So the upgrade to the school district's computer system over break gave all students the same access as...
So the upgrade to the school district's computer system over break gave all students the same access as administrators. They could change grades or anything else. No one noticed until last Friday.
Oh the WOPR.
ReplyDelete-_-
ReplyDelete"del ."
ReplyDeleteDid anyone do anything cool?
ReplyDeleteNone of the students noticed until Friday, or no one noticed the shenanigans the students were pulling until Friday?
ReplyDeleteI would have deleted all the football players' grades, but I don't know. Some did change their own grades at least (or others, not sure). Only one of Abby's friends even looked at the system over break, but she's a nerd. I'm sure news traveled fast for the high-schoolers.
ReplyDeleteThe admins and teachers didn't pull the plug until Friday. The kids knew as soon as it happened. I assume this is what I see IT people talking about when they talk about pushing to production on a Friday, but this was all of Xmas break...
ReplyDeleteNo audit trail? What users changed what things? What kind of mickey mouse shit is this?
ReplyDelete-rm -rf
ReplyDeleteI'm pretty sure this was the teachers once they noticed.
ReplyDeletehttps://s-media-cache-ak0.pinimg.com/736x/3c/97/34/3c9734db0689a564d84aacec6ed2b64a.jpg
I have no idea if they'll try to track down who did what or if they'll just nuke it back to the state before the changes.
I don't know Casey G., that's assuming that they have a backup that they can put back into place somewhere...
ReplyDeletegregory blair there is no excuse to not have a backup with an enterprise DBMS back end for the application.
ReplyDeleteIf they incrementally back up, they'll be fine. Odds are, they haven't done one since the third week of school.
ReplyDeleteBob Chubarov My point was more that folks who push that kind of privilege error to production probably aren't doing backups right either. Like what Joe Cwik said. Also, mostly yoke.
ReplyDeleteWhat the fuck
ReplyDeleteAmazing
ReplyDeleteMy workplace introduced a new integrated online system for things like ordering supplies and viewing payslips a few months ago. When I logged on to look at my payslip I noticed that I also had the rights to terminate the employment -- at the click of a mouse button -- of a number of staff members, including myself.
ReplyDeleteI started working IT in 1993. I've worked for government institutions, a Fortune 50, and tiny companies. At none of those places would this particularly surprise me. Sure, it's a head-shaker, but the surprise and outrage above seems weird.
ReplyDeleteAlso, the password is pencil!