Feeds

California high school hackers expelled for grade tampering, test thievery

Where's Matthew Broderick when you need him?

Securing Web Applications Made Simple and Scalable

A group of students have been kicked out of a California high school over charges that they hacked teachers' computers in order to change their grades.

The Newport-Mesa Unified School District said that it had voted to expel 11 students in connection with charges of grade tampering and unauthorized access to teachers' computers.

According to local news reports, the students – all of whom attended Corona del Mar High School – illegally accessed teachers' computers not only to change their grades, but also to steal materials for upcoming tests.

The school board confirmed it had voted in all 11 cases to impose expulsion, the harshest possible penalty for the students, with votes ranging from 4-to-3 to 7-to-0. The school cited confidentiality policies and legal restrictions in declining to name the students involved.

The alleged mastermind in the case, however, remains at large, and some believe his capture could shed light on an even larger scandal.

The district said 28-year-old Timothy Lance Lai is being sought in connection with the case, and is believed to have helped the students access the target computers. Lai is accused of providing the students with key loggers, which were installed on the teachers' systems in order to extract account credentials.

"The Newport Beach Police Department is currently seeking to interview the alleged private tutor for his involvement in the incident," the district said in a statement. "The district is currently involved in an intensive audit of all CdM teachers' grade books so that we can ensure the integrity and accuracy of all posted grades.

"The District has also taken preventative measures and is implementing a new notification system districtwide to flag grade changes."

According to documents posted by the Orange County Register (no relation to El Reg), some administrators believe that the district is trying to cover up a larger scandal that could involve as many as 150 additional students.

"I would warn any parent who hired Tim Lai to be prepared for the inevitable," wrote administrator Jane Garland.

"Or probably not, because I believe the system is willing to allow these 11 students to take the fall and close the book on this matter."

Local newspaper the Daily Pilot noted that academic pressure at Corona del Mar, a school well regarded for the success of its students, could well have played a role in driving the students to resort to hacking in order to boost their grades.

John Hawes, a security researcher writing for the Sophos Naked Security blog, noted that while school networks are traditionally difficult to secure and maintain, certain measures could be put in place by IT staff to prevent such incidents in the future.

"Something as simple as different user rights for students and teachers is probably not enough," Hawes wrote.

"It might make more sense to block all access to test and grade data from terminals accessible to students, and provide teachers with access to a segregated network section, ideally from systems in off-limits areas." ®

Mobile application security vulnerability report

More from The Register

next story
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
LibreSSL RNG bug fix: What's all the forking fuss about, ask devs
Blow to bit-spitter 'tis but a flesh wound, claim team
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
NUDE SNAPS AGENCY: NSA bods love 'showing off your saucy selfies'
Swapping other people's sexts is a fringe benefit, says Snowden
Own a Cisco modem or wireless gateway? It might be owned by someone else, too
Remote code exec in HTTP server hands kit to bad guys
British data cops: We need greater powers and more money
You want data butt kicking, we need bigger boots - ICO
Crooks fling banking Trojan at Japanese smut site fans
Wait - they're doing online banking with an unpatched Windows PC?
NIST told to grow a pair and kick NSA to the curb
Lrn2crypto, oversight panel tells US govt's algorithm bods
prev story

Whitepapers

Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.