U.S. CitiesCity-Data Forum Index
Go Back   City-Data Forum > World Forums > Canada
 [Register]
Please register to participate in our discussions with 2 million other members - it's free and quick! Some forums can only be seen by registered members. After you create your account, you'll be able to customize options and access all our 15,000 new posts/day with fewer ads.
View detailed profile (Advanced) or search
site with Google Custom Search

Search Forums  (Advanced)
 
Old 01-22-2013, 09:50 PM
 
1,269 posts, read 3,417,332 times
Reputation: 797

Advertisements

Dawson student expelled for exposing software security flaw

"Al-Khabaz and Ovidiu Mija discovered the security flaw last fall. After running a test to confirm the risk was legit, the computer science student said that anyone with basic knowledge of computers could gain access to personal information like social insurance number, home address, phone number and even class schedule – or pretty much all information that the college has on a particular student.

The duo brought the issue to the attention of Francois Paradis, Director of Information Services and Technology at the school. They were congratulated and left with the promise that Skytech, the company behind the flawed software, would fix the issue immediately.

Two days later, Al-Khabaz decided to check the vulnerability a second time to see if the company had fixed the problem yet. Moments later, his phone rang - it was Edouard Taza, the president of Skytech. According to Al-Khabaz, Taza said the security check boiled down to a cyber attack and he could be arrested unless he signed a non-disclosure agreement to keep him quiet about the incident.

Taza later told the publication that he recalled mentioning police and legal consequences but there were no threats or non-disclosure agreements. He said the company was able to fix the problem immediately before anyone could access private information. The executive said he was please with the work of the students but Al-Khabaz’s use of the testing software crossed a line. Ultimately, Taza said the student simply made a mistake and there was no indication of malicious intent.

The school, however, wasn’t as forgiving. After meeting with the coordinator of the department and the school’s dean, the 15 professors in the department were asked to vote whether or not to allow Al-Khabaz to remain in school. 14 voted to kick him out of the college."

read more: Dawson student expelled for exposing software security flaw - TechSpot
Reply With Quote Quick reply to this message

 
Old 01-22-2013, 11:06 PM
 
Location: Gatineau, QC, Canada
3,402 posts, read 4,447,708 times
Reputation: 4409
Huge bummer. If this is indeed the truth, I hope the college gets massive flack and embarasseses those involved until something gets worked out for him.
Reply With Quote Quick reply to this message
 
Old 01-23-2013, 12:00 PM
 
Location: Vancouver
12,691 posts, read 8,756,192 times
Reputation: 7309
My first reaction was this was an urban myth or something. Apparently not. Weird world sometimes.

Company offers scholarship to Dawson student who exposed security flaws - Montreal - CBC News
Reply With Quote Quick reply to this message
 
Old 01-24-2013, 12:21 AM
 
1,269 posts, read 3,417,332 times
Reputation: 797
He may not be an absolute angel. However, if it took place in Calgary or Vancouver, the end result would be the same regardless; that is, bureaucracy.
Reply With Quote Quick reply to this message
 
Old 01-24-2013, 08:55 AM
 
12,886 posts, read 15,435,478 times
Reputation: 14853
Apparently the "code of conduct" for the school means more to them than the privacy, and security of their students. I'm not surprised he was expelled, "whistle blowers" that expose the truth about corruption are usually punished, though they should be rewarded.
Reply With Quote Quick reply to this message
Please register to post and access all features of our very popular forum. It is free and quick. Over $68,000 in prizes has already been given out to active posters on our forum. Additional giveaways are planned.

Detailed information about all U.S. cities, counties, and zip codes on our site: City-data.com.


Reply
Please update this thread with any new information or opinions. This open thread is still read by thousands of people, so we encourage all additional points of view.

Quick Reply
Message:


Over $104,000 in prizes was already given out to active posters on our forum and additional giveaways are planned!

Go Back   City-Data Forum > World Forums > Canada
Follow City-Data.com founder on our Forum or

All times are GMT -6.

© 2005-2019, Advameg, Inc. · Please obey Forum Rules · Terms of Use and Privacy Policy · Bug Bounty

City-Data.com - Archive 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35 - Top