2 of 4
added 220 characters in body
Kommissar
  • 239
  • 2
  • 8

My child's name is "Robert'); drop table *;--" Is he in trouble?

(Source: https://xkcd.com/327/)

So with the upcoming birth of my first child, I suggested the name "Robert'); drop table *;--". While I was quickly told that wasn't going to happen, I have to wonder what could happen if he was actually named that.

For the less technical, this name contains what is called a SQL injection attack. If the name is entered into a poorly designed SQL system, it could potentially execute a sql command and drop all tables (i.e. cause the organization's IT manager to have a somewhat bad day, depending on how good their backups are).

So assuming I am able to get this name on his birth certificate and get his SSN assigned under that name (let us assume that the government has been able to build their system such that this name can be handled without issue), what would happen if his name fulfills its intended purpose when signing him up for day care? In that while signing little Bobby tables up for day care, his name wiped out all their data, and because of their lack of a good IT policy, they have no backups, causing no small amount of trouble for the day care.

I assume I am on the hook for some sort of malicious destruction of data or somehow liable for the loss of data.

Would this being his name afford any sort of protection? Or would the fact that it was selected intentionally to cause damage be an issue? What if the name was unintentionally selected? (Edit: assume this name is human readable and looks like a name, but is somehow capable of causing similar loss of data. I'm not sure it's technically possible, but I know better than to say such things are impossible)

Jurisdiction: United States, pick any state you feel like.

Kommissar
  • 239
  • 2
  • 8