Eighteen-Year-Old High School Student Found Flaws in School Software That Could Have Allowed Hackers Deep Access to At Least Five Million Students' Data in 5,000 Schools @a_greenberg https://t.co/IyUXC2afPs https://t.co/DvJntoyrOo

— Metacurity - The End to Cybersec News Overload (@Metacurity) August 10, 2019

Kid gets suspended for finding vulnerabilities in school software. Sad to see this is still an issue.

I was entirely kicked out of school in 9th grade, never allowed to finish high school, for similar reasons, being too good at computers.https://t.co/VOV0RVj3z8

— Vincent Milum Jr (@DarkainMX) August 10, 2019

In a heartwarming #defcon27 story, Bill Demirkapi began hacking his high school’s administrative software when he was 16 years old. He eventually found that 5 million records across 5,000 schools were left exposed by simple web vulnerabilities. https://t.co/bKiI4LXCMg

— Andy Greenberg (@a_greenberg) August 9, 2019

With this sort of access, an attacker could obtain a student's password, their birth city, details on their free or reduced lunch, and other information. https://t.co/9ans8nLtOq

— Motherboard (@motherboard) August 10, 2019

Teenager suspended by completely clueless school district after exposing -- in a responsible way -- giant security flaws in software the district uses for core functions. https://t.co/mNohjRHhHU

— Dan Gillmor (@dangillmor) August 9, 2019

Some teens play sports after school.

Some study for tests.

But this teen spent his afternoons hacking into giant software companies, exposing deep vulnerabilities that gave hackers access to everything from student grades to immunization records. https://t.co/r99axbacec

— WIRED (@WIRED) August 9, 2019

This is how I started my career. I found my school's novell netware was unsecured in 8th grade, sent a message to my dean's office through it and was banned from computer class for it. Stopped going to school as a result, started working at 16 instead.https://t.co/yojB6FuB2v

— Marian (@fyrn) August 11, 2019

"The state of #cybersecurity in #education #software is really bad, and not enough people are paying attention to it": https://t.co/S7EDhb40fM #ethics #law #research #internet #tech #business #hacker

— Internet Ethics (@IEthics) August 10, 2019

At the Defcon hacker conference in Las Vegas, 18-year-old Bill Demirkapi presented his findings from 3 years of after-school hacking that began when he was a high school freshman, poking at two common pieces of software used by his own school. https://t.co/GJvS2q4lyQ

— Kids SecuriDay (@KidsSecuriDay) August 10, 2019

"The state of cybersecurity in education software is really bad, and not enough people are paying attention to it." https://t.co/Tsa8OSeDaE

— Illinois Families for Public Schools (@il_fps) August 11, 2019

This student should have been applauded- not suspended. He will have people lining up to hire him. Teen Security Researcher Suspended for Exposing Vulnerabilities in His School’s Software - VICE https://t.co/KFst0CT3sO

— Keith Westman, Ed.D. (@KeithWestman) August 10, 2019

Reminder that the young generation is not the problem; they are the solution https://t.co/l9hesjbVzh

— Mårten Mickos (@martenmickos) August 11, 2019

Teen Security Researcher Suspended for Exposing Vulnerabilities in His School’s Software #CyberSecurity #CyberHunter https://t.co/KfjPvu7mWJ

— Elsworth Anthony (@elsworthanthony) August 11, 2019

Kid gets suspended for finding vulnerabilities in school software. Sad to see this is still an issue.

I was entirely kicked out of school in 9th grade, never allowed to finish high school, for similar reasons, being too good at computers.https://t.co/VOV0RVj3z8

— Vincent Milum Jr (@DarkainMX) August 10, 2019

Suspend the kid who can bring down your entire school network?

You can’t make this up. https://t.co/t2EXfjAkrN

— Jesse Miller (@MediatedReality) August 11, 2019

this kid sounds awesome https://t.co/b4XGSlhJKx

— Evan Greer (@evan_greer) August 11, 2019

"Although I started my research with the intent to learn more, I ended up finding out things were a lot worse than I expected."https://t.co/9ans8nLtOq

— Motherboard (@motherboard) August 9, 2019

New: teen researcher was suspended while exposing vulnerabilities in his school's software. He used some software to try and warn the company, ended up sending a push notification to his entire district. Also found other issues that impacted 5,000 schools. https://t.co/yQ7eb9ofwy pic.twitter.com/AlD1Zz23jJ

— Joseph Cox at DEF CON (@josephfcox) August 9, 2019

FFS, don’t suspend him, help him get a job in cybersecurity. https://t.co/77rLrPVdlm

— Kate O'Flaherty (@KateOflaherty) August 10, 2019

Teen Tells DEF CON How He Hacked Millions of Student Records From Popular Education Software https://t.co/8qFstzCPLl pic.twitter.com/ORI678pfjH

— #AI (@AI__TECH) August 11, 2019

Teen Tells DEF CON How He Hacked Millions of Student Records From Popular Education Software [Update] https://t.co/AOCNAp21NH #education #hacking #CyberSecurity #infosec

— Bob Carver (@cybersecboardrm) August 11, 2019

Teen Tells DEF CON How He Hacked Millions of Student Records From Popular Education Software [Update] https://t.co/AtfNhin2hs #hacking #defcon #breach #blackboard pic.twitter.com/QD2wKK3Wo3

— Igor Os (@igor_os777) August 11, 2019

The state of security in the education software market is a serious concern that needs to be addressed. More needs to be done by companies to protect student data. Holding them accountable is step 1. https://t.co/yH5ZVr2aVz

— Brian Lantz (@BrianLantz_NHCS) August 10, 2019

Teen Tells DEF CON How He Hacked Millions of Student Records From Popular Education Software https://t.co/Pq3IaZI1pN@robmay70 @archonsec @ChuckDBrooks @mclynd @DrJDrooghaag @AlaricAloor @Shirastweet @MHcommunicate @m49D4ch3lly @mirko_ross @envescent @NigelTozer @todddlyle

— Philippe Vynckier (@PVynckier) August 10, 2019

Teen Tells DEF CON How He Hacked Millions of Student Records From Popular Education Software https://t.co/MSQBerNSmk pic.twitter.com/3oTepSl2IP

— Rich Tehrani (@rtehrani) August 10, 2019

At the Defcon hacker conference in Las Vegas, 18-year-old Bill Demirkapi presented his findings from 3 years of after-school hacking that began when he was a high school freshman, poking at two common pieces of software used by his own school. https://t.co/GJvS2q4lyQ

— Kids SecuriDay (@KidsSecuriDay) August 10, 2019

Kid finds security flaws in blackboard and Follett, but gets ignored. So he does something they couldn't ignore, so he gets suspended. He started off doing this correct but got blocked. This is how you turn a white hat hacker into a black hat hacker.https://t.co/DywyWy4CwF

— Jacob Mitchell (@JAMitchell47) August 11, 2019

Teen Hacker Finds Bugs in School Software That Exposed Millions of Records | WIRED. So in keeping with our ⁦@EC3Europol⁩ pathways into Cybercrime research. ⁦@maryCyPsy⁩ ⁦@fipman⁩ https://t.co/2UCXAoaPte

— Prof Julia Davidson (@JuliaDavidson13) August 11, 2019

"The state of #cybersecurity in #education #software is really bad, and not enough people are paying attention to it": https://t.co/S7EDhb40fM #ethics #law #research #internet #tech #business #hacker

— Internet Ethics (@IEthics) August 10, 2019

Teen Hacker Finds Bugs in School Software That Exposed Millions of Records https://t.co/9kZwOwFZJW

— CCSF Cyber Club (@CCSF_Cyber_Club) August 11, 2019

⁦@leoniehaimson⁩ ⁦@DianeRavitch ⁩
Teen Hacker Finds Bugs in School Software That Exposed Millions of Records | WIRED #edtech #privacy #edchat #FERPA https://t.co/KqjrAZQXuk

— OPVMom (@OP_Omom) August 10, 2019