A 19-year old broke into India's largest high school examination system of 2M+ students a year, the CBSE, and was able to view and CHANGE any students' marks.
He responsibly wrote to the team 3 months ago, and it took them 3 days to fix only one of the issues. Today, they took the entire website down.
This is a absolute embarrassment. The futures and lives of millions rests in the hands of the utterly incompetent. There is also no mass media reporting on the matter.
This topic is close to me because not only is this the education system I went through, but 12 years ago and silently for 5yrs since, I'd written about and reported a much less severe vulnerability allowing me to scrape these results too. More than a decade later, not much has changed.
This 19yo, Nisarga Adhikary, wrote a great piece outlining each vulnerability he reverse engineered:
- the master password leak
- the client-side 2fac / OTP validation workaround
- tokenless access to the entire internal app (dashboard, evaluator details, etc) setting dummy browser values
- changing any password without knowing the old one
- an IDOR vuln allowing you to act as any user and edit exam marks
For those interested in a beautiful study in security breaches, this is a must read (link below).
If there's any light at the end of the tunnel, it's that a 19yo who never went to college can do things 99% of top engineers couldn't figure out.
Massive opportunity here to secure 5k in $SOL !!
May all your manifestations be heard. $MANIFEST
All about community and long term here.
- 10% supply burn
- 3500+ holders
- community growth soaring and now a 5k giveaway?
Inane @ManifestingXs
Whale 0x3ed4 just chased the pump and opened a 10x long on 142,754 $HYPE($9.1M).
Liquidation price: $41.93
Yesterday, this whale also opened a 10x long on 13,356 $ZEC($8.24M).
https://t.co/S20iPpJYVg
We’re going to crush Medicaid fraud in Ohio aggressively, using emergency measures, starting on Day 1. Press conference starting at 10:30am to lay it out.
He bought when others panicked.
Now he’s not buying.
Warren Buffett is sitting on $400,000,000,000 cash and calling the market a casino.
That shift matters.
I have the same thesis.
This is not the time to buy.
This is the time to exit.
India continues to scale new heights of progress but at the same time there are several challenges we have to overcome.
Here is my appeal to my fellow Indians.
🤖 INTERESTING: The Xsto biped robot can switch between wheels and bionic legs, allowing it to move quickly on roads, jump over obstacles, and navigate rough terrain and disaster zones.
ELON MUSK: "I keep telling people I'm an alien, but nobody believes me. When I got my green card, it said alien registration card. So, I have proof from the government." 😂
We will provide updates as they become available and confirm information. Our teams are on the ground assessing the situation and investigating. All of our protectees are safe.