History of Vulnerabilities
SAP
Tech History
Technology
Dave?
100

This one-word term was re-coined by Frederick B. Cohen in 1984 describing self-replicating computer programs that could affect other programs by modifying them to include a possibly evolved copy of itself.

What is Virus

100

Both Zinedine Zidane and SAP were born/founded in this year.

What is 1972

100

Completed in 1945 at the cost of $487000 ($8500000 today), this was the first fully electronic reprogrammable, general-purpose computer and No, Thorsten was not the system owner.

What is Electronic Numerical Integrator and Computer (ENIAC). While Z3, created by a German named Konrad Zuse, was completed in 1941, it was not fully electronic (electromechanical). Zuse is consider to be the inventor and father of the modern computer.

100

RAM stands for this in computing

What is Random-access memory

100

Dave, Helge V., and Juergen H. are probably the only people that could configure Forms in this original SAP Intranet solution that will live forever :-)

What is SAPNET

200

In 2003, the Slammer or Sapphire worm, attacked vulnerabilities this database product becomes the fastest spreading worm of all time. It also caused SAP IT to shutdown an entire subnet of the NSQ1 building and everyone (except for 2 people) had to turn in their computers for checking.

What is Microsoft SQL Server. The 2 people were Dave Lewis and Dave Greenland, who worked in a meeting room just outside the boundary for over 1 year

200

ABAP was released in this year, after considerable work by Klaus Tschira and ABAP Team lead Gerd Rodé.

What is 1983

200

Bye Bye Blackberry - The iPhone was released in this year

What is 2007

200

This operating system has its own mascot named Tux

What is Linux (technically the Linux kernel)

200

Between 2008 and 2011, this infamous fugitive was jokingly considered by some at SAP to be hiding inside the Corporate Portal due to the overabundance of content uploaded by users, much to the worry of the system owner, Dave

Who is Osama bin laden

300

This vulnerability had a deep impact due to how a specific library can be deeply embedded into almost any system or environment where Java applications and required several rounds of fixes before it could be resolved. Many PMP members lost sleep dealing with it.

What is Log4Shell

300

Products from TopTier and software like Workplace 2.11 were the precursors to this SAP product that launched in 2004 and is still available today

What is SAP Netweaver

300

The precursor of this tool was called Compass when it was released in 2004, which used a common interface and JSON over HTTP to be a scalable search solution. Some people will complain we will need a Compass to use it and liked the old solution better....

What is ElasticSearch

300

This video game console released in 2006 pioneered the use of motion controls in its gameplay

What is Nintendo Wii

300

Dave grew up on the ocean coast/beaches of New Jersey and enjoyed this sport in the summer. Judging from his performance at the last workshop, it is not bowling

What is Surfing

400

This vulnerability was consider the first to impact supervisory control and data acquisition equipment and programmable logic controllers used in industry and thought to be designed to target Iranian nuclear facilities

What is Stuxnet

400

This was the year that SAP went public on the German Stock Exchange

What is 1988

400

Released in 1957, this is the oldest computer programming language still in use today, and thankfully, it's not in use for any PMP solutions

What is Fortran

400

This type of security flaw in software or hardware is unknown to the vendor and has no patch or fix. Technically, Heartbleed was not one

What is a zero-day vulnerability. Heartbleed vulnerability existed in 2011 but not disclosed until 2014.

400

The unicorn is the national animal of this country, that Dave shares some heritage

What is Scotland. Grandmother was 100% Scottish

500

Found in 2018, this vulnerability was one of 2 vulnerabilities to target speculative execution CPU vulnerabilities. It's also a foe of James Bond.

What is Spectre. (SPecial Executive for Counter-intelligence, Terrorism, Revenge, and Extortion)

500

First introduced in 1992, this is the year that SAP's R/3 product is considered End of Life.

What is 2027

500

A researcher at this nuclear research organization created the very first website which launched on August 6, 1991 and was restored in 2013.

What is CERN

500

AI is immensely popular but needs training and optimization. RAG is a popular for optimization and the abbreviation stands for

What is Retrieval-Augmented Generation

500

Manually calculating the number of inches in a mile is a bad time. This many countries in the world do NOT have mandatory use of the metric system.

What is 3 (USA, Liberia, and Myanmar). Dave thinks the US should switch since every obstacle course race distance is measured in meters/KM now.

M
e
n
u