Princeton Caught Hacking Yale's Online Admissions System
from the oops dept
Oh, those crazy Ivy Leaguers. Yale today accused Princeton of illegaly hacking into their online admissions system to check on students who applied to both schools. Yale had seen a number of "unauthorized" attempts to log in, including some that were traced back to the Princeton admissions office. For their part, Princeton doesn't seem to be denying any of this. They claim that they were "curious" as to how secure the Yale system was. It seems that none of these systems are all that secure. A friend of mine who applied to Harvard Business School figured out very quickly (just change a number in the URL) to change the result of the admissions proceedure. Within a few seconds we could easily setup a page that said any student got in, was put on the waitlist, or was rejected. Perhaps schools might want to think about more secure systems for such things. Using login information would be a start... Update: Now Princeton has suspended their director of admissions for this little fiasco.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Reader Comments
Subscribe: RSS
View by: Time | Thread
haching crash network
[ link to this | view in thread ]