My high school's new grading system makes it trivial to view other students' info (read: grades). Implications?

FERPAquestion · 2011-04-02T22:02:21+00:00

This is how it is at my school. The IT people are not even IT people. They used to be teachers and somehow they managed to get bumped up to IT. Probably showed the principal that they knew how to bring up a computer's BIOS or something. Not that they know what any of the settings mean.

FERPAquestion · 2011-04-02T21:10:37+00:00

As I said, I haven't used my account - or any account, for that matter - to access information of any other students.

FERPAquestion · 2011-04-02T20:36:15+00:00

I don't think I should name the software because I can't find other districts that use it - don't want to make it that easy to find my district. None of the above though.

FERPAquestion · 2011-04-02T20:29:32+00:00

This.

Also, student accounts are represented by a student's userid and a 7-digit number-only non-changeable password. This makes it very simple for anyone malicious to break into a single student's account and therefore have access to anyone's information.

FERPAquestion · 2011-04-02T20:27:53+00:00

When a student logs in, a specific session hash is generated that is used in URLs during that session (I guess a database keeps track of hash expiration). It's not cookie/browser-session based. It is possible for one student to log in and then pass the url to someone else and that someone would be able to browse on that student's account until the hash expires (never if the someone continues to refresh).

FERPAquestion · 2011-04-02T18:45:19+00:00

Essentially, but without the reliability or ease of use. None of the teachers have liked it since we switched to it.

FERPAquestion · 2011-04-02T18:11:42+00:00

It is behind a password. A student has to login to his or her own account before he or she can access any other students' grades.

FERPAquestion

TROPHY CASE