Interesting ethical question

[rapunzel111]

Hi,
last year at my sons school, a student put a virus into the network disabling the network. he then wrote a security programme which was adopted by the school. Now i think that ws a better way to use his talents . Unfortanately there there was a big hoo and cry form other parents saying he shouild have be expelled and even worse a group who felt that the ITP programme be suspended and use of internet(apparantly used code found on net) at school banned to avoid a simailar thing happening again.

would be interested to hear your thoughts as it proffs and parents.

thanks
Bee

 

[AnanthaP]

(1) Any network that serves a group should be professionally managed with the right level of published, publicised and actionable policies. Just because it's a school, script-kiddies shouldn't be allowed to fool around with the system.

End

 

[sleipnir214]

I'm curious about what kind of code review went into the security program this wackadoo wrote. If he's willing to release virii on the school's network, who knows what kind of backdoors he's installed in the security app?

It's pretty apparent to me that your son's school has absolutely no idea what computer security is.

Want the best answers? Ask the best questions:

http://www.catb.org/~esr/faqs/smart-questions.html

TANSTAAFL!!

 

[CajunCenturion]

The needs for the school to update its security awareness and practices goes without saying. It would be nice if they could hire a professional network manager, but that may not be budgetarily possible, at least not full-time. Is this a single school, or is it part of a school system where several schools can share an administrator?

In any event, that does not address the disciplinary actions against the student. Before addressing that issue, there are two question that come to mind. First of all, how old is the student, and what grade is he in? Secondly, are there any applicable school rules in place? And even then, I don't think this is the place to discuss the disposition of the student. However, regardless of how talented your administrator may be, students may still find ways into the system. And whereas I do not believe we should discuss what is appropriate for the culprit, it is necessary that something be done to set the precedent that the school will protect its IT program from nefarious activitity from within and without.

As far as shutting down the program, if the school cannot run the program in a safe, educational manner, then perhaps suspending the program until such controls can be put into place may in fact in the best interests of the students, and the school. Certainly don't want to cancel the program, but a temporary suspension of the program until any systemic problems in the program have been addresses is not necessarily an unreasonable course of action.

Good Luck
--------------
As a circle of light increases so does the circumference of darkness around it. - Albert Einstein

 

[Grenage]

If I run somebody down but then publish a paper on how we can reduce pedestrian hit and runs (drastic I know) do I get off scott free, I think not.

There are far too many script kiddies about who simply download trojans and Virii and install them anywhere they can, simply because they can. Script kiddies also know very little about computers because if they did, they wouldn't be script kiddies.

Personally I would have expelled the student and reviewed security, but this is as you say one for the ethics forum.

 

[venkman]

I agree with the action the school took. If we're talking about someone who is younger than 18 they are still impressionable enough. The student has obvious interests in computing and this should be fostered. Expelling him would only encourage him to be an outcast. Guiding him towards the appropriate use of his talents is a much better solution.

Slepnir, good point about the code review. A teacher should go over it.

Cajun, another good point about shutting down the network temporarily. However, I'm not sure if it's a possibility. In order for the network to come back up you will need someone to secure it, leading to the budget problem. Since having computer/internet access is absolutely neccessary for education these days, I'm not sure what a solution would be for that.

As far as equating a school's intranet going down and getting hit by a car, Grenage I think you should experience both and compare them for me. Once you do that, let me know if you think the solutions should be similar. If you want I can borrow a car for the experiment.

-Venkman

 

[sleipnir214]

venkman:
The crash of a school intranet may not be as traumatic as a car crash. But how about as traumatic as a divorce?

http://news.com.com/2100-1011-5056446.html?part=dht&tag=ntop

Want the best answers? Ask the best questions:

http://www.catb.org/~esr/faqs/smart-questions.html

TANSTAAFL!!

 

[jrbarnett]

Do the schools actually need internet access in the classroom? In a local school yes they have a LAN, but there is no internet connection apart from machines in the staffroom.
The only student accessible machine with internet facilities is in the library - where a 56K modem connection is used, the librarians can supervise its use and the dial up password is only known to library staff.

There is no need to have it school wide - the educational and office software they run don't need it. Doing this avoids the need to police internet usage during the classroom when there is no physical possibility of accessing it.

John

 

[venkman]

Yeah, I agree with John. I'm not sure whether limiting it to a 56K modem is neccessary, but I do think that supervised use in a library setting is the right way to go for internet usage.

However, I'm not sure if this solves the problem. A malicious user could probably still download a script and get it over to another pc no problem, not like a lot of librarians no what to look for. Not too mention the kid could just transport the bad files via floppy. The problem is that more security needs to be on the individual machines.

-Venkman

 

[FSM]

NO THEY DON'T need internet access in the classroom. It's overrated. They used to teach with books remember????? A lot of stupid ideas (tragedies)have dispense from bad usage of the internet


FSM

 

[venkman]

FSM-

You seem to be comparing two extreme positions. It need not be books or internet. Why not both? The internet is very often a more efficent way of doing research than books. However, there are plenty of cases where a book is better.

-Venkman

 

[Grenage]

venkman,
True it's slightly worse perhaps but as enthusiastic about causing trouble the student may be, but he still should be in big trouble. Nothing to stop him giving out a security plan without wasting peoples time and money, the best way to expose a problem is not always by taking advantage of it.

Regardless I find it unlikely the student's plan is worth its salt.

FSM,
The internet is a fantastic research tool, so easy to get distracted by something and read about another topic though.
Books are great, but the internet has it's place in the classroom too.

 

[jwenting]

That kid should have not just been expelled, charges of vandalism should have been put against him.

As to internet in the classroom, it's highly overrated.
Books serve as well. Maybe one or two PCs with internet access might be of interest to enhance the school library and maybe internet access in the computer class will be useful as well (but with the ability for the teacher to turn it on and off to prevent pupils from surfing the net instead of paying attention to lessons).