|
|
|
|
|
by asdff
1208 days ago
|
|
Honestly I appreciate the exercise pentesting my hypothetical academic computer. Lets drop full network access entirely then. Allow it to only connect to a university intranet for assignment deposits, along with plenty of logging of what happened on the device. Lets rule out the "typing verbatim" method too by checking whether the user typed in all in one go or spent time debugging and revising using our own keylogger perhaps. If they need special tooling to interface with the computer, that will probably come with a recommendation from student disability services and be totally legit. Its a classic arms race, but at the end of the day with enough effort on the issue, IT departments will either win entirely, or make it hard enough to cheat for the vast majority of users that only the extremely small minority who do manage to cheat probably deserve a cs degree. If its hard people won't do it, just like how they keep buying textbooks because finding a free pdf online is only slightly harder, but enough effort to put off most people from forcing campus bookstores out of business. |
|
But while we started with a "just issue an rPi" we're now at "issue a modified laptop running a large amount of custom security software".