p2pnet - rss feed: Carleton U to Mansour Moufid: pay $2,768
p2pnet news view Freedom | P2P:- Rumour has it mathematics and statistics undergraduate Mansour Moufid has decided Carleton University in Ottawa, Canada, isn’t the best place for him to continue his studies.
Authorities there, “decided to take matters into their own hands against an undergraduate because they were concerned the police wouldn’t,” p2pnet said recently, going on:
“However, their fears were unjustified and the undergraduate, Mansour Moufid … now faces up to 10 years in jail for his 16-page report on what he says is the the poor state of information security at the school.
“He gives chapter-and-verse of what he says could result in large-scale identity theft, in the process including the full names, usernames and passwords of 32 other students chosen, he states, at random as examples of the way in which he was able to compromise their Connect accounts.”
Writing as Kasper Holberg, Moufid was charged under the Criminal Code with mischief to data and unauthorized use of a computer.
So what’s the final verdict?
Moufid escapes jail, but Carleton U figures he should pay it almost $3,000 for uncovering a serious university security flaw, and then having the temerity to detail it in public.
Wikileaks has the document outlining the university’s demands.
Dated September 23 and signed by Suzanne Blanchard, vice president, student support services, it orders Moufid to pay “restitution” for 32 student cards for “those students whose accounts you access (amount $608.00),” and, “the cost of extra security staff at the residence buildings due to the unknown risk caused by the breach of the campus card system (amount $2,160.00).”
Moufid has also been told to write to each student and, “This letter must include the information that this was not the first incident, that you lied about alerting the university earlier and the details of what you actually did.”
Not only but also, he’s been ordered to, “register, attend, and successfully complete an Ethics course,” pre-approved by the director of student affairs, “at a post-secondary to tuition by the end of the current academic year”.
And, “You will sign an acknowledgement and consent, by which you agree that Computing and Communication Services (CCS) will monitor all of your online activity through any Carleton University server for as long as you have access to Carlton online services, and you agree that the information obtained by CCS through that monitoring may be shared by CCS with such other university officials as CCS May consider appropriate.”
Stay tuned.
(Thanks, Luvie)
p2pnet - Carleton University ‘Cypherpunk Posse’ report, September 15, 2008
Wikileaks - Cartleton University Campuscard fiasco diciplinary decision 2008, September 27, 2008
Use free p2pnet newsfeeds for your site. It’s really easy!Subscribe to p2pnet.net | | rss feed: http://p2pnet.net/p2p.rss | | Mobile - http://p2pnet.net/index-wml.php
Net access blocked by government restrictions? Use Psiphon from the Citizen Lab at the University of Toronto. Go here for details.
September 29th, 2008 at 9:20 am
Yes, do so. And also attach your bill in the process.
September 29th, 2008 at 10:43 am
Jon,
The worse part is this:
Moufid has also been told to write to each student and, “This letter must include the information that this was not the first incident, that you lied about alerting the university earlier and the details of what you actually did.”
But
the story was already leaked showing HE DID NOT lie about alerting the univercity.
Reason for the wikileak:
5. It was leaked to expose the university’s attempts to deceive the public at the expense of the student. For example, the student is ordered to publicly deny having notified the university beforehand (this is verifiable as false).
look at the bottom of https://secure.wikileaks.org/wiki/Cartleton_University_Campuscard_fiasco_diciplinary_decision_2008
September 29th, 2008 at 11:03 am
This story gets worse and worse. Is the student being told to confess to something he didn’t do? Isn’t this why the ’states have the fifth amendment? How many fingers am I holding up, Winston? http://www.youtube.com/watch?v=wTFV9w4B0eg
September 29th, 2008 at 11:19 am
He’s BEING TOLD to lie publically to everyone, by the university.
He’s being told that their weak security (which he warned them about and then exposed) is the cause of the university having to spend almost 3000$ on added security. Which the university wants HIM to pay.
The university is trying to lay all blame on their short-commings in security on this guy and are forcing him to lie in public and in writing about it.
September 29th, 2008 at 2:24 pm
What happened to a simple thank you?
September 29th, 2008 at 4:19 pm
Whomever made the decision to handle this in this fashion at Carleton U. should be slapped and sterilized. They need the slap, and we don’t want any more of them.
Another instance where I find it a shame that there isn’t a law against being an idiot.
So they shoot the messenger. Do they have any plans to actually fix the security issues? Are they content with punishing a person for pointing out that they deployed a system whose security appears to be close to nil? Did they hire Bozo the clown to design this system. I think we should be told.
September 29th, 2008 at 4:25 pm
Silly Ratfaced Git Says: “I think we should be told.”
The truth is what they don’t want getting out.
Thus the reason for making him lie to the public.
September 30th, 2008 at 12:35 am
The network admins at the school deserved it. Its like a digital slap in the face. They get paid a fortune to sit on their high horse and guard student/teacher privacy and they failed. This student advised the univ of the the privacy problems and they did nothing. Now they want him to pay damages and take an ethics course? ridiculous
In the past my high school had some net nanny internet filter I sought out to bypass it. How? a proxy. seems like a simple idea but the admin had already thought of it and banned as many proxies as he could. So I set up several apache servers on my own computer and taught friends how to install it. What I did was link the proxies together and forwarded a domain to a subdirectory of proxies. I then printed the url along with a large bold title “how to bypass the schools bullshit internet filter” and made hundreds of copies. Lastly I decided to strategically place these throughout my school I even decided to scatter them by throwing them in the main stairwell right when classes ended. In conclusion the network admin used my apache proxies as an example of the fundamental flaw in the schools network filters; He managed to get himself appointed head of network administration at the york region district school board.
The acts this student made are no different and he should be commended for his actions; not used and then raped for 3 grand.
September 30th, 2008 at 12:48 am
CBC News at Six reported on this last Friday:
http://ca.youtube.com/watch?v=k7bT-CeT7h4
September 30th, 2008 at 9:20 am
Carleton administrators who signed the letter sent to Mansour will certainly be charged for extortion of false confessions in the next few days.
In Canada, the 2008 version of the Criminal Code prohibits extortion as set out at §346(1):
“Every one commits extortion who, without reasonable justification or excuse and with intent to obtain anything, by threats, accusations, menaces or violence induces or attempts to induce any person, whether or not he is the person threatened, accused or menaced or to whom violence is shown, to do anything or cause anything to be done.”
In R v Davis, Chief Justice lamer of Canada’s Supreme Court wrote, in 1999:
September 30th, 2008 at 9:22 am
In R v Davis, Chief Justice lamer of Canada’s Supreme Court wrote, in 1999:
“Extortion criminalizes intimidation and interference with freedom of choice. It punishes those who, through threats, accusations, menaces, or violence induce or attempt to induce their victims into doing anything or causing anything to be done. Threats, accusations, menaces and violence clearly intimidate. When threats are coupled with demands, there is an inducement to accede to the demands. This interferes with the victim’s freedom of choice, as the victim may be coerced into doing something he or she would otherwise have chosen not to do.”
September 30th, 2008 at 8:52 pm
georges Duhamel Says:
“Carleton administrators who signed the letter sent to Mansour will certainly be charged for extortion of false confessions in the next few days.”
Do you honestly believe what you said?
How does a student get and pay for a lawyer?
October 1st, 2008 at 6:41 am
Yes I believe what I said.
It has nothing to do with lawyers,when a crime is committed the offenders( i.e Suzanne Blanchard and Boudreault) should and will be prosecuted,it’s matter of days..
Theses criminals can certainly pay for a good lawyer but their lawyer can not change the fact that they have committed a crime,the letter is online and everyone can read it and see that they are clearly trying to obtain false confessions from him by ordering him to deny that he alerted the university,while they have confirmed receiving the report,and it’s not the only false confession that they wanted to obtain from him,they wanted him to admit that it’s not his first offence and the truth is :it was his first offence,no other offence has been documented or reported by the university before.