Hi Ish,
On 3/21/2016 12:48 PM, Ish Sookun wrote:
> I just read
> (http://www.lexpress.mu/article/278183/infrastructures-publiques-une-base-donnees-piratee)
> that the Minister of Public Infrastructures made a public declaration
> that one of the ministry's database was "manipulated".
Firstly, from my point of view, this may be some 'old' as, if it was
something highly sensitive, one won't wait for a 'cyber-crime' workshop
to voice out something related to hacking. Definitely I won't wait
forsomething big to voice out my concerns. But anyway, the good thing
ishe did a public declaration unlike others.
> The article says "piratée", which might not be the correct word, since
> the Minister mentions that the database was manipulated by one of the
> officers. Most probably the officer had access to the database and
> only effected transactions he was not authorized to.
According to the video in the article, the minister says that someone
did a copy of the database and that person is manipulating with the data
stored (on that copy?) from outside ("à l'extérieur"). Something is
wrong here. I guess he wrongly explained himself due to the lack of IT
knowledge but as you mentioned, "piratée/hacked" isn't the right word here.
> Could that be termed as "hacking"?
No.
1. Manipulating on the data stored *cannot* be termed as "hacking"
because that's what you do with the data stored.Manipulating without
authorization on a *current* production database(not the copy) can be
termed as hacking.
2. Penetrating into the system (maybe the DBMS) without proper
authorization and dumping the DB can be considered as "hacking" or
"tampering" of data.
3. Using someone else credentials to log onto the DBMS can be considered
as part of "hacking".
--
Regards,
*Tejas (Nirvan) Pagooah*
CTO, Graphics Temple
Received on Mon Mar 21 2016 - 12:43:10 PST