Update: Student’s Expulsion Exposes Computer Science Culture Gap

A Dawson College computer science student discovered a SQL injection vulnerability in the Omnivox student portal while developing a mobile app and performed a vendor-authorized scan on a test server; the college expelled him for 'unprofessional conduct,' sparking debate about responsible disclosure and the gap between academic CS education and real-world security practices. The flaw could have allowed access to student and staff accounts containing PII, vendors and outside experts weighed in, and the incident highlights tensions over ethics, testing practices, and how institutions respond to security research.