There were a couple of hints all over my two years in college, but the biggest one was when I managed to convince my professor that our college FTP server is not secure by showing her a Wireshark packet in which I have submitted the password to the FTP server and convincing her that the server replied to my connection with a password (which, of course, doesn't make any sense what so ever).
Plus I was not able to convince the college staff that a self-signed certificate in our online learning platform is not a good solution. And I found one security exploit in the custom CMS they were using (privilege escalation just by tweaking the URL).
When I got to the point where I had a server administration course taught with the Windows server explicitly, I've decided to freeze my education.
I got into a good tech internship and now I finally have the chance of actually learning something useful (Python / Linux administration / a bit of front end programming / whatever is necessary since it's not a tech organization, but a journalistic organization with a highly skilled tech team) by actually doing some interesting things.