OMIVOX EDOUARD MANUAL
OMIVOX EDOUARD FULL
OMIVOX EDOUARD SOFTWARE
OMIVOX EDOUARD OFFLINE

By a 14-to-1 vote, they moved to expel him. After he was interviewed by the dean of Dawson and his Computer Science program coordinator, the details were brought to a meeting of 15 professors in the school's Computer Science department. While Skytech saw the probe by Al-Khabaz as the mistake of an overeager student, Dawson College administrators decided to take disciplinary action.

OMIVOX EDOUARD MANUAL

'This is clearly stated in our manual as well as in prominent guideline advisories on our website.'

OMIVOX EDOUARD OFFLINE

'We go to great lengths to stress to users not to use Acunetix WVS on live websites, but on offline copies of those Web application setups to avoid these situations,' he told us.

OMIVOX EDOUARD SOFTWARE

The use of the scanning software against an active site, even in its limited trial form, is at best a mistake, said Acunetix Director of Sales Chris Martin in an interview with Ars. Taza confirmed the conversation to the Post but denied he made threats Skytech executives did not respond to Ars' request for comments. Al-Khabaz claimed that Taza threatened prosecution if he did not meet with him and sign a nondisclosure agreement. AdvertisementĪl-Khabaz told the National Post that moments after he ran the scan, Skytech's president Edouard Taza called him on his home phone, telling him it was the second time that the company had seen his activities in their log files, and that what he was doing was considered a cyber-attack.

OMIVOX EDOUARD FULL

Both, however, are intended primarily for use during off-line software testing, and not on live sites-in its full version, Acunetix crawls the entire target site checking for vulnerabilities and document error messages for signs of potential attack paths. Two days later, he decided to check to see if the flaw had indeed been fixed, running the scanning software again.Īcunetix provides a free trial download of its software for checking against cross-site scripting (XSS) attacks the complete tool can perform deeper vulnerability scans against websites. But it was Al-Khabaz' next step that landed him in trouble with the school. When Al-Khabaz and Mija reported the problem to the school's director of Information Services and Technology, Al-Khabaz claimed they were initially congratulated for finding the flaw and were told it would be fixed immediately. Al-Khabaz and fellow student Ovidiu Mija found the flaw by running Acuntetix, a web site security scanning tool. Al-Khabaz told the National Post that the software had 'sloppy coding' that allowed anyone 'with basic knowledge of computers to gain access to the personal information of any student'-including virtually all of the personal data the college had collected on them. Omnivox is used widely by Quebec's general and vocational colleges.

Now, fellow students are demanding his reinstatement, and the college and its software provider are facing a publicity and security backlash.Īl-Khabaz and another student reported finding a security flaw in the mobile application for Omnivox, a Web-based software package developed by Montreal-based Skytech Communications that is used by students to access and manage their personal information and college services-including their Social Insurance numbers, the Canadian equivalent of US Social Security numbers. While Ahmed Al-Khabaz said he felt he had a 'moral duty' to probe the security of a student information system used by over 250,000 students, the school's administration said his acts were a 'serious professional conduct issue' and expelled him.

This story has been updated with additional information from Dawson CollegeĪ 20-year-old Canadian computer science student has become, depending on your point of view, a martyr for computer security or a cautionary tale for students and others who take an interest in exposing security flaws in software products.

Omivox edouard