2 ms·
I set up an automatic grader for a class I TA so students could submit code and have results immediately (it just pipes input into stdin and checks stdout again
by gamegoblin 13y ago
I set up an automatic grader for a class I TA so students could submit code and have results immediately (it just pipes input into stdin and checks stdout against a set answer). They had to set up little accounts on my grading website. I told them not to use an important passwords or anything since I am not doing any sort of security. Upon examining the plaintext passwords, there is a decent number (maybe 5 out of 73 students) who used things like "Proverbs22" (number made up) as passwords.
Seems like a good strategy to brute force passwords.
- Phlarp 13y agoYou cant be bothered the four extra lines it would take to properly salt and hash these before storage?
- gamegoblin 13y agoI knew that students would be forgetting their passwords (already more than 10 have come to me asking me what their passwords were) so rather than making a password retrieval/changing system, I made the executive decision that it didn't particularly matter on a system I made the morning before a class that has no impact on grades or anything else. The system is purely for the students' convenience at testing code. The only reason there are usernames/passwords to begin with is so students can view all of their past submissions to the system.