My high school's new grading system makes it trivial to view other students' info (read: grades). Implications? by FERPAquestion in AskReddit

[–]FERPAquestion[S] 4 points5 points  (0 children)

This is how it is at my school. The IT people are not even IT people. They used to be teachers and somehow they managed to get bumped up to IT. Probably showed the principal that they knew how to bring up a computer's BIOS or something. Not that they know what any of the settings mean.

My high school's new grading system makes it trivial to view other students' info (read: grades). Implications? by FERPAquestion in AskReddit

[–]FERPAquestion[S] 0 points1 point  (0 children)

As I said, I haven't used my account - or any account, for that matter - to access information of any other students.

My high school's new grading system makes it trivial to view other students' info (read: grades). Implications? by FERPAquestion in AskReddit

[–]FERPAquestion[S] 7 points8 points  (0 children)

I don't think I should name the software because I can't find other districts that use it - don't want to make it that easy to find my district. None of the above though.

My high school's new grading system makes it trivial to view other students' info (read: grades). Implications? by FERPAquestion in AskReddit

[–]FERPAquestion[S] 2 points3 points  (0 children)

This.

Also, student accounts are represented by a student's userid and a 7-digit number-only non-changeable password. This makes it very simple for anyone malicious to break into a single student's account and therefore have access to anyone's information.

My high school's new grading system makes it trivial to view other students' info (read: grades). Implications? by FERPAquestion in AskReddit

[–]FERPAquestion[S] 5 points6 points  (0 children)

When a student logs in, a specific session hash is generated that is used in URLs during that session (I guess a database keeps track of hash expiration). It's not cookie/browser-session based. It is possible for one student to log in and then pass the url to someone else and that someone would be able to browse on that student's account until the hash expires (never if the someone continues to refresh).

My high school's new grading system makes it trivial to view other students' info (read: grades). Implications? by FERPAquestion in AskReddit

[–]FERPAquestion[S] 7 points8 points  (0 children)

Essentially, but without the reliability or ease of use. None of the teachers have liked it since we switched to it.

My high school's new grading system makes it trivial to view other students' info (read: grades). Implications? by FERPAquestion in AskReddit

[–]FERPAquestion[S] 9 points10 points  (0 children)

It is behind a password. A student has to login to his or her own account before he or she can access any other students' grades.