Friday, October 29, 2004

Oxford pair suspended for hacking

Interesting story, for numerous reasons.

  • Universities do have regulations regarding their computer systems, which they have every right to enforce
  • Universites keep a lot of sensitive material on their machines - if they do not keep it securely then they are almost certainly in breach of data protection laws - and it appears that problems were exposed. So who is most at fault?
  • This was not some fiendishly clever student creating a new hack - they used software that was "easy to obtain from Google"

Essentially, the students are claiming that this was ethical hacking, which it may well have been - but one of the approaches to ethical hacking is to let the organisation know you are about to try, and get their agreement - preferably, signed on a piece of paper.

Comments: Post a Comment

This page is powered by Blogger. Isn't yours? (c) 2003-2005 Russell Beale