Forum Moderators: open

Message Too Old, No Replies

Got expelled from college. Is this illegal?

         

zootreeves

11:39 am on Dec 7, 2005 (gmt 0)

10+ Year Member



I found out that my school uses typo3 (Ready made template software) to
manage their intranet and that they had not changed their default
username and password (It was just user:admin & pass:password). I
logged in and changed my sisters report. Anyway they didn't think it
was very funny and i got expelled, just wondering whether anyone knows
whether that is illegal or not (as that was their main arguement)?

briggidere

2:25 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



did anyone witness the threat from the IT guy. you have some grounds to work with if you have...

oddsod

2:26 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



zootreeves, do tell me that English isn't one of your subjects. :) I'd feel a lot better.

Lilliabeth

2:27 pm on Dec 7, 2005 (gmt 0)

10+ Year Member



I think expulsion is incredibly harsh. You had the opportunity to do serious damage, but did no damage at all. It seems to me that what you did is prove that you are not a criminal - just a regular young person.

Here in the US, I'd tell them to let me back into school or I go to the media with the story of their unbelievable stupidity - and their incredible luck that it was you who got in.

kevinpate

2:34 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



> anyone witness the threat

an entirely separate issue from being expelled/suspended.

I noted the alternative simply because the stated authorization to come back and sit for your exams sounds a tad more like a participation suspension was put in place for the balance of the semester.

My understanding may indeed be faulty, but being expelled generally doesn't include the ability to sit for one's exams and receive grades for the most recent semester.

If you're not certain whether you are temporarily suspended or formally expelled, you certainly need to get that point clear in your mind. It's a distinction that may well negatively impact your ability to enroll elsewhere.

It will likely serve you well to get firmly in your mind the seriousness of the matter from the perspective of the school administration. Even if you feel they are irrational on the topic, it is their perspective that will carry the most weight.

wheel

2:42 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I wouldn't be adverserial with them. I'd contact them, asssuring them you realize you screwed up - but feel that being expelled, which completely ruins your future academic career is something your extremely concerned about. Then ask them if you want to make reparations so that you can get back in, what would they consider to be fair? i.e. you want to admit you're at fault, then ask them for alternatives that allow you to get back in to school. Seems to me that if done properly, they should say 'if you follow steps a, b, and c, we'll let you back in' - assuming you ask the question politely but explicitly.

Don't expect the steps to be fun, but at least you'll have your schooling back.

I wouldn't mention the threats from dingleberry the IT guy.

jecasc

2:46 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I think the school should not get away with this, too.

I mean they have seriously neglected security issues. I am not a lawyer but I think there where some breaches of laws from the schools side, too. They have to protect the privacy of the data they store on their computers and they did not.

The school could well be sued for that and the students could take legal action against this irresponsible handling of their private data.

And if zootreeves was expelled, the least what should be done is too fire the IT guy, too. As a parent I would go mad if I heard that my kids reports and other data were so easy accessible.

pmkpmk

2:55 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



We are talking INTRAnet here!

abbeyvet

3:01 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



My understanding may indeed be faulty, but being expelled generally doesn't include the ability to sit for one's exams and receive grades for the most recent semester.

That might be the case if it were a third level college - a University which awards degrees/dimplomas etc.

Zoot is taking A Levels. These are national exams set by central exam boards - not by the schools - taken at the end of secondary school, which is more or less the equivalent of High School. Lots of other schools in the region are going to be sitting the exact same exams and it is often possible to get access to an exam centre in a school even when you have not attended that school.

On the issue in hand - I think beg, beg, plead and beg are the only available options. Eat dirt. You are not in any position to take the legal or moral high ground, all you can do is throw yourself at their mercy.

zootreeves

3:02 pm on Dec 7, 2005 (gmt 0)

10+ Year Member



No the system is available from the internet as well

jecasc i never thought of it that way, It would be at least some consolidation if the IT guy got fired.

zootreeves

3:05 pm on Dec 7, 2005 (gmt 0)

10+ Year Member



Guess your right abbeyvet. Time to suck it up and beg...

zootreeves

3:15 pm on Dec 7, 2005 (gmt 0)

10+ Year Member



did anyone witness the threat from the IT guy

Yes they did. but I'm not sure threatening to sue or anything is going to help my appeal to get back in.

encyclo

3:19 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I don't think you are in a position to threaten them - as msg#6 indicates, whatever the security failings at the school, what you did is considered a criminal act and could have landed you a jail term. Tread very carefully as you have got off lightly.

I wouldn't try to get back in - you should see if you can find a private tutor (if not too expensive) so you can sit your exams, then move on.

zootreeves

3:39 pm on Dec 7, 2005 (gmt 0)

10+ Year Member



you can find a private tutor

the problem with that is I do DT (design and technology) and so I don't have a workshop which I can use. therefore If I got a private tutor I would only be able to take 2 A levels and I'd never get into university with that.

jk3210

3:59 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



<<It would be at least some consolidation if the IT guy got fired>>

That's an amazingly warped view of life.

Since you seem to not be constrained by any sort of right/wrong perspective, why don't you just rat-out your mom as the one who put you up to it. Then you can go on the talk show circuit as another child victum of criminal parents. Plus, you can spent all of her life savings while she's locked-up.

oddsod

4:05 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I would see it as consolation if the English teacher got fired :)

only kidding, only kidding! I don't want anyone to suffer.

jk3210, to be fair he did say this:

i never thought of it that way

lgn1

4:20 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Well things have really changed since the early 80's. Back them we used to hack into a CDC 6400 at the university. Never did anything malicious, just drove the system administrator crazy.

Worst thing that would happen, is you would lose your user account for a week (which wasn't an issue, as we already had several back door's).

I guess this will set you back a year in your studies.

Go get a job, so you will have plenty of beer money, when you go back to college. I don't think they will hold this against you for more than a year, and maybe only a semister.

pmkpmk

4:36 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I wrote a small program to swap the whole screen content of two neighboured Sun 3/50 workstations. Was great fun.

dragonthoughts

4:48 pm on Dec 7, 2005 (gmt 0)

10+ Year Member



If the college system is available from outside, and not properly secured, it is possible that they are in breach of the Data Protaction Act. If so, a polite chat with the Information Commissioner (based in Wilmslow) might be in order. for the protection of other pupils.

Under the Data Protection Act 1998, those who collect and use personal information have to follow rules of good practice for handling information. The Act also gives rights to individuals whose information they keep.

see :
[informationcommissioner.gov.uk...]

Incidentally, when I was doing my first degree, in computing, around 20 years ago, the Computer Misuse Act didn't exist, so when I successfully acquired the root password, I was actually given a post as an unofficial sysadmin.

Receptional

4:52 pm on Dec 7, 2005 (gmt 0)



Has anyone else on here ever been expelled?

er... twenty three years ago.... but it wasn't illegal...not expelled...just suspended until the end of my school days

zootreeves

5:20 pm on Dec 7, 2005 (gmt 0)

10+ Year Member



That's an amazingly warped view of life.

I disagree. He leaves the system open for anyone to login, he should be fired just for that.

Thanks for the info dragonthoughts.

I would see it as consolation if the English teacher got fired :)

Actually my english teacher did get fired, no joke.

Sarah Atkinson

5:21 pm on Dec 7, 2005 (gmt 0)

10+ Year Member



I was threatened suspention once. I was attacked by group of students on my way home once and attempted to block some of their punches and tried to return a few. The Dean said that if I wished to file a report against them then he would suspened me too.

kaled

6:02 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



You need to take yourself off to the local Citizen's Advice Bureaux. You can look this up using the link below (scroll down a bit).
[citizensadvice.org.uk...]

The school is entirely within it's rights to expel you, however, when the dust settles, I imagine that it will be possible to negotiate.

Just one thing, don't keep secrets from whomsoever is negotiating on your behalf. If you've been in trouble before, etc. (or suspected of other stuff, rightly or wrongly) you must disclose this.

Kaled.

walkman

6:02 pm on Dec 7, 2005 (gmt 0)



>> It would be at least some consolidation if the IT guy got fired

I assume you mean consolation. So you want the person fired, and possibly ruin his life, because he made it easier for you to break the laws? Part of me wishes that they don't accept you back in--at least not until your attitude changes.

jecasc

7:21 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



However you should keep in mind that the IT guy has propably breached laws too, by acting grossly negligent in protecting the privacy of personal data stored on this school computers. And he propably knows it and thats why he reacted in this way.

I think those are double standards. If you expell the pupil for getting into the computer, the person who is responsible that this was possible so easily should be held accountable too.

And in my opinion this guy should be fired. I at least would have fired him if he was working for me.

If someone breaks into my computer or ecommerce system and gets private information from my customers I can be held accountable. If I have more than 5 employees in my company I am even required to appoint a data security official.

There are strict guidelines for public facilities like schools or public authorities how to handle and secure personal data. I doubt those guidlines have been met by the college.

If zootreeves wanted to take it on I am sure heads would role and in the end it could not only be the IT guy who would have to go.

However I do not think that this would be the proper tactic to get back into the school.

I think the idea to get a third party involved to negotiate a little bit when the smoke has settled is the best. But I do not think it is false to apply a little pressure in pointing out that grave mistakes have been made in handling security issues by the college.

Lyndsay

7:37 pm on Dec 7, 2005 (gmt 0)

10+ Year Member



I think the IT guy leaving the default username and password is irrelevant. Whether it was easy or hard to do, you still accessed something you shouldn't. Why were you even trying?

I also don't understand why you wouldn't TELL someone of this security breech. You took advantage of it for personal gain (as harmless as it may have been).

I'm sorry, but you need to accept responsibility for what you did.

Good luck to you, I really hope you can work this out and continue your education. I'd say you learned your lesson, as did the school (about Internet security).

grandpa

8:01 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I wasn't expelled, but I can offer that someone I know was expelled from a university in texas for changing grades. Expelled, as in not ever allowed to return. finis. End of college education.

He turned out OK in the end, just took a different route once the college ended. We do survive, and move on.

I think it's totally wrong to try to present any defense based on the IT idiots failure to secure the system. That's his problem, not yours. Yours is in determining right action from wrong action, and failure to recognize the results of your actions. This time was only an inconvenience, and the punishment seems to fit.

MrSchmidt

8:02 pm on Dec 7, 2005 (gmt 0)

10+ Year Member



I'm currently a Technology Coordinator + IT person in a small school district. First of all every year each student and staff member (including myself) has to sign a school board approved AUP, Acceptable Use Policy, before they even turn a computer on. In the AUP it covers what the penalties are for such violations. This would have been a case for expulsion. Hacking in and stealing some ones assignment is one thing, messing with school records is another.

Let me guess, the IT person probably doesn't have a BACK-UP system either....

ED

jecasc

8:29 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I remember we had to sign such policies too, when I went to university. It always makes me laugh about those bureaucrats that think all you have to do to enhance security is make you sign a piece of paper:

"Oh someone got into our computer system"

"That can not be possible, all users have signed a Acceptable Use Policy."

ogletree

8:42 pm on Dec 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



If this guy had not broken in and just told the school what he found the IT guy should still be fired. If you work for any company and leave the back door open every night for 6 months and was the person who was in charge of locking that door he would be fired.

zootreeves

8:46 pm on Dec 7, 2005 (gmt 0)

10+ Year Member



I fully accept what I did was wrong, but it didn't really do anyone any harm.

This time was only an inconvenience, and the punishment seems to fit.

A minor inconvenience for potentially ruining someone's life. Can't get into another college > can only take 2 A levels > No decent university > No degree > Basically no good job prospects...

This 91 message thread spans 4 pages: 91