oldbloke: (Default)
Add MemoryShare This Entry
posted by [personal profile] oldbloke at 02:11pm on 10/05/2006
Our cert mailing list got a couple of messages today about a guy who'd asked in a hacking forum for somebody to get into Man Uni and find him some exam papers - 5 papers for which he'd pay $600 each.
Now, there are only 5 people on campus with the first name he used, and a couple of them can be ruled out immediately. But he was using an account that doesn't match that name when he connected to the forum, and although we have the NTL IP he was on, we're not sure if it's worth asking them who leased that IP at the relevant time. Partly because, of course, exam papers are never ever under pain of death kept online. Obviously we have to have a word with the owner of the account, though, coz it was either him or he's let somebody know his pw (or left a logged in machine unnattended)
There are 4 comments on this entry. (Reply.)
 
posted by [identity profile] the-muttster.livejournal.com at 06:43pm on 10/05/2006
Pull 'im in and get the spotlight on him. Give him the one about security and how it's his responsibility where his a/c and password. Threaten him with the Police and offences under the Computer Misuse Act, see if he squeals! I'm all for caning the sods!

In other news, porn was found on a server this morning. Someone will be picking up their P45 soon...
ext_22879: (Default)
posted by [identity profile] nja.livejournal.com at 07:31pm on 10/05/2006
I've had a couple of people (that we know of) using rentacoder to do their programming assignments. Rather than go for the "public crucifixion in the car park" option which I'd prefer, it's all been swept under the carpet. Exam papers are kept on floppy disks in locked desks or filing cabinets here, apart from the incident where one of the idiot lecturers told the secretary to put them in the "local applications" directory on her PC (which is readable/writeable by anyone logged on to that machine, i.e. by anyone with access to her office).
 
posted by [identity profile] the-muttster.livejournal.com at 10:05pm on 10/05/2006
So how do you know that's what they've done? Doesn't that rely on prior knowledge of knowing the site exists?

Personally, I'd give them the option of a zero mark or locking them in a lab one Saturday with a PC, any reference books they have, plenty of coffee and giving them a separate task.
ext_22879: (Default)
posted by [identity profile] nja.livejournal.com at 10:28pm on 10/05/2006
They post jobs with descriptions like "This is exercise 4 of EG2020..." and give contact hotmail addresses which include their real names. The exercises are set at such a level that it's only the real idiots who have to pay for someone else to do them (and at really good rates - I've heard $100 for the sort of thing which takes me 15-20 minutes). Technically, they can be kicked off the course, but I've never known that to be enforced, even when people have done it three or four times.

May

SunMonTueWedThuFriSat
        1
 
2
 
3
 
4
 
5
 
6
 
7
 
8
 
9
 
10
 
11
 
12
 
13
 
14
 
15
 
16
 
17
 
18
 
19
 
20
 
21
 
22
 
23
 
24
 
25
 
26
 
27
 
28
 
29 30
 
31