Confirmed victory

Chair of the York Region District School Board: Fix up login loophole on TeachAssist that allows nearly any student to login to most student's TeachAssist accounts

This petition made change with 19 supporters!


There is login loophole on TeachAssist that allows nearly any student to login to any student's teachassist account as long as that TA account has not had its password manually changed by the student.
As you are most likely aware, one may log into the TeachAssist system using not only their student number and password, but also their student number and lastname. Of course, it is presumed that these 8 character long numerical student numbers would remain private and no other students would know about them, however that is no longer the case.

As you are also most likely aware, YRDSB gives students and staff Google Apps accounts to collaborate and create documents on the cloud. The issue is that any student can search up any other student's name and GApps Email on Google Apps. The Gapps Email accounts that are assigned to students are in the following format: "Student_number@gapps.yrdsb.ca

".

Through this, a student will be able to retrieve the student numbers of basically everyone in YRDSB, and login to TeachAssist with the student number and the student's last name. This loophole only affects those who haven't manually changed their password.


For example, any student can search up "John Doe" on Google Apps, and find that John Doe's student number is "xxxxxxxx", and then go to TeachAssist, and enter in John Doe's student number and last name to log in to John Doe's account, and to see John Doe's marks.

This loophole allows students to invade the privacy of other students who haven't manually changed their password by viewing their marks without permission, and I advise as a faithful student that this loophole be immediately closed.   It is advised that all students who see this change to immediately login to TeachAssist and change manually change their TeachAssist password to something else. This will eliminate the issue for you. Also, you please tell your friends to change their TA Password too.


Today: Kevin is counting on you

Kevin Pei needs your help with “Chair of the York Region District School Board: Fix up login loophole on TeachAssist that allows nearly any student to login to most student's TeachAssist accounts”. Join Kevin and 18 supporters today.