Comment Re:Carelessness ? (Score 1) 544
Let me say, hazza hazza to you and your university. Mine on the other hand is lax at best and pathetic at worst for things like this.
SSN's float arround on EVERY bit of paper that the university issues to you. If you don't want to use your SSN as your student ID, you are required to jump through so many hoops, it makes most students who once cared about privacy just give up.
With amature social engineering skills, it was VERY easy to impersonate a teachers aid and get all manner of things like fees waived, classes opened for additional students, complimentary meals at the dining hall, copies of students records sent off site. The list goes on.
Student working in the IT department meant that I had 'extra' access, as teachers would easily and with little thought give up their passwords to me. All I had to do was mention the IT department and with out showing so much as a badge or name tag or ANY proof there of, I was given access to teachers email accounts, computer logins, and in some cases, their remote access usernames and passwords.
I shutter to think what I might have gotten into had I not spent the MAJOJRITY of my time concentrating on the important things of college life (girls, file sharing, girls, wapping files with girls, ummmm, girls, file sharing, damn). All in all though, without the lax security, I couldn't have impressed nearly as many girls with my ability to get them free lunch and waived late registration fees.
SSN's float arround on EVERY bit of paper that the university issues to you. If you don't want to use your SSN as your student ID, you are required to jump through so many hoops, it makes most students who once cared about privacy just give up.
With amature social engineering skills, it was VERY easy to impersonate a teachers aid and get all manner of things like fees waived, classes opened for additional students, complimentary meals at the dining hall, copies of students records sent off site. The list goes on.
Student working in the IT department meant that I had 'extra' access, as teachers would easily and with little thought give up their passwords to me. All I had to do was mention the IT department and with out showing so much as a badge or name tag or ANY proof there of, I was given access to teachers email accounts, computer logins, and in some cases, their remote access usernames and passwords.
I shutter to think what I might have gotten into had I not spent the MAJOJRITY of my time concentrating on the important things of college life (girls, file sharing, girls, wapping files with girls, ummmm, girls, file sharing, damn). All in all though, without the lax security, I couldn't have impressed nearly as many girls with my ability to get them free lunch and waived late registration fees.
