Princeton student discovers university LDAP server leaves personal data exposed

18.02.2011

"What's shocking is that Princeton University publishes all this information via its LDAP directory," Li says on his Web page. "Not just to other Princeton students -- they get see even more about their classmates: university ID numbers, pictures, birthdays and so on -- but to anybody with an Internet connection. The university makes it easy to find this information, too ..."

Li says he thinks that some of the information available via the LDAP server was protected by privacy laws.

in Network World's Data Center section.