'We wanted to help': Students arrested after exposing FreeHour security flaw.

TL;DR

Four computer science students are being investigated by the police after they found and highlighted a security weakness in Malta’s largest student application, FreeHour. Normally, a server would see a request for private data, check who is requesting it – in this case, it was the students – and deny access as the user does not have the required authorisation. FreeHour founder and CEO Zach Ciappara said that, once he received the e-mail from the four students in October, he contacted the office of the Information and Data Protection Commissioner (IDPC) and the Cyber Crime Unit for advice

Like summarized versions? Support us on Patreon!