Teenager Bill Demirkapi had been ghosted. Hard. "It didn’t feel good,?? ??? ??" he explained to the large crowd gathered to hear him speak. "It hurt my feelings.”
But Demirkapi, despite his status as a recent high-school graduate, wasn't lamenting the traditional spurned-love problems typical of his cohort. Far from it. Instead, he was speaking at the famous DEF CON hacker conference in Las Vegas, and the ghoster-in-question was educational software maker Blackboard.
Demirkapi had reported numerous vulnerabilities in Blackboard's software to the company; after initially being in communication with him, the company stopped responding to his emails. But Demirkapi, who found he could access a host of student data — including family military status, weighted GPAs, and special education status — through vulnerabilities in Blackboard's system, was undeterred.
In fact, he was just getting started. And Blackboard wasn't his only target.
Over the course of his high school career, Demirkapi — a budding security researcher — also investigated K-through-12 software maker Follett. In doing so, he determined the company left millions of student and teacher records exposed to anyone who bothered to look.
Specifically, he explained, there were more than 5 million student and teacher records in the system that covered over 5,000 schools. Left exposed were students' immunization history, attendance data, school photos, birthdays, and more.
"It was my data too in there," he told the audience of decidedly not teenage hackers. "This was pretty crazy stuff."
He tried to do the right thing and notified both his high school and the software manufacturers of his discoveries. Using a flaw in the system to alert students and teachers to its vulnerabilities, however, earned him a two-day suspension.
"Two days off of school," he said of the punishment. "I think it’s a pretty big win-win."
SEE ALSO: Remotely hacking elevator phones shouldn't be this easyEventually, Follett and Blackboard did listen — and many of the vulnerabilities he reported were patched at the end of July.
"Blackboard is always working hard to improve both the security of our products as well as the process and procedures we leverage in support of security," read a statement the company provided Demirkapi and he shared with DEF CON.
Asked by a member of the crowd what he's going to do next, Demirkapi gave an answer that elicited raucous applause from the hacker crowd: "Start college, maybe break their software."
Never give up on your dreams, Bill. The privacy of millions of students and teachers is counting on it.
Topics Cybersecurity
Spectrum Announces $10,000 Digital Education Grant for ESGVJCCYo Nakamura’s Hit Parade, Live Dance Performance from TokyoSpectrum Announces $10,000 Digital Education Grant for ESGVJCCForever Stamps Honor Noted JA ArtistBiden: AntiHanako Wakatsuki Selected as Superintendent of Honouliuli National Historic SiteScreening, Discussion of ‘Big Drum: Taiko in the U.S.’Well, That's Just PeachyDave Roberts Issues Statement to Dodger Organization Decrying AntiForever Stamps Honor Noted JA Artist How to write a good Tinder bio This political ad has the best surprise ending of, uh, all time Dr. Ford testified before 17 male senators and just four women Lana Del Rey basically eviscerates Kanye West's MAGA Instagram post Shane Dawson looks into Jake Paul's enemies in part 4 of his docu Elijah Wood casually rides scooter, instantly becomes meme Alyssa Milano stares daggers at Brett Kavanaugh throughout his hearing People everywhere walk out in solidarity with sexual assault survivors Ted Cruz's dinner was gatecrashed by protesters against Brett Kavanaugh Man tries to use Zillow to prove Kavanaugh's innocence and ends up owning himself
0.1426s , 9861.4375 kb
Copyright © 2025 Powered by 【?? ??? ??】Enter to watch online.Teenager finds educational software exposed millions of student records,Global Perspective Monitoring