Montreal student expelled for finding security breach in school portal

IFA 2012 Consumer Electronics Trade Fair

A computer science student from Dawson College in Montreal says he was expelled after he discovered security gaps in the college’s online student portal that exposed personal information that included social insurance numbers and transcripts of more than 250,000 students in Quebec.

Hamed Al-Khabaz, 20, said he came across flaws in the software used by the college while he was trying to create a mobile app that would give students easier access to their school accounts. As he probed into the portal used by students in Quebec’s CEGEP program, he found that by simply exchanging student numbers in the encrypted links, he could access information such as SIN numbers, transcripts and home addresses.

Read more here

About canux
© 2013 CyberTRAX Canada - All Rights Reserved.
Sponsored by C3SA Corp.