Most schools have an acceptable use policy for their students which covers unauthorized vulnerability probing and port scanning. I can understand Ahmed's youth

Most schools have an acceptable use policy for their students which covers unauthorized vulnerability probing and port scanning. I can understand Ahmed's youthful curiosity about whether the vulnerabilities that he identified had been fixed...But he had handed off the info to the Dawson College IT team and the ball was no longer in his court. Running Acunetix against the college's/SkyTech's server(s) was a pretty dumb move. But hell, when you are in your early 20s, that's when you are supposed to make dumb mistakes. I'm all for teaching moments, but this "One Strike And You Are Expelled" issue irks me. Ultimately, this is about Edward Taza of Skytech Communications being sleazy and manipulative by threatening a scared, inexperienced 20 y/o college student with expensive legal action and implying the possibility of jail time unless he signed a non-disclosure agreement. The EFF should probably take a look at this.