School Proxy Admin Learns About Self-PWNAGE

I'm always on the lookout for proxy news. You may remember this story about Florida government workers bypassing URL filtering in the workplace (one of my present job duties is Network Nazi for a large organization). And yes, I'm well aware of the proxy angle in the latest Palin Pwnage but I'm really tired of her and that's so "last week" anyway.

It seems this fellow decided to open his school's filtered proxy to the world so that students wouldn't have to be bothered entering a user name and password to use it.

His reasoning...

"My thought was why would someone use a proxy that has a filter on it? "

The result: tens of thousands of users from all over the world slam his proxy, using it to forum-SPAM the planet, and resulting in his IP address getting blacklisted by Google ("We're Sorry...").

Then he decides the right thing to do is blog about his PWNAGE.

Jesus.

In a way this is commendable. I've known many admins who would attribute an event such as this one to "getting hacked" in one way or another and initiate a massive cover-up, but the guy did own up to screwing the pooch all by himself. (In fact, we have an assclown admin at work who smashed the Exchange servers single-handedly and the entire IT department, from the top down, conspired - successfully - to cover it up. This is one of the reasons they don't like security - we uncover the truth.)

Still, in many business environments, this is the kind of crap that gets you canned on the spot.