Security gaps exploited in grade scandal remain, may be difficult to close

Washington Post: Montgomery County school officials have not yet closed gaps in their computer system that allowed students at a high-performing Potomac high school to change dozens of grades using a device that can be bought from Amazon.com for $69. And other school systems, including Fairfax County, remain just as vulnerable, school officials said Tuesday…. At least eight students at Winston Churchill High School are believed to have used the readily available device to obtain teachers’ passwords for the school system’s grading system. … Computer experts said that Churchill teachers were lucky to catch the students. Just about every school system that protects its teachers’ data with a simple username and password is vulnerable, experts said, and accessing a teacher’s computer files is extremely common. … “That’s the first hack that every kid who becomes a criminal has done,” said Alan Paller, director of research at the SANS Institute, an information security group.

Read more …