Today I came across a very disturbing story by Mike Masnick at techdirt. Mike reports about a class action suit by some students who claim the school was monitoring them through the webcam from laptops they were issued by said school. The issue came to light after one student was disciplined for inappropriate behavior at home with an image taken by his laptop’s webcam as evidence.

Mike also links to a feature by frontline  of yet another school which also claimed to be monitoring their students at home through the webcam and other activities on the laptops they were given.

My first reaction was disbelief. Such level of monitoring on the school premises would be something I could maybe accept but at home after school hours? After reading the details on the class action suit my first thought was, is this even legal? I am no lawyer and have no idea if such behaviour is legal or not but it seems to me like a very bad case of invasion of privacy. After watching the frontline report in which the school official detailed their activity I wondered whether there is actually a loop hole being exploited? Companies are allowed to monitor employee emails because the employee would be using the company’s infrastructure to send the email through. From the frontline report I got the distinct impression that the school doesn’t turn on the camera to spy on their students but only monitor the output of the camera if it is already running. From a legal point of view I guess it might be the same argument as email. The school is only monitoring the usage of its device through its infrastructure (I am assuming they’re providing the student with internet access as well).

However let’s put the legality issue, on which I can only speculate, aside.  How is it that nowadays a school can even think about doing such a thing, much less action it? To me it sounds unbelievable and it’s not just schools, the news is full of stories about people monitoring spouses through hidden GPS devices in their cars, mobile phones with spy software installed on them. Technology has really moved forward these last few years and there are a lot of options for anyone who wants to spy on someone else. People seem to think that since you are able to spy on someone, then it’s okay to do so. Obviously this is not the case and shouldn’t be done even if it were.

Then there are the unintended consequences. Students are being brought up with the notion that they can’t trust anyone, not even their schools. They are being exposed to technology, which obviously is a great thing, but at the same time they are being taught that such technology is hostile to them.  Another unintended consequence could be that this laptop is the only computer with an internet connection at home and the child’s parents use it for internet banking or some other confidential activity. On the frontline feature it was obvious that monitoring on the machine was total and it was trivial for anyone monitoring to see all that was typed. What if a father logs on to his company’s network from his son’s laptop? The company he works for would be exposed.

As I claimed in many of my previous articles the attack vectors you need to protect yourself against are truly endless, although I have to admit that I didn’t really see this coming at all. One really needs to be vigilant and monitor his system for any suspicious activities as you really do not know where the next attack is from or who is watching you.