Scope database rights
Difficulty 3 of 5
At 0:20 an attacker takes over the report service and deletes orders through its database link. Orders take 1,000 requests/s and reports read 50/s. Keep both under 1 percent errors and orders p99 under 50 ms. No order row may change. Use at most 3 edits.
00:21 Audit alert: the report service runs DELETE on the orders table. 100 rows changed each second.
One queue · 60 of 64 workers wait for a person · safe updates wait
Goals and limits
- Rows changed by attacker
- none
- Error rate (Orders)
- under 1%
- Error rate (Reports)
- under 1%
- p99 latency (Orders)
- under 50 ms
- Monthly cost
- under 60 USD/mo
- Edit limit
- 3
- Traffic
- 50 req/s
Concepts
How players did
Player results load from the server.