE [2]http://schoolcoderesults.nic.in/cbse-2013/result.php http://schoolcoderesults.nic.in/cbse-2013/result.php [3]http://cbseresults.nic.in/class10/cbse102013cvb.htm http://cbseresults.nic.in/class10/cbse102013cvb.htm [4]A tiny % of schools have their websites but that information is readily available.
- shubhamjain 13y agoAgreed. Someone just created a bot to fetch all records and plotted nice graphs. Creative but I don't see any reason how this is a security flaw.