Published: 2005-10-21
Names, ID numbers, test scores and more were accessible by using the teacher's username and a generic password set by the district. The system has since been shut down, following a call by a reporter to the administrators informing them of the flaw.
A statement by the California school district's chief counsel to the San Francisco Chronicle suggests that other districts may have similar problems. Stories of lax password security at schools -- such as the case of the Kutztown laptops -- are becoming increasingly common.
At a time when two-factor authentication is entering the spotlight, perhaps areas outside of banking would be wise to evaluate their security needs as well.
Posted by: Peter Laborge
