December 11, 2006
From SANS
A student at the University of Wisconsin-Whitewater has been charged with two felony computer crimes. The student, Michael W. Mraz Jr., was also a student employee for the Resident Life office.
He is accused of breaking into four university staff members' computers as well as installing keystroke loggers, capturing userIDs and passwords which were then used to gain access to sensitive data. This data included an exam with answers.
This case highlights some of the risks involved with the hiring of student IT workers...
Student employees are subject to the same rules and regulations as any regular staff employee, but the shades risk for insider actions are less well understood than for a full time staffer.
The tough lesson for this student is that he will never gain work in a position of trust. Not in accounting. Not in government. Not in finance or insurance. Not in HR. Not in the casino industry. Certainly not in IT.
Posted by Thomas Siu at 04:59 PM
