Youth expelled from Montreal college after finding security flaw

Post by purephase » Mon, Jan 21, 2013, 4:30 PM UTC

gpcz wrote: post #17

eigenvector wrote: post #3

Even aside from the fact that he was acting in good faith and did not cause any damage to persons or property (as acknowledged by the software vendor), the procedure used to expel him is woefully lacking. I sat on the highest student discipline tribunal at my (Canadian) university and an expulsion for non-academic reasons - which had to receive final approval from both the President and the Governing Council - would…

It was also really crappy cover-up strategy on the school's part. By refusing due process to Al-Khabaz and expelling him with zeroes for his last semester grades, Al-Khabaz now had nothing to lose exposing both the security flaw and the injustice to the press. If they didn't play all their cards at the same time (like putting him on probation or something), he probably wouldn't have gone public.

Post by bentcorner » Mon, Jan 21, 2013, 4:32 PM UTC

nivla wrote: post #144

eru wrote: post #66

Earlier quoted context omitted.

Was MAC spoofing not doable in 1999?

and sadly it won't be in the future. New Intel-wifi cards have them blocked[1], their new drivers even go out of the way to modify/intercept Windows from doing it from the software side. Won't be long until other manufacturers follow suit. [1] http://www.intel.com/support/wireless/wlan/sb/CS-031081.htm

Post by outside1234 » Mon, Jan 21, 2013, 4:36 PM UTC

Post by jiggy2011 » Mon, Jan 21, 2013, 4:40 PM UTC

dagw wrote: post #88

rdtsc wrote: post #25

I've said this before -- don't bother being a "white hat". The industry and the legal system doesn't have a pigeon hole for that. You'll be labeled as "hacker" (and not in a positive sense of it). Either disclose the vulnerability immediately to get recognition, hoping it is public enough they'll be ashamed of going after you, or or sell and profit from it. You are already treated as a criminal by these large institu…

I'd revise that to don't be a hobbyist "white hat". If you want to do white hat hacking either get yourself hired by a serious security outfit or set yourself up as a company doing security consulting. On the whole people are far less likely to go after a genuine security company as opposed to 'just some kid in a basement'.

Post by illuminate » Mon, Jan 21, 2013, 4:51 PM UTC

rohansingh wrote: post #149

Ras_ wrote: post #98

Earlier quoted context omitted.

Yes, Finland. Maybe it's because all of our schools are public? For example higher ed. providers are funded based on enrollment and rate of graduation. If someone does not graduate, significant chunk (20-30%) of money won't be paid at all. This creates some incentive for the institution to actually guide and see that people don't fall through all kinds of cracks. I guess it's necessary when there is no ordinary payin…

How do you prevent the schools from just lowering graduation requirements in order to artificially boost the percent of graduates and get a better payout?