Hacker News new | ask | show | jobs
by grioghar 1744 days ago
Hex-editing Intergrade at certain points allowed you to bypass authentication and go RIIIIIGHT in.

I didn’t know what that meant at the time, but my buddy sure did.

He was kicked out of school a few weeks later for editing his grades.

1 comments

Oh wow, yep, that's exactly what we figured out. Their save file format stored the password hash, but didn't actually encrypt or obfuscate the grade data beyond just whatever serialization they were doing. We were starting on figuring that format out when we noticed that creating a new save file with or without a password changed a byte right before the password off and on... flip it off and the app no longer prompted for the password... edit/save in the app, flip it back on, and that was that. edit: I should add, rather than get expelled we got a ton of extra credit for it since it was at least sort of sanctioned.