Your First Job
Today we have a new client: The Department Of Donuts, a government department responsible for donut research and development, and the National Donut Preference Database.
The National Donut Preference Database is a list of everyone in the country with their name, email address, phone number, and favourite donut flavour. This is Sensitive Information and could cause a lot of embarrassment to Important People if their secrets ever gets out. What if everybody knew that the Prime Ministers' favourite was the "Boss Hog": a donut pilled high with pulled pork and potato salad, and drizzled with honey BBQ sauce? Oh the shame!
The Department Of Donuts ("The Dept" for short) has hired us to check that their systems are secure. It is very important to The Dept that their database is well protected behind many layers of security.
But their security is terrible. It is full of holes, just like their donuts. It is our job to find the holes so they can fix them.
The rules are simple:
- We can try anything we want
- Don't break anything: no permanent damage to software or hardware, stay legal
- Be quiet and careful: The Dept boss knows we are hacking, but the staff don't
- Being sneaky is OK. Being evil is not OK: it's a fine line
- We must tell The Dept anything we find afterwards