🚀 go-pugleaf

There is a huge gaping security hole with the MARS telephone system
as I write this post. Because of this, all students' sensitive registration
records, grades, financial information is freely available to anyone with
their social security number....

Just try it.


Step 1:

Call (301) 403-0500




Step 2:

Press 3 (for financial information)



Step 3:

Press 1 for student account inquiry





Step 4:

When it asks you for a social security number, put in any students. It will then
ask you for a PIN. Put in ANY six digit number.... ANY NUMBER WORKS!!!!!


Step 5:

Listen as you find out sensitive personal account information!!!





This example is a benign one. Anyone with your social security number can drop 
all your classes for you or register you in whatever you want.

Pretty great, huh?












--