Hacker News Reader

Seems to be no mention of a bug bounty (or a thank you email), despite the severity of the bug and its cleverness.

Worse,

> 02/27: Attended conference call with Blackboard and NTNU to explain exploit

> Blackboard stopped responding to our e-mails 02/28.

If they were American they would probably be in prison now.

I don't understand this comment. Blackboard has headquarters in Washington D.C.

Those who hacked it (TFA) were not.

Author here. Actually, we were in California when all of this went down. Total coincidence.

We had another case in Bergen (Norway) where some 13 year old kid wrote a script to search files on school HD for things like usernames, etc.

To his big surprise, he found his own. On a spreadsheet, with usernames and passwords of 35000 others, in clear text

Turns out students had credentials to such places.

He tipped the school, who in turn called the cops on him. Cops went to his home and confiscated his computer.

Well I'd say that student got a lesson that years of schooling could never provide!