Second Lawsuit Over School Webcams Involves Student Who Was Photographed 469 Times Over 2 Months
from the what-happened-to-42-times? dept
Remember the school district in suburban Philadelphia involved in a lawsuit over secretly taking webcam images of students? The school initially denied things, and later said that it had only used the feature 42 times to help find lost or stolen laptops. However, a law firm brought on by the school to investigate its use of the LanRev system found 58,000 images were taken. That's led some other students to realize that they might have a beef with the Lower Merion School district as well. A second student has now filed a lawsuit against the school after discovering that the school took 469 secret photographs from his webcam over the course of two months.What happened was that the student lost his laptop on December 18th. The laptop was found by a teacher and returned to the student on the 21st... but also on the 21st, the school's IT folks turned on LanRev's "TheftTrak" service. Even though the laptop had been returned to the student, the LanRev system was never turned off. It took 469 secret images and captured 543 secret screenshots. It wasn't turned off until that first lawsuit was filed, and someone in the IT department realized there might be an issue there...
What's really scary? If a school administrator hadn't revealed the whole system to the first student by showing him a photo of him at home, this would still be going on and none of the students would know about it. The only reason this lawsuit is being filed is because of the information that came out during the investigation into the first incident.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Reader Comments
Subscribe: RSS
View by: Time | Thread
'Trusted' computing.
[ link to this | view in chronology ]
Re: 'Trusted' computing.
I finished school before many had started actually supplying laptops, but I was there at the point that some kids started bringing their own. Laptops were cool, they were amazing, they weren't "new" but having them as a part of your daily life was. The rules, the delineations of privacy, weren't laid down... had my school given me a laptop then, I definitely would have been skeptical about my privacy and very very careful what I did with it.
But now? These are kids who have had Facebook profiles for as long as they can remember, who can't conceive of an internet before Google let alone a world before the internet -- kids who have typed far more than they have every written by hand, who have had more IM chats than phone calls. To them, a laptop is nothing special and nothing to be paranoid about. You would assume the school was respecting your privacy every bit as much as if they gave you an agenda book.
[ link to this | view in chronology ]
What happened was that the student lost his laptop on December 18th.
[ link to this | view in chronology ]
Re: What happened was that the student lost his laptop on December 18th.
[ link to this | view in chronology ]
The sad part is that very few people know how to use a NIDS.
http://en.wikipedia.org/wiki/Network_intrusion_detection_system
[ link to this | view in chronology ]
I think people could use Tomoyo that is a kind of MAC(mandatory access control) to keep an eye on things since if that happened on a Selinux it would have raised a red flag probably, but Tomoyo is more user friendly than Selinux.
[ link to this | view in chronology ]
Protect your system.
* Restricting SSH based services
* Restricting system administrator's operations
* Per application/user networking firewalls
* Baseline parameter checking for every application (e.g. Web server's CGI)
* Reducing damage caused by buffer overflow vulnerability and OS command injection vulnerability
* Deploying honey pot system.
* Suits well on Linux based PCs, servers, embedded systems
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Easy fix for you students out there...
[ link to this | view in chronology ]
Re: Easy fix for you students out there...
[ link to this | view in chronology ]
Re: Easy fix for you students out there...
[ link to this | view in chronology ]
Re: Re: Easy fix for you students out there...
Putting an obstruction in front of the laptop camera is grounds for suspension or expulsion?
Although I can believe that some school administrators would think this is reasonable, I would hope they discuss such things with their counsel beforehand. Certainly it would not stand up in court and the school district could be on the hook for a significant amount of money. I doubt the taxpayers would be impressed and might express themselves whilst voting upon the next bond issue.
In addition, I find it quite unreasonable to make use of the school laptop mandatory.
[ link to this | view in chronology ]
Re: Re: Easy fix for you students out there...
If blocking the lens was a cause for discipline, well...that kinda raises the Damn Creepy! red flag.
[ link to this | view in chronology ]
Re: Easy fix for you students out there...
[ link to this | view in chronology ]
Re: Re: Easy fix for you students out there...
[ link to this | view in chronology ]
Re: Easy fix for you students out there...
[ link to this | view in chronology ]
Thank you Lower Merion
Let the kids be, for God's sake. Just let them be.
[ link to this | view in chronology ]
Why do students need laptops anyway?
[ link to this | view in chronology ]
Re: Why do students need laptops anyway?
[ link to this | view in chronology ]
Re: Re: Why do students need laptops anyway?
[ link to this | view in chronology ]
Re: Re: Why do students need laptops anyway?
[ link to this | view in chronology ]
Re: Re: Why do students need laptops anyway?
[ link to this | view in chronology ]
Re: Re: Re: Why do students need laptops anyway?
Yes, I agree that thin clients would be alot better for classroom use, which is why I didn't mention them. I just don't think that these laptops cost $1,000+, as you stated.
But since we're talking about it, are there portable wireless thin clients with screens that these kids could take home and use? If there are, I haven't seen them or heard about them. You say that they cost $100? Sign me up!
[ link to this | view in chronology ]
Re: Re: Re: Re: Why do students need laptops anyway?
Dell Inspiron Mini 10 (1012) - OS Software + Educational Discount = Thin Client for borderline $100.00.
And, that's just one example of how it could be done.
Make a single image of your desired RDC/VPN platform pre-configured, and your IT department can pop out as many working thin clients as they need in about 5 minutes each. Pass them out to students, and they can take it home.
[ link to this | view in chronology ]
Re: Re: Re: Re: Re: Why do students need laptops anyway?
Also, I'll believe that $100 estimate when I see it. I paid $249 for my daughter's refurbished Mini 10v, and I have a hard time seeing them go down lower than $200 for the Mini 10v, much less the Mini 10.
[ link to this | view in chronology ]
Re: Re: Re: Re: Re: Re: Why do students need laptops anyway?
Also as far as the price for the discussed mini's goes... I've confirmed that, as of today (as the pricing/estimate fluctuates) that the cost per unit for the mini given as an example would be approximately $129 per unit. In fact. The general retail for one of the units, including OS software, is $299. I work for a firm who is also a Dell Certified reseller, so it made the research a bit easier on my part.
Also, with a bit of research, it turns out (ironically considering my initial estimate of their cost) that the school board paid approximately $1,000 per laptop unit. It's posted in this link on the actual school board's website, along with several other informative tid-bits: http://www.lmsd.org/sections/news/default.php?t=today&p=lmsd_anno&id=1143
To remain on topic, the point being is that had the school been fiscally responsible and been informed properly, that they could have avoided the very issue that prompted them to authorize the installation of the monitoring software (technically theft, since if it's sitting in some misplaced book bag somewhere, the web cam likely won't be of much use).
At $1,000-a-pop, I refer back to my initial comment that started this line of discussion.... Had they invested smartly, there would have been far less incentive for the school board to authorize said "spying" technology on the computer systems, which they openly admit that they failed to inform parents and students about before issuing the units. With a $721k budget, if most of the budget was spent on units they could provide only about 700 units to their listed 6,900-count student body. Using thin client architecture (utilizing the confirmed pricing for the mini's), they could have provided well over 5,000 units on the exact same budget.
On one hand I commend the LMSD for embracing technology, and realizing that 20th century criteria isn't going to be of much use to 21st century students. They took the proper first steps in the right direction, but then took two steps back with this monitoring program.
[ link to this | view in chronology ]
Re: Re: Re: Re: Re: Re: Re: Why do students need laptops anyway?
Huh? Wasn't the whole discussion about the physical hardware? But now you say you weren't talking about physical hardware? Maybe you should go back and read the discussion again.
In this architecture, technically, any system that utilizes a central server for application deployment and the bulk of processing is a thin client.
What such a definition as that, the distinction between thin clients and other clients becomes virtually meaningless because full/fat/thick clients (even mainframe super computers) can also function in that way, which is why most people don't use such a definition. The machines that most people consider to be actual thin clients are incapable of functioning on their own, and that is the main distinction.
And as to why they didn't use actual thin clients, did you ever consider that reliability (elimination of a single point of failure), performance (network delays) and flexibility (the ability to operate in the absence of network availability) might have been considerations?
[ link to this | view in chronology ]
Re: Re: Re: Re: Re: Re: Re: Re: Why do students need laptops anyway?
"In this architecture, technically, any system that utilizes a central server for application deployment and the bulk of processing is a thin client. -- Anom"
The discussion was indeed about physical hardware, and continued to be so. Perhaps a re-read yourself might help. The entire point was that by utilizing the thin client architecture, that less expensive hardware could be utilized with the same results. If you're using RDC/VPN, the your hardware needs little to no processing/storage ability -- it's all handled at the server level.
"What such a definition as that, the distinction between thin clients and other clients becomes virtually meaningless because full/fat/thick clients (even mainframe super computers) can also function in that way, which is why most people don't use such a definition. The machines that most people consider to be actual thin clients are incapable of functioning on their own, and that is the main distinction. -- Anom"
No true. Your argument is flawed. Yes, technically you could run a super computer as a thin client, but what would be the point. Per a Google Definition search, such individuals/service who use the identical definition that I have used: wikipedia, wiktionary, oasis management, netc.org, 64-bit migration, daeja.com, msms.org, IBM.com. So, if my definition is flawed, at least I'm in good company in my misunderstanding and misuse of the definition.
"And as to why they didn't use actual thin clients, did you ever consider that reliability (elimination of a single point of failure), performance (network delays) and flexibility (the ability to operate in the absence of network availability) might have been considerations? -- Anom"
The "single point of failure" is a very outdated point of view and displays a lack of understanding of modern client/server environment. Software platforms such as Microsoft Office, Visual Studio, and even Google have moved in the direction of cloud computing (do a search, there are hundreds of other industry leaders moving onto the cloud). This allows the bulk of the processing to be handled at managed multi cluster server level. There are many reasons that this is the trend in the industry. 1) Affordability, 2) Maintainability, and 3) Dependability. The thin client/server architecture is no different: Use an inexpensive device to utilize the power of a cluster. It's cheaper to buy/maintain a very powerful server cluster than it is to purchase/maintain multiple stand-alone systems.
Which gets us back to the point. The units supplied to the students could have been around 1/10th the cost, thus reducing the financial impact of lost/stolen units that provoked the perceived need for monitoring software that led to this issue to begin with.
[ link to this | view in chronology ]
Re: Re: Re: Re: Re: Re: Re: Re: Re: Why do students need laptops anyway?
Hmmm, "..my reference to thin client is specifically intended to represent the concept of a thin client architecture; not the concept of some sort of physical hardware device" sure sounds like someone trying to claim that they weren't talking about "some sort of physical hardware device" to me. But maybe that was another "Justin Mason". So just how many Justin Masons are here, anyway?
No true. Your argument is flawed.
Actually, that argument was based on your own definition. Perhaps, then, there might be a slight problem with your definition?
Per a Google Definition search, such individuals/service who use the identical definition that I have used
OK, so a mainframe super computer is a thin client (uh huh). And I think your credibility has completely evaporated, in which case I see no reason to even read the rest of your comment.
[ link to this | view in chronology ]
Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Why do students need laptops anyway?
constructive to the conversation/comments I'd love to hear it though.
[ link to this | view in chronology ]
Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Why do students need laptops anyway?
constructive to the conversation/comments I'd love to hear it though."
Funny, I was going to say the same thing to you.
[ link to this | view in chronology ]
Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Why do students need laptops anyway?
http://technorati.com/videos/youtube.com%2Fwatch%3Fv%3DxQEyZRDq41Y
[ link to this | view in chronology ]
Re: Re: Re: Re: Re: Re: Re: Re: Why do students need laptops anyway?
Also wanted to follow up with one of your points that I felt perhaps was valid, that I didn't respond to in my previous post. Thin client network accessibility would indeed be inhibited by thin clients... however, in this case, so would the web cams that were use for monitoring ;)
Considering the web-cams were such a impactful part of the school boards overall deployment plan, I'd assume that likely network accessibility was not one of the considerations.
[ link to this | view in chronology ]
Re: Why do students need laptops anyway?
That could be the problem. If your IT staff is undersized or incompetent, you wouldn't want to rely on such a solution. Not saying that's the case here, but it could be a possibility in general.
[ link to this | view in chronology ]
Re: Re: Why do students need laptops anyway?
[ link to this | view in chronology ]
Re: Re: Re: Why do students need laptops anyway?
[ link to this | view in chronology ]
What's really scary? -- Letting Google into your computer.
* 38,445 views ·
* Added 11/28/2007
how to view unprotected webcams using nothing but google.
www.youtube.com/watch?v=BTkYaH-uPrk · Cached page
[ link to this | view in chronology ]
Re: What's really scary? -- Letting Google into your computer.
[ link to this | view in chronology ]
Rulz
[ link to this | view in chronology ]
Re: Rulz
There are some who might take it serious.
[ link to this | view in chronology ]
Re: Rulz
And you are clearly someone that squandered that right. Just because you failed at it, doesn't mean somebody else won't.
[ link to this | view in chronology ]
Re: Rulz
Same thing with the general population. Cameras on every corner (like in the UK) would be a start, but surveillance cameras in every home, like the Houston, Texas Chief of Police proposed, are what we really need. Just make it the law and then we won't need to piggyback on the schools to get them there. Really, I see no other way to detect and arrest the various kinds of IP thievery that occur every day, outside of the Internet, in private homes around the country. It's good that these kids are being taught that in school.
[ link to this | view in chronology ]
Re: Rulz
[ link to this | view in chronology ]
Re: Re: Rulz
I'm so freaking glad that I homeschool.
[ link to this | view in chronology ]
Re: Re: Rulz
[ link to this | view in chronology ]
I guess the staff loves their job - they get to oogle all kinds of pictures of minors and say it was for the sake of 'security'.
[ link to this | view in chronology ]
The Proverbial Trojan Horse
[ link to this | view in chronology ]
Scary...
Like, you can be arrested for not attending! FAIL!!
Back to the camera... If I found a camera shot of say, my daughter undressing etc. I'd be tearing up some school ass. You never know what they have recorded. A couple of girls in the buff at a sleepover, a kid getting called to the office because he gave his brother some M&Ms that looked like pills. There's a whole list of things that can go wrong.... all for our children's "protection"! Wonderful eh?
[ link to this | view in chronology ]
Looks like a potential market to me...
1) Form a company/division of existing company that's goal is to specifically cater to the 1-to-1 initiative for schools nationwide.
2) Build a very specific, low cost, thin client unit that could be licensed on a per-student basis to the school board (even a low-cost yearly license fee per unit)
3) Sell the server, and X number of units licenses to schools
4) includes basic maintenance on the units as a part of the license
a) Hardware failures could be simply handled by replacement of unit with another working unit, moving the broken unit into a slower-paced repair flow, and providing an immediate fix for the client
5) Install a GPS-oriented security device/firmware into every unit (LoJack comes to mind as an example) and have the on/off, monitoring, tracking handled by an independent security firm when a unit is stolen -- since technically it's just licensed to the schools, it remains the property of the vendor.
This would provide a sustainable, budget-friendly solution for schools to move their curriculum's into the 21st century, remove "privacy" concerns (such as the very topic of this article), remove the responsibility from the IT departments to maintain the individual units. Also, since, without the server, the units are virtually useless, it would negate the largest incentives for theft.
I'm sure there's fodder for a hefty government grant in there somewhere due to the focus on the education sector.
Honestly, I wish I had the time and resources to dedicate to this concept, I see it as a fantastic opportunity.
[ link to this | view in chronology ]
Re: Looks like a potential market to me...
[ link to this | view in chronology ]