http://timesunion.com/AspStories/story.asp?storyID=732745
So basically to give you a summary of the article, a boy "hacks" or walks through his school's "excellent" security system, and then e-mails the principal telling him that the security system was terrible. His principal then got the police to arrest the kid for "trespassing” unlawful possession of personal identification information and identity theft, all felonies.
What is going on here? The kid might as well have taken all of the information and sold it online. Both would end him up facing felonies in court. There is excellent teaching going on at this school. If a 15 year old kid breaks down your horrible security system, wouldn't you want to know? Don't shoot the messenger. It sounds like to me that the principal of that school is a hot head and it boggles my mind how someone could get in position to teach people when they are so ignorant themselves. The kid deserves a reward, not a jail sentence. I thought honesty was the best policy? Well that's thrown out the window.
The only way this would be different is if the kid sent an e-mail saying "Hey, I can hack into all your goodies, how much money are you going to give me for me not to say anything?" The story doesn’t say what his e-mail said. I'm sure it wasn't something harsh. If you’re smart enough to hack into a computer security system, you’re smart enough not to send an e-mail (from your e-mail address, or home ip, saying you want money). "The student charged has a history of computer mischief but likely was not interested in stealing personal information"
http://www.shenet.org/ is the website of the school and says "Posted 10/23/08
About
In the meantime, the district's Information Services Department (IMS) began to investigate and discovered that two high school students had accessed the file from an internal computer using their student password. Due to a configuration error, this file was not completely secured from student password access after being moved to a new server. IMS was able to determine that this was the only district "data” file that was impacted from this configuration error and accessed by these individuals.
The district takes great measures to secure our data and this breach is extremely troublesome. Once the investigation is complete those responsible will be punished according to our code of conduct and subject to possible criminal charges.
We will have reviewed our procedures and IMS has written an application that proactively reviews folder security permissions on all system folders. This will be run as part of the current IMS protocols for the routine system security and integrity process." This doesn’t even inform the website readers how the kid e-mailed the principal instead of proceeding to steal the information. This is horrible.
http://i300.photobucket.com/albums/nn15/thetruthtellerwithdangeleyes/HONESTY/honesty-3.jpg