Alaskan Middle Schoolers Phish Their Teachers 215
lukej writes "In Ketchikan, Alaska a small group of unidentified students gained access to school owned computers by using phishing techniques on their teachers. The then used the elevated access to remotely control their peers computers. Fortunately the school administrators seem to have a taken a realistic and pragmatic viewpoint of the situation, although no official punishment has yet been determined. '"Kids are being kids," (Principal) Robinson said, adding that he was surprised something like this had not already occurred. "They're going to try to do what they try to do. This time we found out about it."'" And no one got arrested.
On other news... WOPR has been acting funny (Score:5, Funny)
In related news, the students were found to have changed their grades and purchased airplane tickets.
In other news, the WOPR unit in NORAD is reported to be acting funny. It keeps asking to play games.
Re: (Score:2)
It's sad this is news. (Score:2)
Re: (Score:2)
Hell, we didn't even get in the local paper when we ignited the Thermite we found in the chemistry lab. I'll bet there isn't a high school this side of Kandihar that even has thermite in the chemistry lab. Hell, I'll bet there isn't a high school that even has a chemistry lab, period.
No wonder kids these days are all depressed and turn to drugs and sex.
Re: (Score:2)
Re: (Score:2)
No wonder kids these days are all depressed and turn to drugs and sex
Hey, wait a minute. Don't all the happy kids turn to sex and drugs (and rocknroll) too?
But, back to serious stuff, it is very sad what passes for Chem, and home-chemistry sets these days. By way of comparison, Google around and download yourself a copy of the Golden Book of Chemistry Experiments (or title similar to that). It's full of very cool stuff to do.
Good thing this wasn't in Florida..... (Score:4, Insightful)
Re: (Score:2)
Better to kill or enslave the lower classes while their young rather then disenfranchising them after they've got an education...
Re: (Score:2)
I imagine it's tough to get enough vitamin D for a black person in Alaska.
Difference between Alaska and Florida? (Score:5, Informative)
Aside from the temperature...
Apparently in Alaska you can pull a prank and it doesn't get turned into a life-altering jail sentence and you being labeled a terrorist. Alaska may be the last refuge of what being in the United States really used to be all about. Too bad the terrorists won in the lower 48.
Re: (Score:3)
Plus, in Alaska you get a really sweet view of Russia.
Re: (Score:2)
They weren't immediately arrested, but I think it's a little too early to believe that nothing's going to happen. The principal was obviously downplaying it, but he left the door open for what the consequences will be.
The laws regarding unauthorized computer access are mainly federal laws. I'd be concerned that the local federal prosecutor would decide to take an interest.
Re: (Score:2)
Aside from the temperature...
Apparently in Alaska you can pull a prank and it doesn't get turned into a life-altering jail sentence and you being labeled a terrorist. Alaska may be the last refuge of what being in the United States really used to be all about. Too bad the terrorists won in the lower 48.
Alaskan resident here. If you're looking for a region where terrorists haven't won, I'm sorry to say that Alaska isn't for you. Ketchican has just over 8,000 people, making it pretty rural. In more populated areas of the state (Mat-Su valley, Anchorage), it's not that way at all. I once gained access to the password protected wireless for my school in the Mat-Su Valley with no malicious intents, and was almost expelled from the district because of it. To make things worse, Alaska is one of the only areas o
Re: (Score:2, Insightful)
As a forty year resident of Alaska, I assure you there has been no rational democratic policy here for a number of decades.
Wow.. (Score:2)
OMG! we can't have that! (Score:4, Funny)
logic and reasoning in a schoolhouse, what ever is this nation coming to? this must be stopped!
Re: (Score:2)
What a relief to know that there are non-draconian administrators that can actually administer justice with grace instead of an iron fist.
Re: (Score:3)
logic and reasoning in a schoolhouse, what ever is this nation coming to? this must be stopped!
Unfortunately, in a mad rush to show "we are serious about ..." school boards and administrators pass zero tolerance policies. As a result the stupid as well as they criminal get punished equally. Schools cannot apply common sense, as much as they may want to, because of the rules. Everyone gets all bothered by draconian punishment for a minor infraction but are unwilling to change rules because they don't want to be held accountable for making a decision that someone will second guess. That is not limited
They were easy to catch (Score:5, Funny)
Re: (Score:2)
That probably has a lot of do with it, actually - Ketchikan isn't a huge place, and people end up really knowing each other. Especially parents (since there's probably only one class for the grade). So it wouldn't be surprising if a lot of people knew each other.
You really can't expel them, and the community will provide any necessary punishment above and beyond what punishment is meted out. In small towns, it can easily lead to shunning and exclusion (where the o
Re: (Score:2)
. . .Ketchikan isn't a huge place. . .
But it's not all that small, either. It's the fifth largest city [wikipedia.org] in the state, though areas like Wasilla have a significant population outside the city boundary. The middle school had enrollment of 295 [wikipedia.org] for two grades in 2009, so there are probably about 150 students in each grade.
Both the town and the schools are a lot bigger than where I went to school, so it seems to me that that's more than large enough to get lost in.
Re: (Score:3, Informative)
"Exactly like" (Score:5, Interesting)
Reading in between the lines I suspect it could have looked wildly different, but the teachers were trained to look for some specific text string which the students got to appear in the elevation dialog.
The UAC dialog is designed to look different if a executable is digitally signed to prevent just this sort of phishing attack. Either the school IT screwed up by not using signed tools, or the teachers were not trained on the differences between the dialogs for signed and unsigned elevations.
Re:"Exactly like" (Score:4, Interesting)
If it is the attacker that presents the dialog, they have full control. It's probably not a real UAC dialog (i.e. produced by the UAC process) of course, just an exact copy of it. So they can have it look just like the "digital signed" version or the "unsigned" version or whatever version.
Re: (Score:2)
Presumably, the students learned what this specific text string was and printed it to the screen.
/GASP! Common Sense Reaction (Score:2)
/clap /clap /clap
It's nice to learn that someone looked at curiosity in a common sense fashion rather than the typical spank-down people get for being smart enough to figure things our for themselves.
We did this, too (Score:2)
If you're not using social engineering to get elevated privileges in your middle/high school's computer network, you're not really a computer geek. Of course, we never got caught (although I'm certain that my high school "computer class" teacher was perfectly aware and just didn't care or even approved as long as we didn't actually fuck up the network).
1980 High School Arkansas (Score:5, Insightful)
A chum in my science seminar class hacked into the principal's office phone, so we could listen to him from the classroom whenever we wanted. When it was close to graduation, he got bored and patched the phone line into the school public address speakers, so all day his calls were broadcast in every classroom (they figured it out and he stopped using his phone after an hour or so).
After lunch, the principal called our buddy up to the office. He asked him "Do you by any chance know something about this?" Our buddy said "Yep." Principal said, "Just go fix it and we won't ask any more questions, ok?" He did, and that was that, no call to his parents or anything.
Now in the early 1950s, when my DAD was in high school, they just led a cow upstairs and locked it in the bathroom (Cows can walk up stairs better than they walk down). It's pretty easy to imagine the same kids pulling the same kind of pranks with the technology of the day.
Mod +5 insightfull (Score:2)
Send them home for a day to consider that they cost the school some money to fix the computer. Detention for a week... but thank you for not giving them a criminal record.
pffft, got that beat (Score:2)
Oh come on..... (Score:2)
we did that 20 years ago. Spoofed a Novell login prompt. The first catch was the teacher with the admin rights :-)
But it wasn't that much fun anymore when we were officially granted access to the server a year later.
Don't tell the Feds (Score:2)
A little early to determine whether or not sanity will prevail in the aftermath. The principal's statement indicates that the consequences are TBD.
Also, I thought that most of these computer "crimes" were based on federal laws. Would it be up to the school to decide whether or not to pursue criminal charges?
Alaska phishing? (Score:2)
I always heard phishing was best in Alaska...
Social Engineering FTW (Score:2)
Fishing problem (Score:2)
Ketchican -- a quaint drinking village with a phishing problem.
(Apologies to Homer, Alaska, the "quaint drinking village with a fishing problem.")
Re:Teacher should of been ready (Score:5, Insightful)
Sure, and the teachers should be able to fix the heater when it breaks.
While I support teaching anyone with access to computers the ins and outs of same, expecting your eighth grade teacher to be part security consultant is a bit of stretch.
Re: (Score:2)
Never stopped slashdotters from posting idiotic ideas before though. How about approaching it from the "need only access" approach, and auditing systems periodically for rogue access approach. Probably would cost less too, than training teachers in anti-phishing concepts who only want to teach social studies and math.
Re: (Score:2)
Re:Teacher should of been ready (Score:5, Insightful)
So, Maths teachers should also be tops in history, english, PE, biology, IT... etc, etc ?
Re: (Score:2)
Re: (Score:2)
Re: (Score:3)
At the middle school level? Every teacher should know more about every subject than their students. By high school that may not be a reasonable expectation. But yes, a math teacher should know more about English or history than a 12-year-old.
That said, computers are funny, because that may not properly be a subject taught at the school, and also because of generation gaps in understanding modern tech. It may be excusable now; in a generation it would be as shameful as getting shown up in any other subject.
Re:Teacher should of been ready (Score:5, Insightful)
Yes, you're completely clueless.
The reason why few teachers can handle more than one subject is primarily an issue of training. If you don't train the teachers to teach multiple subjects, and permit them time to learn the ins and outs of teaching it, then you're not going to get many teachers that go to the trouble.
When all is said and done, if you want higher standards, then you're going to have to pay better, do a better job of managing the schools and generally stop treating teachers like crap. There's a reason why the average career as a teacher in the US is only 5 years. By the time they've gotten the hang of it, they're being pushed out the door.
Re: (Score:2)
If you teach a math teacher history, which that teacher doesn't care for you're setting them up to fail and in turn the school is brought down with them.
Re: (Score:2)
If you teach a math teacher history, which that teacher doesn't care for you're setting them up to fail and in turn the school is brought down with them.
If the teacher cares about "math" and not about, oh, *teaching*, then they have already failed. Get rid of them.
Re: (Score:3)
Re: (Score:2)
Your problem is you see it as a job, not a calling. It only works well when it's the latter. I've had plenty of teachers that just show up to do their jobs, and guess what I don't remember the name of a single of them.
You can be a math genius and not have one shred of aptitude when it comes to imparting knowledge on others. To be a good teacher, you need to be good at/interested in *teaching*, which is a discipline all its own. It's not 100% transferable between say math and English, but the better one is at teaching the better one can pick up an unfamiliar subject and teach it.
Re:Teacher should of been ready (Score:5, Insightful)
Nope...
You mean... they remember some of there schooling from back in the day and impart it on their students in non-subject matter as part of typical human conversation?
Man... why do people find the education system so difficult to understand, you're responsible for the kids these institutions are turning out today through your ignorance and unreasonable expectations.
My best teachers specialized in one subject and... ready for this... WERE PASSIONATE ABOUT IT , that's the way to go, not cross-training.
Re:Teacher should of been ready (Score:4, Insightful)
But they should have better computer skills then the students they teach. The point of a teacher is to teach and when the students can out pace them in an area it means they can't.
If you remember what it was to be a child at all you'll remember that children have *lots* of time to get good at this sort of thing. A child who's into computers can spend much more time learning the ins and outs than a teacher who has a job and home life, etc. You can't expect a teacher to always know more than *every* child they teach.
Re:Teacher should of been ready (Score:5, Insightful)
I'm sorry, but that's utter bullshit.
Seriously, I'm a teacher and even though I already know the content, it doesn't let me off the hook for figuring out how to convey that content to a new group of students. For every 5 minutes of homework I assign to the students, that's easily an hour of my time that I have to spend designing the assignment and assessing the results. And that's just if I'm doing a check off that they did it. If I have to actually check the quality in any meaningful way it can take a lot more time than that.
As for knowing less than the student, perhaps if the tax payers would shoulder some of the expense of training and certification that would be more reasonable. As it is, teachers work long hours and have to keep up with their certifications on their own. Expecting them to have time to also keep on top of the subject in areas where students might have interested, is rather unreasonable.
Re:Teacher should of been ready (Score:4, Insightful)
"I would of fired each one of them."
If they taught you grammar like that, I would have too.
Re: (Score:3)
To be fair, his critical reasoning skills are shit as well.
Re: (Score:2)
If they taught you grammar like that, I would have too.
If they taught you punctuation like that, I would have, too.
:p
Re:Teacher should of been ready (Score:5, Insightful)
Sigh, this sort of ignorance is rather astonishing. The average EE makes more than double what the average teacher makes.
What's more, you're only including class time there, schools don't make the lessons for their teacher nor do they do any of the grading. When you have 150 students, even just 5 minutes per student per day adds up quite quickly. It's not unusual for teachers to be at it late into the evening during the year to keep up with the demands of the job.
And we still have to deal with folks like you that have this astonishingly low opinion of us, because clearly we only work when we're at school with students, it's not like we have to prepare new lesson plans each year and grade papers.
Re: (Score:2)
Re:Teacher should of been ready (Score:4, Insightful)
I'm in year 10 of being a teacher, I have a math degree, a music education degree, a masters in instructional technology with certifications in math, music, physics and technology in multiple states. I've had fellowships at Intel, and WestEd. I make 58k per year on 186 work days officially. I have no clue where you got 90k as teacher's salary because my district, and most in the area do not even top out at 90k.
I think you're delusional in other ways as well. It's not uncommon for people to both cling to a single example of knowing better than a teacher to talk about how much smarter they are, ignoring another 12 years of times they didn't know better as well as blaming their own misconceptions on teachers giving incorect information. After I left my PhD math program (admittetly, I wasn't good enough, so if you want to crush me for not being very smart, you can do it there) I went to teach high school and promptly completely botched order of operations in Algebra class since it had been something like 10 years since I had to even think about working with numbers. I'm sure some of those kids are out there today saying "Remember that STUPID teacher we had who couldn't even do order of operations?", while others certainly remember better our use of trebuchets and catapults to measure and learn about projectile motion as an application of quadratics. The point being, you sometimes remember things how you want to remember them, and I'd venture it's more about how much you liked the teacher personally than how good or bad the quality of instruction was.
Re: (Score:2)
You're making 58k for 186 work days. Most people work ~260 work days.
As a maths person, you should be able to deduce fairly easily that you make 'wage equivalency' to someone making $80k or so a year. So OP was a little off but your flat rejection is a bit more off than his misstatement...
Re: (Score:2)
Well you might be the exception to the rule then, my teachers were dumb as dog shit.
That is made quite apparent by your mastery of of the English language.
If I have to work 12+ hours a day when I factor in office time and certifications then I can 100% expect teachers to put the same effort in.
Can you expect that if they are making half or one third of the salary you make, with equivalent levels of education?
I'm not joking when I say that my grade school teachers maybe put in a 8 - 3:30 day, class started at 9 so most of them put in a 8:45 ; 3:15 day including a hour lunch and two 15 minute recess brakes so take another hour and 1/2 off.
Either your teachers were uniformly horrible or your estimation of their work was significantly skewed. In my county, teachers are required to complete a master's degree while they are teaching, in addition to continuing education credits throughout their career. Those things are mandated and if they don't meet the requi
Re: (Score:2)
My first Algebra teacher was uninterested, and my work showed it. My second one was very interested, and my work showed that.
Not one single English teacher I had in high school was the least bit interesting, so I muddled through. But my Geometry teacher was fabulous, my American History teacher even more so, and my Drafting teacher par excellence. My Earth Science teacher similarly. My French teacher was also. these subjects I did well in.
World History was taught by an old teacher who was as engaging as
Re: (Score:2)
Spoken like somebody who has never taught. Summer is the time we have to keep up with our certifications and many of us have to have a second job during the summer because the pay sucks, compared with other jobs that require a similar level of education.
What's more, you never know how your classes are going to react to content until you actually meet with them a few times which could lead to you having to make adjustments to the materials.
I realise that it's easy to make fun of teachers, but the bottom line
Re: (Score:2)
Ah, now I *know* you're talking out of your arse. Your impressions of what teachers do is like a child's understanding of the job.
Teachers are doing a performance all day long. Those performances need preparing, for each and every class. The resultant work of the class needs marking (times 30 pupils). These things don't just happen magically, it's a fairly work-intensive profession.
(Teachers also often seem to have a god-complex and a need to be appreciated by the whole world. I don't get appreciated by the
Re: (Score:3)
Re: (Score:2)
Regular here. Hacked my teacher's computer in high school. I will have a PhD in Computer Engineering next month.
Correlation is not causation, of course, but an interest in "computers" leading to "using computers" and "degree in computers" isn't much or a stretch.
Re: (Score:2)
If a teacher isn't evolving faster then the student then I have no reason to keep them, I can buy some hundred dollar textbooks and do the same job. So again I have no soft heart for a teacher, they need to learn and learn all the time.
In the US and in the state I reside you are certified to teach for a range of grade levels. The higher up the grades you are certified in the more you are expected to be an expert in one discipline. So for grade schools you have a broad certification in Math, English, Social Science because you will teach all these disciplines to your group or students or maybe share with another teacher in the same grade if a more advanced Math class is needed or something. Once you get to the secondary schooling / hig
Re: (Score:2)
Re:Teacher should of been ready (Score:4, Insightful)
Middle school in the US is where you start to see teachers specialize (In elementary school you tend to have a single teacher for the majority of the day and only switch for things like music/gym/etc)
Middle school was when I first took apart my parent's computer, ran up the phone bill connecting to BBSs (as a kid not realizing that same area code didn't mean local), and started learning the ropes about computers by struggling to get the sound working at the same time as other components. (config.sys autoexec.bat, etc)
To expect a teacher, who may have no real interest in computers, to keep pace with the insatiable curiosity of a student 'looking under the hood' is simply not reasonable.
Would you expect the English teacher to be able to outpace a student who picks up an interest in Geology?
When I was 12, I also got really into airplanes, and studied hard to get my pilot's license asap. Would you expect any non-pilot teachers to have more knowledge about FAA regulations than a budding hobbyist?
Re: (Score:2)
When I was 12, I also got really into airplanes, and studied hard to get my pilot's license asap. Would you expect any non-pilot teachers to have more knowledge about FAA regulations than a budding hobbyist?
No but I would expect teachers to have basic operational skills for equipment used for teaching. In the past a 16mm projector was a pretty standard piece of classroom equipment (yes I am old) - teachers were expected to understand how to plug the thing in, load the film, and overall use the tool to project a movie. Now computers are part of a basic classroom - teachers need to have basic operational knowledge of them. They need to understand how to use the educational or presentation software being used. I
Re: (Score:2)
I argue that basic operational knowledge also includes a security component - not complex security, but basic things like "use a password" and "lock the screen".
I would agree that such things would fall into the 'basic operational knowledge' of the equipment, but that amount of knowledge is still far below what would be necessary to secure/monitor a system against even 'entry-level' hacking knowledge. So I think the point still stands, 'Teachers can not be expected to be more knowledgeable than all middle
Re: (Score:2)
It's impossible for every teacher to always have better computer skills than their students..
None of my teachers ever came close.
Re: (Score:2)
Unfortunately, people seem to think that "I don't know computers." is a valid excuse. I could completely understand this back in the 80's, but it just isn't a valid excuse anymore. I don't know how good are bad the phishing was that these teacher fell for, so I don't know if it is legi
Re: (Score:2)
Re: (Score:2)
the only surprise is that it doesn't happen more often.
No, the surprise is that you think it doesn't happen all the time. I worked at a school for a while, and I saw at least a dozen attempts at the fake login hack, and I only saw those that screwed up somehow. I found several by typing CTRL-C before entering my login/password. But if they were smart enough to set up a handler for SIGINT, they would have got me. I found a few more by running "find /users -name '*.c' -print | xargs grep 'Login:'", but that only caught those dumb enough to leave the source co
Re: (Score:2)
Re: (Score:2)
The English teacher obviously gets a pass.
Re: (Score:2)
Re:Alaska (Score:4, Funny)
Well, some can see communists from their house.
Re:Good thing... (Score:4, Funny)
I remember doing this back in 1993. While I didn't use email phishing I chummed up to the network admin and came up for excuses for him to enter his password as I watched him type it in. Created my own administrator account to give myself access to all programs that were restricted to students. Mostly so I'd have free access to the few games they had on the network :) They never knew.
I still remember the password too: "ersm" - ever so secure.
Re: (Score:3)
Re:Good thing... (Score:5, Funny)
One time I was sent to the Principal's office and while waiting outside, his secretary left the room. I pull out one of her drawers and sure enough the password to the school's grading computer "PENCIL" was right there. I used it to change some of my grades...
;)
Re:Good thing... (Score:5, Funny)
You must have gotten a computer. I got a car.
Re: (Score:2)
Re: (Score:3)
I thought of doing that but then I thought that was a sure fire way of getting caught - no one would believe I got good grades.
Re: (Score:2)
Re: (Score:2)
Not at all...he even got into the good graces of a really cute girl in his class when he changed her grades too.
I think later on tho....he moved, and changed his name to Ferris.
Re: secretary's drawers (Score:3)
You pulled out the secretary's drawers? So was that your first time with an older woman?
Re: (Score:2)
Sure! How about "Global Thermonuclear War?"
Re: (Score:2)
*shrug* back then it would've taken 10 years to crack that anyways.
Re: (Score:2)
HEY!!! Why did YOUR school have computers in the seventies, and all MY school had was electric typewriters?
I am curious though - where did you go to school? My school system was considered pretty wealthy, but we had zero computer access. I mean, zero. The most computer-like device on school grounds were Texas Instruments scientific calculators!
Re: (Score:2)
I remember doing this back in 1993. While I didn't use email phishing I chummed up to the network admin and came up for excuses for him to enter his password as I watched him type it in. Created my own administrator account to give myself access to all programs that were restricted to students. Mostly so I'd have free access to the few games they had on the network :) They never knew.
I still remember the password too: "ersm" - ever so secure.
Ah, good times. Back in my day we did it by bootdisking one machine, swiping the password file and then running l0pthcrack against it; and lo and behold the local admin password on every machine was the same, and it matched the domain admin password too. We used it for everything from installing games to snooping on other user's work files. The password was only 6 chars, easy work for even a slow computer from 15 years ago. Its funny how those memories stand out, eh?
Re:Good thing... (Score:5, Interesting)
The last high school I supported, they had the brilliant (BRILLIANT!) idea of teaching programming using Turbo Pascal. And they included the network libraries in it.
Using Novell, the school suffered an escalating fight with the kids. First they faked a login screen. then they hacked the GINA and got it installed on all the machines in the lab. Then they ran a password sniffer at boot.
Then I convinced the administration to let me use the same techniques. Installed some boot time code to catch these nasties, searched and found the source code, and identified the miscreants. We applauded their efforts, hired one on as a part-time assistant, and warned the others that future incidents would result in escalating punishments. One did get back into school, but the others were banned from the lab for their junior year.
Next semester we deployed ZenWorks, images, and a lot of policies. No matter how they tried, if a station was logged in with a staff ID, the screen bakcground was red. Easy to spot.
Pretty talented kids. Their escapades getting browser access kept me busy for a few weeks. Fun times.
Re: (Score:2)
Re: (Score:2)
Those were never problems introduced by us. Teaching programming with network libraries was asking for trouble. Not that Windows Server 2000 was safe from them either, but the three that re-wrote the GINA received my full measure of wrathful judgement. I nearly told the administration it was them or me. Didn't come to that, one of their parent was savvy enough to understand.
Re: (Score:2)
There's hope for us yet!
It's amazing they weren't arrested and tagged for the rest of their lives with felony records. That seems to be the present day, "American Way", destroy as many lives as possible and make sure they never succeed at life.
Re: (Score:3, Funny)
They are already being punished...that's why they are in Alaska.
We are saving Siberia for when they kill their teachers.
Re: (Score:2)
Don't kid yourself, it wouldn't just be Fox news....it would be all of them.
If these kids did this in FL, they'd be on trial for felony hacking.
Re: (Score:2)
This happened in Sarah Palin land if it had happened in Obama's hood it would have involved busting a cap in the teacha's ass.
Was there a lot of "cap in the ass busting" on the Kalanianaole Highway in Honolulu?
http://goo.gl/maps/fWB5a [goo.gl]
Re:Nice to hear (Score:4, Funny)
Yeah, I remember discovering the wonders of net send * School will be closing early today
Re: (Score:2)
Re: (Score:2)
Fool me once, shame on you. Fool me twice, er uh, can't get fooled again.
Re: (Score:2)
Yep, this makes perfect sense. Reminds me of one time I was bored after school in 7th grade while waiting for my mom to pick me up, and there were these plants growing next to one of the walls of the school... I decided it would be fun to see if I could write on the wall with the flowers of the plants. Why? Cause I was bored, and like probably most people here, my intelligence was way higher than my wisdom. Turns out, yes, they wrote extremely well. Too well: they wouldn't wash off. They could tell I was ju