Student Charged With Three Felonies For Finding Security Flaw — and Report

Well, yet another teenage hacker who "did the right thing" by reporting a security flaw is being punished for his actions. Although it definitely sounds like the whole story may not be in the clear yet, a 15-year-old New York high school student has been charged with three felonies claiming that he accessed a file containing social security numbers, driver's license numbers, and home addresses of past and present employees ... and then sent an anonymous email to the principal alerting him to the security flaw. "All that was needed to access the information was a district password. School officials have admitted that thousands of students, faculty and employees could have accessed the same file for up to two weeks."

Comments

Bizarre Anti Virus behaviour

[MichaelSmith]

Sorry for the offtopic post but I wonder if anybody has seen this behaviour:

On several linux workstations at work we noticed several other nodes on our LAN had been trying to get in via rsh, telnet and ssh. Typically the remote node tried several protocols over a second or so, too fast for a user to be doing it.

I called our IT people. They identified the windows boxes which generated the connections, pretty much as expected so far.

Then the weird bit. They claim that their virus scanner was the application trying to log on to the linux boxes. All very strange. Has anybody else seen anything similar?