unsercured website

[andrew_91090]

I overheard a child at our school talk about a certain local school using joomla to create their website and that the logon details were left as default,

when i came back into my office i tried it out to make sure, and turns out that they have left it.

Any advice on how to take this further? do I e-mail the network manager at that school telling them or what?

 

Thanks

[elsiegee40]

Straight into the network manager. You're doing this as friend... having had the heads up from gossiping kids.

 

You'd want someone to tell you if this were you wouldn't you?

[X-13]

Straight into the network manager. You're doing this as friend... having had the heads up from gossiping kids.

 

Gossiping kids - The #1 source of security faults and work arounds.

[Oaktech]

Gossiping kids - The #1 source of security faults and work arounds.

 

amen to that!

[andrew_91090]

Ok thanks, i didn't know if it would get me into more serious trouble, i.e. for trying it haha, I'll let them know asap

[Gaz]

I do remember a story about a pupil that made their schools IT dept aware of some flaws in their network, and instead of being praised I think he was suspended.

I'll have a google and post a link if I can.

[Flakes]

I wouldn't email, i would ring the school and ask to talk with the manager, an email might just be ignored or taken the wrong way, a phone conversation could lead to a nice little relationship between both schools concerning IT equipment/software.

[pete]

Yeah - talk to the NM on the phone, and try to keep the "wtf did you think you were doing?" tone out of your voice.

 

I'd let your SLT know, just in case they start Finger-Pointing. If nothing else, Headteachers like nothing better than stories of daftness at competitor schools.

[pcstru]

Ok thanks, i didn't know if it would get me into more serious trouble, i.e. for trying it haha, I'll let them know asap

 

You could get into trouble for trying it so I'd be a bit cautious about admitting that!

[andrew_91090]

You could get into trouble for trying it so I'd be a bit cautious about admitting that!

 

That is what I was thinking, thats why I asked on here

[NikChillin]

I would just call them saying that thought you might be interested... don't know if it is true.... I overheard... might be worth looking into changing password...and offer to get together for a coffee sometime to get/exchange ideas.

[LeightonJames]

I do remember a story about a pupil that made their schools IT dept aware of some flaws in their network, and instead of being praised I think he was suspended.

I'll have a google and post a link if I can.

 

Me and a friend highlighted some network flaws to our network manager when i was at school. Needless to say when the network went down we were the first to be questioned and were threatened with suspension and being kicked off our IT courses if we didn't tell them what we had done.

 

First and last time i tried to be helpful in that school i can tell you.