Monday, May 5, 2008

Shenanigans!

The requisite post describing how sweet Steak And Whiskey Night was will be coming soon. This post is serving as an announcement, I am calling shenanigans on the IT department.

I have found a security vulnerability in http://it.rit.edu/, the IT department's public facing website which allows me to arbitrarily inject faculty and staff into the site's database. I have made the department aware of this issue, however should they fail to acknowledge the issue or attempt to take any action against me I will make the exploit publicly available.
Also should they fix it, I will also make the exploit (and my theories for how they fixed it) publicly available as website security is an interest of mine...being a web developer. It should be an informative adventure.

Also the IT department has elected to not offer the course I need to finish my concentration in fall, meaning I will likely not get to take it until winter...and I'm sure will somehow play a role in prolonging my stay at RIT.

-- PXA

No comments: