Student Charged With Crime For Telling University Officials About Security Hole
The student found a security hole that exposed his school to malicious hackers. He wrote up the vulnerability into a 16 page paper detailing how he found it and how to fix it.
Carleton University gets today's prize for incredibly stupid disincentivization to whistleblowers. Rather than applaud the student's honesty and follow up in writing up the vulnerability, they had him arrested for hacking.
Rule #212 is Don't Shoot (or Arrest) the Messenger
No comments:
Post a Comment