Therein lies the conundrum. How would the student know the exploits exist without exploiting them? Rarely can you finger for an exploit, unless you have a test system. You're judging that the kid was unethical. Clearly the kid was morally driven. While he could have approached the situation differnetly, the school should not lie, nor should it villify him.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/829/2644#2644