After posting yesterday about the hackers who wanted in to the Business School at Harvard I heard a story on Marketplace last night. I should explain that one of the things I've always liked about Marketplace is they seem to have the best stories about technology of all the shows on NPR. They completely botched the Harvard story though. At the end of it one would have thought these people were doing something that was as clearly wrong as robbing a bank.

The truth is they did what any good business person should do. They were observant and creative. They tried a few common variations and got the information they were looking for. Ten years ago the security being used by Harvard Business School might have been enough. It is Harvard's responsibility to secure their information. Harvard should be apologizing to the students and admitting them instead of blaming them for Harvard's lack of due diligence.