Infosec discussion

 Discuss the following scenario: A student suspected and found a loophole in her university’s computer security system that allowed her access to other students’ records. She told the system administrator about the loophole, but she continued to access other records until the problem was corrected two weeks later. Were her actions ethical?