It's hard. I am actually doing both if I am not careful. Once,
making use of my knowledge, I get into NYP and downloaded the
necessary software for myself. Anyway, after that incident, it
freaked me out. I didn't dare to do such things anymore. Too risky.
I also didn't report that loophole. NTU lagi worse. I actually can
go into their Intranet without a password and search for student
records. Naturally, it came up. Again, never report loophole. But I
think they fixed it because one month later, no such problems. NYP
one you probe around for a while can use already.
