The term “greenhouse effect” is used to describe the:
Questions
The term "greenhоuse effect" is used tо describe the:
Reаl cаse — First Americаn Financial (2019) In 2019, the US title-insurance cоmpany First American Financial was fоund tо be exposing on the order of 885 million documents — mortgage records, bank account numbers, Social Security numbers, driver's license images — through its website. The documents were reachable at addresses of the form https://example.com/document?id=NNNNN, the identifiers were sequential, and no login or ownership check was required: anyone who had a link to one document could reach any other simply by changing the number in the address. Write a structured analysis (roughly 300-450 words) that: (1) names and justifies the primary vulnerability class from the mechanism, and distinguishes it clearly from CSRF and from XSS so it is obvious why those labels do not fit; (2) explains the specific design assumption that failed, using the course principle about trusting client-supplied identifiers; (3) explains why sequential/guessable identifiers made the exposure dramatically worse but are NOT themselves the root cause; and (4) proposes a defense-in-depth remediation of at least three layers, ordered by how fundamental each is, and for your most fundamental layer states one thing it does not protect against. Reason from principles; do not rely on any specific framework's syntax. Tip: Student tip (not an answer): the single most important sentence in the prompt is 'no login or ownership check was required.' Build your whole answer around what was missing (an authorization decision) rather than around what was visible (a number in a URL). Use that to separate this from CSRF (which requires a logged-in victim's session to be ridden) and from XSS (which requires attacker-controlled content to execute in a browser). When you get to sequential IDs, be careful to argue they amplified the exposure without being the flaw itself; a good answer shows why switching to random IDs alone would still leave the app broken. Observation: It is not about classifying using STRIDE (categorization), but the name of the correct type of threats that you studied in Units 2.2, 2.3, and 2.4. Grading rubric Criteria & weights Advanced — full credit Average — partial credit Weak — little/no credit C1 — Classification, Justification & Distinction from CSRF and XSS / 4 pts Full: 3 – 4 pts Names the correct vulnerability class and justifies it using specific mechanism facts from the case narrative (not a memorized definition alone). Distinguishes this class from CSRF with a structural argument — explain what CSRF actually requires that is absent here. Distinguishes this class from XSS with a structural argument — explain what XSS actually requires that is absent here. Each distinction should come from a different angle, so together they make clear why neither label fits this mechanism. Partial: 1 – 2 pts Names the correct class with partial mechanism-based justification. Distinguishes from CSRF or from XSS, but not both — or the distinction is asserted rather than argued structurally. Weak: 0 pts Misclassifies the vulnerability, or names it with no reasoning drawn from the case mechanism. Fails to distinguish from CSRF/XSS, or does so incorrectly (e.g., calls it CSRF just because a URL is involved). C2 — The Design Assumption That Failed / 5 pts Full: 4 – 5 pts Identifies the specific design assumption that failed in this system. Ties this to a general course principle about what a server should never treat as sufficient evidence of authorization. Explains what the server should have enforced instead, and why the absence of that enforcement is a design-level failure rather than a small missing feature. Partial: 4 – 2 pts States that some authorization check was missing, but the connection to the underlying design principle is loose, implied, or only partially explained. Weak: 1 – 0 pts Does not identify a design assumption, or frames the issue as a minor technical omission rather than a violated security principle. C3 — Sequential IDs: Amplifier vs. Root Cause / 5 pts Full: 4 – 5 pts Clearly separates two distinct claims: why the identifiers being sequential/guessable made the exposure worse, AND why that property is not itself the root cause of the vulnerability. Argues specifically why replacing the identifiers with random/unguessable ones would still leave the system broken — connect this to what the server does (or fails to do) once it receives any valid-looking identifier, by any means. Partial: 4 – 2 pts Recognizes that the identifier scheme made the exposure worse, but is fuzzy on the root cause — may imply or leave open that switching to random identifiers would fix the problem. Weak: 1 – 0 pts Treats the identifier scheme itself as the root cause and proposes randomizing identifiers as the primary or sole fix. C4 — Defense-in-Depth (≥3 Layers, Ordered) & Limit of the Most Fundamental Layer / 6 pts Full: 5 – 6 pts Proposes at least three independent defense layers, ordered from most to least fundamental. For each layer, explains what it does mechanically — not just names it. Justifies the ordering — explain why the first layer is more fundamental than the others. States one concrete, specific scenario the most fundamental layer would NOT protect against (a real gap, not a vague hedge). Average: 2 – 4 pts Proposes at least three layers, but the ordering is weak or unjustified, one layer is redundant or does not address the core gap, or the stated limit of the most fundamental layer is vague. Weak: 1 – 0 pts Fewer than three real layers proposed, defenses are unordered, or they do not address the core gap in this case. Proposing identifier randomization as the primary or only fix also lands here. No valid limit of the most fundamental layer is stated.