I own the nyu.scool domain. I contacted them years ago to tell them this is a security risk and they should take it and they didn’t bother to respond.<p>MIT.school is the same story except they sent lawyers after me and sued me.<p>These orgs do not have competent security teams.
This data should be available with a FOIA, or even better it should be proactively published by colleges online. It should not take hacking to bring this information to light.<p>The interesting question is, now that this information has been publicized, will the DoJ pursue a civil rights case for what appears to be a fairly blatant case of racial discrimination against white and Asian students?
For context, it looks like the same person (people?) hacked the University of Minnesota in 2023.<p>(Sorry for bad source.) <a href="https://datafort.com/university-of-minnesota-hit-with-lawsuit-amidst-major-data-leak/" rel="nofollow">https://datafort.com/university-of-minnesota-hit-with-lawsui...</a>
Ethical hacker:<p>- Identifies universities illegally racially discriminating<p>- Provides all the data needed to prove it<p>- Removes all the PII<p>NYU has no moral ground to stand on. They got owned by the nicest possible hacker.
Can someone explain it to me what the hackers actually meant and what the school is supposed to do? Mistreat these Asian kids with stern parents who force them to study until late night - because what? I believe it's barking up the wrong tree.
It's telling that, again and again, people can't simply point out issues with affirmative action without resorting to racial slurs.<p>Impossible to have adult conversations with these types of provocateurs.