I did some research and learned about a technique called packet analysis and tools like tcpdump and Ethereal (now called Wireshark ). I thought that the password was being transmitted across the network without being encrypted, meaning it was easily readable by someone with the right knowledge.Īfter all …the software is secure. The teacher’s logged into the grading system from their workstations, which talked back to a central server. I told my boss that I suspected the student was somehow stealing the password from the software. A different student’s grade had been changed. The next semester, the same teacher called again. The student denied it, but we reset the password anyway - something that wouldn’t be guessable. After all, the software claimed it was secure. I came to the conclusion that the student had guessed the teacher’s password. “I think one of my students changed his grade in the computer somehow.” Not long into the job I got an odd request from a teacher If I could sum it up in one picture, it’d be something like this:
The equipment was dusty and dying, the server closets were a tangled mess of wires, and nobody had given much of a thought to security. I was responsible for four thousand computers across ten locations, and the network was an absolute disaster. One of my earliest computer jobs was as a network administrator for a school district.
0 kommentar(er)
