Dawson College student expelled for vulnerability scanning
expelled from Montreal’s Dawson College for exploiting a flaw in Omnivox which is part of CEGEPs (General and Vocational Colleges) a shared system of Quebec colleges. The exploit potentially could exploit over 250,000 students’ personal information. Mr. Al-Khabaz and colleague Ovidiu Mija initially reported the flaw to Director of Information Services and Technology François Paradis who congratulated them but two days later Mr. Al-Khabaz ran Acunetix, a website vulnerabilities scanner, “to ensure that the issues he and Mija had identified had been corrected.” At this point, administration of Dawson College felt this was a cyber attack on their administrative systems and expelled Mr. Al-Khabaz for a “serious professional conduct issue.”]]>