Slashdot Mirror
Stealing Laptops For Class Credit
First time accepted submitter core_tripper writes "Students at the University of Twente have stolen thirty laptops from various members of the university's staff. They were not prosecuted for this, so they could just get on with their studies. Indeed, these students even received ECTS credits for these thefts. UT researcher Trajce Dimkov asked the students to steal the machines as part of a scientific experiment. Stealing these laptops turned out to be a pretty simple matter."
Two relevant anecdotes from when I was in college:
1) In an artificial life course we got to propose our own semester project. One guy wanted to write a worm, but the professor was afraid that his tenure would not be enough to protect his job if the worm got out of hand.
2) One faculty member that taught a computer security course used to make the offer that anybody who could successfully access his gradebook and change their grade could have the higher grade. He stopped doing this after students switched from trying to electronically break in to just casing his house.
Suppose one of the students followed his friend around to see how he stole a laptop, and then later copied the method? Would he get credit, or be marked down for plagiarism?
That's an odd name for a dog.
They can take my LifeAlert pendant when they pry it from my cold dead fingers.
This sounds like Pwn2Own taken to the next (and otherwise illegal) level .
They did not do anything illegal. They technically didn't trespass, they had prior permission from the University Security office. And they technically didn't steal anything but loaner laptops that had been loaned out to staff for the express purpose of this experiment.
The only reason you think they might have done something illegal is because of this phrase in the summary: "They were not prosecuted for this, so they could just get on with their studies." And the fact is, this sentence is just poorly worded (by the original non-native English author), and they were not prosecuted for this, not because of some weird altruist reason given by the University. The real reason they were not prosecuted is because they were given prior permission to do this experiment by the University Security office itself (and furthermore, the laptops they were stealing had been supplied by the grad student who wanted them stolen in the first place).
So in all regards, this seems like this was a well executed experiment. And it goes without saying that you should get prior permission before doing any kind of penetration testing or security audit. And ideally, such a permission should be clearly spelled out and obtained in writing, since executives have been known to go back on their word with security auditors once they find out how bad their security really is.
Also note that sometimes, con artists will recruit people to steal things for them under the guise of having them doing a security audit, so if you're going to participate in such an audit yourself, you better be damn sure that the person who's asking you to do such an audit is really the person they're claiming to be (and even if they are, that they're not setting you up for a theft that they've already committed themselves).
Cat's are perfectly capable of learning their own names. They simply don't give a fuck when you use it.
Of course cats can learn their name! How else would they be able to spitefully ignore you?
W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
I assume you mean a citation for the Spielburg anecdote. Unfortunately, it is exaggerated. Read more here: http://www.snopes.com/movies/other/spielberg.asp