Hacking techniques are thorough and precise

Thread Content

This post was last edited by Watcher Star on 2015-11-5 at 14:13. Some students are looking for hackers to alter grades – that is, they hire people who are well-versed in academic management systems and familiar with the relevant rules, and who possess the technical skills needed to breach such systems. (1) Problem: The academic management system consists of two servers; one serves as an internal backup, while the other is accessible to students over the internet. You can modify the data on the server accessible via the internet, but not that on the internally isolated server, as any verification will reveal the changes. Analysis: Looking at this issue, to understand it properly, one first needs to grasp the working principle, as the academic management system is running 24/7. In other words, if you log into the system now and change your password, select a course, or apply to take a course again, etc. Therefore, the system database contains data related to your operations, and this data changes as you carry out those operations; hence, physical isolation of the internal network is not possible. This old approach is not suitable for educational administration tasks. Physical isolation of the internal network for backup is only applicable to backing up fixed information, such as permanent student records. 【Important】The database of the constantly changing academic management system is powered by ORACLE. There is only one database in the academic management system, and it serves both as the database for that system as well as a backup mechanism. But in fact, the data is not lost. Not enough consideration was given to backups at the time the educational administration system was designed, as no school has anything to lose and therefore doesn’t need to constantly worry about preventing others from altering grades. So, under normal circumstances, even if the academic management system fails, the database will not be affected and no data will be lost. The database itself is provided for invocation. Physical operations include: modify, add, delete, subtract. They are all database access actions by the academic management system. This is a reasonable, legal, and feasible action for a database. Because these callable actions are of the data statement type [which can be understood as allowing only one operation on a piece of data at a time]. But what constitutes unreasonable and illegal actions? First, for example, this action: The physical operation related to the entire database named xxxxjwxt is to delete the whole database