School Spy Program Used on Students Contains Security Hole
A controversial remote administration program that a Pennsylvania school district installed on student-issued laptops contains a security hole that put the students at risk of being spied on by people outside the school, according to a security firm that examined the software.
The LANrev program contains a vulnerability that would allow someone using the same network as one of the students to install malware on the laptop that could remotely control the computer. An intruder would be able to steal data from the computer or control the laptop webcam to snap surreptitious pictures.
The vulnerability was discovered by researchers at Leviathan Security Group, who provided Threat Level with a video (see below) demonstrating an exploit they developed.
