College Student Expelled After Bringing Web Vulnerability to School's Attention

College Student Expelled After Bringing Web Vulnerability to School's Attention:

http://threatpost.com/en_us/blogs/c...ng-web-vulnerability-schools-attention-012113

 

There's that grey line again. He should have left things alone in this case. He's not a professional pen tester and doesn't work for any security company. Companies will take a lot from the people they pay to do these things or from professional researchers, but not from a school kid. It's understandable to want to follow up, but he simply wasn't in position to do so.

 

Also cited:

http://arstechnica.com/security/2013/01/canadian-student-expelled-for-playing-security-white-hat/

http://www.montrealgazette.com/news...y flaw offered scholarship/7848596/story.html

http://montreal.ctvnews.ca/dawson-s...inding-student-portal-security-flaw-1.1123295

http://www.theregister.co.uk/2013/01/21/dawson_student_expelled_code_flaw/

http://www.h-online.com/security/ne...ent-for-re-testing-security-hole-1789138.html

http://montreal.ctvnews.ca/video?playlistId=1.1124095