Log in

No account? Create an account

well come the fuck on, crossroads.

« previous entry | next entry »
Mar. 15th, 2005 | 10:00 pm
music: Duke Ellington - Money Jungle - 06 - Wig Wise

ok, so purely by a perchance google search, i found a piece of the crossroads website that's publicly viewable by anyone.
somehow google found a mirror of the private faculty, student, and parent sections of xrdsus.org
including a listing of every single student and faculty schedule, a pdf of the students selected for extended time on quizzes, an all-school calendar, the names, extensions, and email addresses of almost all faculty (making those email addresses very susceptible to be used by spam programs), etc.

May I remind you that this was listed on GOOGLE, i didn't do anything malicious to find it.
and google has already found and indexed the entire website . . .

I've been saying crossroads' IS (Information Services) guys are complete fools for quite some time.  Does this not prove it?
I'm sure there are a lot of people who would NOT be happy about this ONE BIT.  And not just the kids on the extended time list that isn't to be shown publicly anywhere, either.

I've said I run a more secure server in my bedroom than IS does for the whole school more than once.  It was more boasting jokingly than anything else, but now I think it might be true.  At least I can password protect the files I don't want people to see.  And there are MANY ways to protect a website from being indexed by google if you don't want it to — most books will advise you to do that to password protected files anyway, just in case you make a blunder like this and let them be accessed without a password.

No I'm not gonna post the link.  That's for the school to fix.

| Leave a comment |

Comments {5}


(no subject)

from: devidarkwolf
date: Mar. 16th, 2005 08:28 am (UTC)

DAMN! Not even in email?


LOL, that is hilarious. Tell Ian. Heh.


Reply | Thread

Polly Pocket

(no subject)

from: fetal_vagina
date: Mar. 16th, 2005 03:29 pm (UTC)

What a coincidence. Out of boredom, I googled my own name and found everyone's schedule. I didn't know that stuff was public.

Reply | Thread


(no subject)

from: limnrix
date: Mar. 17th, 2005 02:03 am (UTC)

well, it's not SUPPOSED to be.

Volunteer to fix it.

I wonder who's responsible.

Reply | Thread

Alex P.

(no subject)

from: wetzel
date: Mar. 17th, 2005 03:07 am (UTC)

they fixed it now.
but it's still *giggle* in google's cache

and they would never let me fix it.
they don't let students touch the website with a ten foot pole

Reply | Parent | Thread


(no subject)

from: limnrix
date: Mar. 18th, 2005 12:37 am (UTC)

really! That's new.

Reply | Parent | Thread