integrity, ethics...pshaw, who needs 'em?

Here's a bright idea; apply to an ivy league school, read online how you can hack their web based software to find out early if you've been accepted, attempt to find out your fate only to learn they haven't made a decision about you yet, but because you exploited the vulnerability, you now are automatically rejected.

Quote:

---

-Security Focus article-

Hacker helps business school applicants get early decision
By Michael Kunzelman, The Associated Press Mar 3 2005 2:07PM

A computer hacker gained access to internal admissions records at Harvard, Stanford and other top business schools, then helped applicants log on and learn their fate weeks ahead of schedule, officials said Thursday.

Few of the people who followed the hacker's directions managed to find out if their applications have been accepted, according to school officials. But many of them could end up getting rejected now that the schools are checking to see who tried to exploit the security breach.

"Hacking into a system in this manner is unethical and also contrary to the behavior we expect of leaders we aspire to develop," said Steve Nelson, executive director of the MBA program at Harvard Business School.

...

---

that is hilarious. I guess he never got the memo that patience is a virtue, or at least a usefull skill.

I think this is Harvard's fault. After all, how can you expect your MBA students to know right from wrong when they haven't even sat through Ethics 101? :D

Update

http://www.securityfocus.com/news/10634

Quote:

---

Harvard Business School will reject 119 applicants who followed a hacker's instructions and peeked into the school's admission site to see if they had been accepted, the school's dean said. This behavior is unethical at best -- a serious breach of trust that cannot be countered by rationalization," Kim Clark said in a statement Monday. "Any applicant found to have done so will not be admitted to this school."

---

Quote:

---

Carnegie Mellon's Tepper School of Business has already said it will reject those proven to have tried to peek at their files.

---

Ok... could this just be a case of smart aggressive computing and not hacking?

What if...
You go to a page on your own assigned account and it has a link to your application results page. This opens another window which is nicely formatted with but in the center it says "Your Results have not been posted. Please check again." For whatever reason, you look at the script for that window. It says blah blah blah if x then display https://somewhere/results.doc else display https://somewhere/notyet.doc. If I cut and paste, I can see what is in results.doc.

Is this hacking? Is stopping this sort of thing by punishing this as an 'unethical breach' something we should stand up against?

Just yesterday someone on another forum asked about a problem accessing a Country Music Videos on CMT.com, he had the 'required' software and setup, but the window popped up saying 'we don't support you'. But a simple cut and paste from window that otherwise looked complete, showed the video in the same player as was requested. Now they might argue that they lost revenue because their script counts us as a viewer, or maybe adds a pop under, or otherwise does something they deem necessary to offer the content. Fair enough. But if I register and am willing to accept all that by clicking on the link and it didn't work for me, am I ethically obligated walk away? Am I an "evil unethical hacker" if I see the content?

What you describe is probably debatable. What is described in this article is NOT. My understanding is they had to intentionally change the URL or something that was not available simply by logging in and clicking on a button. It was overt; intent was established, by that action.

What you describe, sure. They screw up and don't protect the info, its their ass. We have a whole boatload of laws in the US that deal with this sort of thing. But if the visitor does something that they know will bypass the agreement they make with the school when they applied (read the paperwork and such for a school application...you'd be surprised what you are bound to) they're SOL.

Quote:

---

"Hacking into a system in this manner is unethical and also contrary to the behavior we expect of leaders we aspire to develop," said Steve Nelson, executive director of the MBA program at Harvard Business School.

---

And I wonder how many of his graduates worked for Enron :rolleyes:

I am not saying they were right, but I find Nelson's hypocrisy too much.......................

This doesn't really surprise me.

1) People are ignorant about security, and Internet technology in general. They probably thought it was completely safe, some of them may not have even known exactly what they were doing ( although I haven't seen the details of the technique... anyone have more info? )

2) It's not as if today's generation of Ivy-league applicants in the U.S. have much in the way of ethical role models to look up to. Look at Cheney/Enron/Worldcom, all the big corporate scandals, Bush the C-student and his constant lies, lack of concern for world consensus, the environment, kyoto treaty, etc. etc., the several convicted felons appointed to administration roles in the US, even Colin Powell lying to the UN, Martha freakin' Stewart, .... all the wealthy suit-wearing teleprompter-reading folks that embody the American versions of success and power seem to be lying, cheating bastards.

3) Of all those folks on The Apprentice, how many of them would you say would have tried this hack?

OMG!! What a bunch of sorry good for nothing losers!!!!

If those people are going to college then I should be president of the United States. I think they deserve everything that they got, and the schools did nothing wrong. Those people should also have been thrown in jail. Hacking into someones files that they don't want you to see is against the law. NO QUESTIONS ASKED.

Maybe schools should not keep people waiting so long, but you would think people coming out of high school would not be that stupid. Even if a college accepted them, how could they trust them to not cheat on tests?

That is a dumb criminal moment.

lool well couple of days ago somehow the same thing happened to me
but the proof i have good ethics..
i just smiled and cleared every log on the computer and walked away

i was thinking of telling them the bug,in exchange i can get some courses free
but then after second thought i don't wanna learn from those teacher
and already busy till 10 pm..

funny thing loool
immagine results,paper exams and lot of stuff
well the guy did not distribute exam papers.. he is good