Student Hacks IIT Kanpur Website After Admission Rejection, Gets Internship Offer

Kanpur: A unique case related to Indian Institute of Technology (IIT) Kanpur is in discussion. Angered over not getting admission into a cybersecurity programme, a student allegedly hacked into the websites of IIT Kanpur and IIT Madras. Usually in such cases, legal action is taken by registering an FIR, but this time the institute chose a different path. Considering the technical ability of the student, instead of immediately registering a criminal case against him, it has been decided to evaluate his eligibility and consider internship or admission. This decision has sparked a new debate on cybersecurity and channelling talent.

What was the whole matter?

According to the information, the student had applied for the new Bachelor of Cyber Security programme of IIT Kanpur but could not be selected. After this, he allegedly took advantage of the security flaws in the institute's website and hacked it. Later it came to light that the website of IIT Madras was also affected in a similar manner. After the incident, the institute started reviewing the security arrangements and conducted a technical investigation of the entire matter.

Why was internship considered instead of FIR?

During the investigation, institute officials believed that the level of technical understanding and cyber skills demonstrated by the student was exceptional. That's why the administration decided to assess his capability instead of just taking punitive action. If his/her qualifications are found appropriate in the assessment, the possibility of giving him/her an internship or other opportunities in the institute may be considered. However, the final decision will be taken only after technical evaluation.

Is this decision a sign of changed thinking in the field of cybersecurity?

Experts believe that many big tech companies around the world strengthen their security with the help of ethical hackers. Many times, instead of punishing youth who identify safety lapses, they are given the opportunity to act responsibly. However, it is also clarified that accessing a system without permission is a violation of the law and cannot be considered normal or acceptable behaviour. In this case also the institute has tried to strike a balance between talent and discipline.

Why is IIT Kanpur's new cybersecurity programme special?

IIT Kanpur has started Bachelor of Cybersecurity programme this year. In this course, importance is given not only on the basis of examination marks but also on the prior experience and practical ability of the candidates in the field of cybersecurity. The selection process includes stages like technical assessment and hackathon, so that students who have genuine skills get an opportunity.

Is there a lesson for institutions from this incident?

This entire incident has raised two important questions. First, educational institutions will have to continuously strengthen their digital security so that such incidents are not repeated. Secondly, it is equally important to provide right direction and opportunities to the youth who have exceptional technical talent. At present, IIT Kanpur is preparing to formally evaluate the technical ability of the students. Only after this it will be decided whether he will get a chance in the institute or any further legal action will be taken against him.