Slashdot Mirror


Kutztown Students get Felony Charges

gone6713 writes "The 13 students from Pennsylvania who were accused of hacking the iBooks provided to them by the school (Slashdot had a previous story on them back in June) have offically been charged. It seems that the admin passwords were taped to the back of the iBooks!"

18 of 825 comments (clear)

  1. Human error by bigwavejas · · Score: 4, Insightful
    "It seems that the admin passwords were taped to the back of the iBooks!"

    You know, I'm really not surprised to hear this. Despite all the precautions companies/ institutions take, it's typically human negligence or social engineering that leads to many compromises. While doing a spot check of security at work, I was surprised to find many employees had taped their passwords to the bottom of their keyboard or mouse.

    Rule#1 make sure your users (employees, admins, etc) understand the importance of confidentiality.

    --
    "Simplify, simplify, simplify!" Thoreau
    1. Re:Human error by TykeClone · · Score: 4, Insightful
      Rule #2 - have a sane password policy

      Forcing people to have different passwords for different systems that change on different timetables is just asking for them to break Rule #1.

      --
      A fine is a tax you pay for doing wrong and a tax is a fine you pay for doing all right.
    2. Re:Human error by Urchlay · · Score: 5, Insightful
      Instead, they wanted me to use the AUTOEXEC.BAT batch file to launch the menu system rather than a menuing application started directly on bootup. Why? So that they could watch and see who hit CTRL-C at boot to exit the batch file.

      When I was 11 or 12, in public school, we got computers (TRS-80 CoCo's, which dates me I guess). The first day we had them, the teacher told us to turn them on, then don't touch anything until she told us to...

      Well, I turned mine on, and the monitor just showed a black picture. So I turned up the brightness (it was down all the way), and fixed it. It never occurred to me that "don't touch anything" included the brightness control; I'd had one of those on my TV for as long as I could remember. I thought she meant "don't type anything"...

      So I got suspended from school for a week. For turning up the brightness. Looking back on it now, I can see that I deserved *something* for disobeying a direct order... detention perhaps, or losing computer privileges for a week...

      Of course, back then I thought of being suspended as a great vacation. I got to stay home and play with my computer (Atari 400, which I liked better than the CoCo anyway).

      The thing was, when the teacher saw me tweak that knob, the expression on her face was one of *terror*. Not surprise, or anger... Utter, abject fear. I can only assume it was the machines she was afraid of, not me (I was big for my age, but not known for beating people up, especially not teachers).

      Then and now, the teachers and administrators probably resent having to have the computers at all. They don't understand computers (well, OK, most people don't), but they *do* understand that the kids know more about computers than they ever will, which makes the adults feel like they're not in control. The type of person who becomes a school administrator is the type who hates being out of control, so they use (or abuse) their authority to make sure the kids are too terrified to step out of line.

      Not too long ago, I did a contract job for a school system, setting up routers and proxy (censoring) software. One day the boss (former English teacher who was put in charge of the school's IT dept) asked me what I was doing, so I told her. I don't remember exactly what I said, but it was probably something like "I'm installing Apache so you can use this CGI script to configure your whitelist and blacklist for the squid proxy". Her response was, "Don't use all those technical terms with me! How would you like it if I used educational jargon when talking to you?"

      It almost made me crack up laughing... but she was dead serious. So I calmed myself, and I told her (and not in a smart-assed way either): "Well, if you used words I didn't understand, I'd ask you to explain them. You're a teacher, so you're probably pretty good at that. I was trying to communicate with you, not confuse you, so tell me what I said that you didn't understand, and I'll try to explain it."

      She got *pissed*. I mean red-faced, white-knuckled, and shaking. She stormed off...

      A week later my company was officially fired from that contract (possibly *only* because of that incident, but probably not: we were behind schedule, partly because we kept having explain basic networking concepts to the school's IT employees, who were supposed to be supervising us). Since then, I've avoided public schools like the plague, and been happier for it. If I ever have kids, there's no way I'd send them to a school where people like that English teacher have authority over them.

      If these "hackers" were my kids, I wouldn't punish them, but I would take them aside and explain that the mundanes are terrified of them, and ask them to hide their brains when in such company. I'd tell 'em not to worry, the cream always rises to the top... I'd also send 'em to a good private school, even if it meant a second or third mortgage on the house.

  2. Taped? by AdamReyher · · Score: 5, Insightful

    While the students should face some kind of consequences, in my opinion, the sheer stupidity puts this at the fault of those "victims" rather than the students.

    --
    The Computations of AdamR
    http://www.adamreyher.com
  3. Surely the best route of action... by Satorian · · Score: 5, Insightful
    Yup, just go ahead and charge them for curiousity and doing something perfectly natural.

    Make sure to slap the hungry monkey's wrist that sees a stick next to an ant hill. Does wonders for intellectual development on a macro- and microscale.

  4. Hack? by Doc+Squidly · · Score: 5, Insightful

    Really, can't we get the media to stop using the work Hack in this way? Finding a password taped onto a notebook isn't hacking.

    Sure, they may have used the computers in way which they shouldn't but, they didn't have to hack them.

    I know, I know... the average Joe couldn't tell the difference between anything remotely technical but the media shouldn't be encourage it.

    I think I'll go let Windows Hack into my neighbor's unsecured wireless access point.

    --
    I think I think, therefore I think I am.
  5. More than just using the taped password by Cerdic · · Score: 4, Insightful

    From the article:

    Now that's not the only thing that the kids are accused of doing, they also turned off the monitoring software (Apple Remote Desktop?) and even used it to monitor the admins. In addition, they're accused of using hacking tools to find the new admin password when it was changed from the password that was taped on the back of the machines.

    Also, if you click on the little update link at the bottom of the story, you'll see that the kids were also found to be downloading pornography. Might sound innocent to some of you, but adults / the school can get in trouble for "allowing" them access to X-rated material.

    Now, a third degree felony sounds harsh, but they still need some punishment. If they had stopped at using the password taped onto the back of the computers I'd feel sorry for them, but they were spying on admins and using other means to get the password once it was changed.

    --
    Advice for my fellow geeks: before seeking out that threesome you dream of, you might see what a TWOsome is like first.
    1. Re:More than just using the taped password by stevew · · Score: 4, Insightful

      yep - the other little detail folks are not mentioning here is that the kids used some sort of rootkit equivalent to find the password AFTER it had been changed.

      Doesn't that qualify for breaking and entering?????

      These kids aren't angels...and whoops - there was consequences for their illegal actions..oh and to make sure everyone here gets that. These kids committed a crime. They KNOWNINGLY violated the machines by using the admin password they weren't suppose to have. Look - if I leave my house unlocked, does that make it any more wrong for someone to enter and start taking my things?

      The other issue is that these are still kids, and if they're under 18.... it isn't on their permanent record. If you guys are constantly going to make excuses though about oh- it wasn't that bad, then the rest of the rules of society might as well fly out the window as well.

      --
      Have you compiled your kernel today??
    2. Re:More than just using the taped password by _Sprocket_ · · Score: 4, Insightful
      These kids aren't angels...and whoops - there was consequences for their illegal actions..oh and to make sure everyone here gets that. These kids committed a crime.

      You're right. Hardened felons, all of them. Criminals. Malcontents. Society can't possbily function with these kinds of challenges to authority... much less the status quo. Fly out the window, indeed! Thankfully, this kind of spirit has been identified early and, we can only hope, properly quashed. The last thing we need is any of the kind of insanity that lead to the shennanigans in Silicon Valley.
  6. This is only the beginning... by UpLateDrinkingCoffee · · Score: 4, Insightful

    in our increasingly vengence based culture. Some principal or admin got his feathers ruffled that student's would actually use the passwords taped to their computers and is now on a rampage to bring them into submission or destroy their lives. I'm surprised they haven't been labeled terrorists by now. This goes way beyond this school district... witness the proliferation of "no tolerance" policies. Everyone makes mistakes, especially teens... we as a society should be focused on correcting mistakes and giving people the chance to learn from them. It's only those who refuse to recognze they made a mistake or continually fail to learn from them that need to be dragged in front of the courts.

  7. At what point does "Hacking" begin by OeLeWaPpErKe · · Score: 4, Insightful

    And "looking at what people give you" stop ?

    I'd assume they'd WANT me to know the admin password if it was taped to the back of the laptop.

  8. This is obviously what the parents want by keraneuology · · Score: 4, Insightful
    If not a single member of the board of education loses the next election over this then I will chalk this up to this being the will of the people and forget about it.

    Whoever taped those passwords to the back of the computers needs to be fired. Whoever gave that person a job needs to be fired. Whoever has the authority to demand that the people above must be fired immediately but hasn't needs to be fired.

    But this isn't happening. Rather than start demanding even a fleeting glimpse of intelligence within the public schools the parents simply get together and whine that the people they voted for have their heads so far up their rectum that you can't distinguish a fart from a whistle don't engage in sphincter-yoga.

    Yes, there is the possibility that these parents didn't vote this particular schoolboard (and mayor , who allowed this particular police chief and DA to make such stupid decisions), but I'll hedge my bets and say that either they voted for them or didn't vote at all.

    Are they demanding the resignation of the board? No.

    Are they demanding the resignation of the DA? No.

    Are they even promising to vote for somebody else in the next election? No.

    So if they don't care enough to actually DO something about the situation, why should anybody else?

    --
    If the g'vt kept the data on you that google does you'd better believe you'd be calling it "doing evil"
  9. abusing admin account was only the beginning by erroneus · · Score: 4, Insightful

    It was one thing to essentially commandeer borrowed government property. (It doesn't matter if they negligently made the key available for use or not.) They also went about expanding their control first by blocking the admin's ability to monitor then by breaking into the admin account again... it was not taped to the computer the second time.

    Afterward, they went on to monitoring the admin.

    This is their defiance of authority and that's the message here.

    On one hand, I think it's "harsh" what is being done to the kids -- I really do. But there's a larger picture here that should be acknowledged.

    How many times have you been completely and utterly insulted by children who know there's nothing you can do about it. That is, in essence, what has happened here. When it was realized that the kids were breakign rules, they were essentially given the chance to straighten up when they were discovered and their admin passwords changed. The kids responded by being even mroe defiant and even aggressive about it.

    We have a cultural mess on our hands. I'm just sick enough of defiant children to endorse the reaction we are seeing here. You can't spank children any more. Somehow it became a crime. You can't even talk "mean" to them -- it's somehow psychological abuse as well. As a culture, we cannot control the children. And it's clear that most parents will not regulate their offspring as well... (at least without fear of criminal problems much of the time)

    I have two sons of my own and at the moment, my biggest problem is getting them to tell the truth. I haven't seen evidence of anything worse... not yet anyway. Respect for authority is a critical lesson in life that needs to be learned. If we have to make 13 examples of these kids, then so be it. It could help in changing the path for millions of other kids out there... kids that will one day grow up and lead this world. And if you think I'm over-reacting myself, look around you at the many "adults" out there who are early evidence of the things to come... people who never actually grew up and took responsibility for themselves. Examples are not hard to find.

    Respect, in general, should be restored as a key value in our culture and at the core of respect is fear of what might happen if you don't.

    1. Re:abusing admin account was only the beginning by Anonymous Coward · · Score: 5, Insightful

      I completely agree with you that our culture has an issue with young people growing up irresponsible and disrespectful. I am 18 myself, and I am regularly disgusted and appalled by the behavior of my so-called "peers" and other young people.

      However, I disagree with your assessment of how to respond to the issue. Over and over again you are talking about "controlling" children - about "respecting authority". You bemoan the demise of spanking and complain that you can't "talk mean" to kids.

      Now, I am not a psychologist nor have I studied child rearing - as I said, I'm only 18 myself. But what I would like to suggest, for whatever it is worth, is that respect isn't something that is instilled by control. It's something earned and taught. My parents never tried to control me and my siblings. We were never spanked, punished, or yelled at for things we did "wrong". Rather, they gently explained our error and, if necessary, had us make amends. Our parents raised us with respect for *us* - and helped us learn to respect others as well, by being living examples. I am not saying this approach necessarily works with all children (or all adults - some of y'all need to to think about the example of respect you're setting!). But I was dismayed by your advocacy of what is essentially parental authoritarianism, and I felt that a counter-example might be worth writing.

      I would also dispute your statement that Respect for authority is a critical lesson in life that needs to be learned. Why? I agree with you that respect is an important lesson, but I would argue that respect should simply be for people and for property in general. Why should we respect authority? Teach kids to think for themselves, and educate them in moral principles so that they can make responsible decisions in their own right.

      In closing, your post states:

      Respect, in general, should be restored as a key value in our culture and at the core of respect is fear of what might happen if you don't.

      I cannot say loudly enough how much I disagree with that. Respect isn't about fear at all. It's about doing what is right. It's about holding others in high enough esteem to want to treat them well. Heck, the good old "golden rule" is a simplistic but reasonable enough definition of respect - treat others the way you'd want to be treated, set their rights equal to your own. But fear of retribution? Where is the moral strength in that?

      My 47.5 cents.

    2. Re:abusing admin account was only the beginning by canadian_right · · Score: 4, Insightful
      A reasonable punishment would be to take away the laptops.

      If the kids won't follow the rules then take away the toys. If they are flounting the school rules then use one of the normal school punishments to deal with it. Even after repeat offensives of this type the school and parents should be able to deal with it without resorting to trumped up charges of "hacking". This is the school being vindictive.

      --
      Anarchists never rule
  10. And still extreme overreaction by tkrotchko · · Score: 5, Insightful

    "They were punished multiple times and they still continued to do it."

    So a rational adult would simply take the laptop away from them. Either play by the rules or take it away.

    To me, this is the equivalent of sending your kid to reform school because he talked back one too many times. Its overreaction and really, its an admission of failure by the school authorities.

    Everybody in Kutztown should be ashamed of themselves.

    --
    You were mistaken. Which is odd, since memory shouldn't be a problem for you
  11. You want to wake up by Darkman,+Walkin+Dude · · Score: 4, Insightful

    You want to wake up, son. Lets put this in context, shall we? We are talking about a felony, that is entering children into the criminal justice system because the school admins didn't have clue one about how to secure their own systems from... children. The mini emporers in academia need a taste of their own medicine. Honestly speaking, a previous poster pointed out that taping the password to the backs of the computers was tantamount to incitement and solicitation of a minor. I wouldn't just use it as a threat though, I'd go afer the little hitlers until every man jack of them had spent a few months trying out the local prison facilites. Such irresponsible and knee jerk reactionists should under no circumstances be educating children.

    Don't get me wrong, I know some kids are wretched creatures that shouldn't be in general education, but in this case I think an example does need to be made. Of the so called teachers.

  12. Looking back on it....I can see that I deserved... by Generalisimo+Zang · · Score: 4, Insightful

    Looking back on it now, I can see that I deserved *something* for disobeying a direct order... detention perhaps, or losing computer privileges for a week...

    No. You deserved no punishment whatsoever for turning up the brightness on a monitor that had the brightness all the way down. Making that sort of adjustment is common sense.

    In fact, anyone who would suggest that displaying common sense is a crime, or that military-type jargon such as "disobeying a direct order" is something that we should be using to educate school children, is not thinking correctly.

    In fact, the whole idea that public schools should be run like a semi boot-camp type environment, with "direct orders" and "zero tolerance policies" and a complete and utter disdain for individual creative thinking, is just plain wrong.

    I was in the military for many years, and I know exactly what military-style training can and can't achieve. It's excellent for turning out people who will do things EXACTLY as ordered, and PRECISELY according to a pre-determined plan. It's really not that great at teaching creative thinking, or instilling a system of personal ethics that aren't imposed by an outside authority. It's great for cranking out infantrymen, and pretty darn awfull for instilling any sort of American democratic and egalitarian ideals.

    Heck, if the teacher in charge of that class had bothered to do her jo, and pre-check each machine and each monitor before class to ensure that the basic settings were correct, then the problem wouldn't have arisen in the first place. Oh, but wait, that would require people in positions of petty authority to take RESPONSIBILITY for their own actions.... definatelly a part of the military tradition that school authorities would want to run from like the plague ;) I mean, making KIDS be responsible for their actions is cool, but actually holding teachers and administrators to the same standard? Heh.. it'll never happen.