Student Exposes Gaping Hole In Software, Gets Expelled

A 20-year-old Dawson College computer science student found and responsibly disclosed a critical flaw in the Omnivox student portal that made it possible to access other users' accounts by predicting account IDs. After the vendor and college were notified, the student used a public web scanner from home to verify a fix and was subsequently disciplined and expelled by the college amid disputes with the vendor; no public evidence of exploitation was reported.