>2. get access to a router firmware in the lottery datacenter en route to the database
Seems non-trivial given that the database server is likely to be in the same datacenter/rack/physical machine. If you have this much access you might as well plant a backdoor in the server and tamper with the database however you want.
>3. wait for the query to get the winning numbers from the database
Are lottery winners determined immediately after they close? I thought they did a number picking ceremony by picking out literal number balls from a tumbler?
Seems non-trivial given that the database server is likely to be in the same datacenter/rack/physical machine. If you have this much access you might as well plant a backdoor in the server and tamper with the database however you want.
>3. wait for the query to get the winning numbers from the database
Are lottery winners determined immediately after they close? I thought they did a number picking ceremony by picking out literal number balls from a tumbler?