WEBVTT 00:00:00.559 --> 00:00:02.580 BYOD, it's got a ring to it, doesn't it? It sounds 00:00:02.580 --> 00:00:06.320 snappy. Modern, almost like a party invitation. 00:00:06.519 --> 00:00:08.400 Bring your own device. It does have that vibe. 00:00:08.480 --> 00:00:10.699 It feels very Silicon Valley, freedom, flexibility, 00:00:10.859 --> 00:00:13.660 all that. Exactly. But if you take that concept 00:00:13.660 --> 00:00:17.480 and you drop it into a K -12 school, especially 00:00:17.480 --> 00:00:20.620 onto the desk of a school IT director, Well, 00:00:20.839 --> 00:00:23.859 BYOD isn't a party. It's usually the start of 00:00:23.859 --> 00:00:26.120 a massive migraine. Oh, a migraine is putting 00:00:26.120 --> 00:00:28.120 it lightly. I'd say it's more like a systemic 00:00:28.120 --> 00:00:30.620 shock. I mean, on the surface, BYOD promises 00:00:30.620 --> 00:00:33.140 this connected utopia, right? But if you scratch 00:00:33.140 --> 00:00:34.759 that surface, which is what we're doing today, 00:00:35.200 --> 00:00:39.899 you find this tangled mess of logistics, inequality, 00:00:40.119 --> 00:00:42.659 and some really gaping security holes. And that 00:00:42.659 --> 00:00:44.939 is our mission today. We are diving deep into 00:00:44.939 --> 00:00:47.340 an article from hack science dot education called 00:00:47.340 --> 00:00:50.060 BYOD and school networks. And I have to say it 00:00:50.060 --> 00:00:52.259 reads less like a technical manual and more like 00:00:52.259 --> 00:00:54.719 a warning label. It really does. It gets right 00:00:54.719 --> 00:00:57.560 into the tension between two huge forces in education, 00:00:57.899 --> 00:01:00.140 the need to save money and the need to maintain 00:01:00.140 --> 00:01:02.840 control. And those two things almost never go 00:01:02.840 --> 00:01:05.519 hand in hand. We've got a lot to unpack, including 00:01:05.519 --> 00:01:08.299 a specific kind of a real world horror story 00:01:08.299 --> 00:01:10.939 that we'll get to later. It involves a student 00:01:10.939 --> 00:01:14.290 named Kara. a school computer, and a security 00:01:14.290 --> 00:01:17.129 breach that is so simple it's actually terrifying. 00:01:17.349 --> 00:01:20.650 That story is the perfect example of the human 00:01:20.650 --> 00:01:22.870 factor. You know, you can spend a fortune on 00:01:22.870 --> 00:01:25.469 firewalls, but sometimes the biggest vulnerability 00:01:25.469 --> 00:01:28.530 is just a teenager with a data plan. So let's 00:01:28.530 --> 00:01:30.549 start at the beginning. Why are schools even 00:01:30.549 --> 00:01:32.870 doing this? I mean, intuitively, it feels cleaner 00:01:32.870 --> 00:01:35.489 to just give every kid the same laptop, a one 00:01:35.489 --> 00:01:38.109 -to -one program. It is cleaner, for sure. That 00:01:38.109 --> 00:01:40.790 model, one -to -one, was the gold standard for 00:01:40.790 --> 00:01:42.939 a while. Yeah. But you have to think about the 00:01:42.939 --> 00:01:45.319 sheer scale of that cost. Right. I was just doing 00:01:45.319 --> 00:01:47.719 the math in my head. A high school with 2 ,000 00:01:47.719 --> 00:01:50.439 students. That's 2 ,000 laptops. And it's not 00:01:50.439 --> 00:01:52.500 just the purchase price. The source material 00:01:52.500 --> 00:01:55.060 is really clear. This is the main driver for 00:01:55.060 --> 00:01:58.579 BYOD. Minimizing the expense. You get the chargers, 00:01:58.640 --> 00:02:01.079 the protective cases, because kids drop things. 00:02:01.159 --> 00:02:04.040 You have software licenses, insurance. And paying 00:02:04.040 --> 00:02:06.579 the IT staff to fix them when the keys get picked 00:02:06.579 --> 00:02:08.939 off or the screens get cracked. Exactly. The 00:02:08.939 --> 00:02:12.349 total cost of ownership? The TCO is just astronomical. 00:02:12.969 --> 00:02:14.569 So the school board looks at the budget, then 00:02:14.569 --> 00:02:16.830 they look at the students, and they notice, wait 00:02:16.830 --> 00:02:19.610 a minute, most of these kids already have a computer 00:02:19.610 --> 00:02:22.509 in their pocket. The smartphone. Or maybe a tablet 00:02:22.509 --> 00:02:25.610 at home. Right. So the logic becomes, why are 00:02:25.610 --> 00:02:28.210 we spending millions to duplicate hardware these 00:02:28.210 --> 00:02:30.490 families already own? Let's just use theirs. 00:02:30.909 --> 00:02:33.389 Bring your own device. It just shifts the cost 00:02:33.389 --> 00:02:36.009 from the school's budget to the family's. Precisely. 00:02:36.330 --> 00:02:38.639 And the mechanics are pretty simple. The text 00:02:38.639 --> 00:02:41.340 says students bring their personal devices, connect 00:02:41.340 --> 00:02:44.439 to a special school Wi -Fi network, the SSID, 00:02:44.900 --> 00:02:47.729 and get to work. It sounds elegant. It sounds 00:02:47.729 --> 00:02:49.650 great in a boardroom. Sure, look at all the money 00:02:49.650 --> 00:02:52.050 we're saving. But the article points out pretty 00:02:52.050 --> 00:02:54.509 fast that this creates a huge social problem 00:02:54.509 --> 00:02:57.669 right away. Yes, the equity issue. And this is 00:02:57.669 --> 00:02:59.669 where that whole efficiency argument starts to 00:02:59.669 --> 00:03:02.569 crumble. The text is explicit. It saves the school 00:03:02.569 --> 00:03:05.710 money, but it just assumes every family can afford 00:03:05.710 --> 00:03:07.889 a device. And not just any device, but a good 00:03:07.889 --> 00:03:10.740 one. Right. Correct. There's a world of difference 00:03:10.740 --> 00:03:13.759 between writing an essay on a new iPad Pro with 00:03:13.759 --> 00:03:16.520 a keyboard versus trying to type it on a four 00:03:16.520 --> 00:03:18.639 -year -old phone with a cracked screen. A phone 00:03:18.639 --> 00:03:20.819 whose battery dies in 20 minutes. The source 00:03:20.819 --> 00:03:23.500 calls them insufficient devices. Or malfunctioning 00:03:23.500 --> 00:03:25.819 devices. And just imagine that in the classroom 00:03:25.819 --> 00:03:27.560 you have the haves and the have -nots sitting 00:03:27.560 --> 00:03:29.979 side by side. One student is flying through their 00:03:29.979 --> 00:03:32.259 research and the kid next to them can't even 00:03:32.259 --> 00:03:35.090 get the browser to load. It makes a student's 00:03:35.090 --> 00:03:37.629 socioeconomic status visible. It's right there 00:03:37.629 --> 00:03:39.669 on the desk for everyone to see. It does. And 00:03:39.669 --> 00:03:42.210 it makes the teacher's job impossible. If a school 00:03:42.210 --> 00:03:45.009 -owned Chromebook breaks, the teacher can swamp 00:03:45.009 --> 00:03:48.729 it out. But in a BYOD model, what can they do? 00:03:49.030 --> 00:03:51.509 It's not the school's computer. That leads perfectly 00:03:51.509 --> 00:03:53.550 into the IT side of this. This is the part I 00:03:53.550 --> 00:03:56.169 found fascinating. If I'm an IT director and 00:03:56.169 --> 00:03:59.509 a kid brings in a laptop full of viruses, what's 00:03:59.509 --> 00:04:02.580 my obligation? Do I fix it? The article is very 00:04:02.580 --> 00:04:04.919 fun on this. It describes what it calls a not 00:04:04.919 --> 00:04:08.340 -my -job stance. It basically says school IT 00:04:08.340 --> 00:04:10.039 professionals will not support hardware they 00:04:10.039 --> 00:04:12.860 do not own. Period. Which, at first glance, sounds 00:04:12.860 --> 00:04:14.639 a little harsh. Sorry kid, you're on your own. 00:04:15.020 --> 00:04:16.720 But when you think it through, it makes total 00:04:16.720 --> 00:04:19.519 sense. It's the only way they can survive. I 00:04:19.519 --> 00:04:22.019 mean, think about the logistics. If the school 00:04:22.019 --> 00:04:24.399 owns the devices, they're all the same model. 00:04:24.680 --> 00:04:28.600 You can stock parts. You know, the OS. In a BYOD 00:04:28.600 --> 00:04:31.019 world, you have 30 different Android phones, 00:04:31.779 --> 00:04:34.620 five kinds of iPhones, Windows laptops, MacBooks. 00:04:34.720 --> 00:04:37.519 You can't expect one person to be a genius bar 00:04:37.519 --> 00:04:39.579 for every piece of electronics made in the last 00:04:39.579 --> 00:04:42.139 10 years. Exactly. And then there's the liability. 00:04:42.699 --> 00:04:45.279 Imagine an IT tech tries to fix a student's personal 00:04:45.279 --> 00:04:48.040 laptop just to be helpful, and they accidentally 00:04:48.040 --> 00:04:50.560 wipe the hard drive. Oh, nightmare. Family photos, 00:04:50.779 --> 00:04:52.579 gone, all their homework. And now the school's 00:04:52.579 --> 00:04:54.870 getting sued. Oh. So that boundary has to be 00:04:54.870 --> 00:04:57.949 rigid. The IT department's message is, we provide 00:04:57.949 --> 00:05:00.509 the network, you provide the device. If your 00:05:00.509 --> 00:05:04.290 device breaks, that's your problem. OK. So if 00:05:04.290 --> 00:05:06.550 IT won't touch the hardware and all the hardware 00:05:06.550 --> 00:05:09.730 is different, how does a student even get their 00:05:09.730 --> 00:05:12.870 work to the teacher in a format that works? So 00:05:12.870 --> 00:05:15.110 the article talks about a middle ground strategy. 00:05:15.990 --> 00:05:20.089 The IT folks shift their focus. It's not about 00:05:20.089 --> 00:05:21.990 the hardware anymore. It's about the software. 00:05:23.509 --> 00:05:26.370 specifically cloud -based apps. Things like Google 00:05:26.370 --> 00:05:29.970 Drive, Google Docs. Exactly. The source specifically 00:05:29.970 --> 00:05:33.129 mentions Google Workspace apps. The strategy 00:05:33.129 --> 00:05:35.889 is to be platform agnostic. It doesn't matter 00:05:35.889 --> 00:05:39.009 if you're on an iPhone, an Android, a PC. As 00:05:39.009 --> 00:05:41.050 long as you have a web browser, you can get to 00:05:41.050 --> 00:05:43.449 the school's system. So the device is just a 00:05:43.449 --> 00:05:45.569 dumb terminal. It's a window into the school's 00:05:45.569 --> 00:05:47.910 cloud. That's the goal. It solves the compatibility 00:05:47.910 --> 00:05:51.850 problem. But it creates a new one. Connectivity. 00:05:52.209 --> 00:05:53.670 For the cloud to work, you need the internet. 00:05:54.029 --> 00:05:55.829 And this is where the network gets really tricky. 00:05:55.949 --> 00:05:57.870 Because if I'm a student and I have unlimited 00:05:57.870 --> 00:06:00.189 data on my phone. Right. Why would you even connect 00:06:00.189 --> 00:06:02.589 to the school Wi -Fi? The school Wi -Fi is filtered. 00:06:02.730 --> 00:06:05.170 It blocks TikTok. Your personal 5G connection 00:06:05.170 --> 00:06:07.490 doesn't. So I just stay on my cellular data. 00:06:07.689 --> 00:06:10.129 And as the text points out, if you're on your 00:06:10.129 --> 00:06:12.649 cell network, you are completely invisible to 00:06:12.649 --> 00:06:14.870 the school. You're in the room physically, but 00:06:14.870 --> 00:06:16.889 digitally you're outside the walls. But what 00:06:16.889 --> 00:06:19.699 about the kids who don't have data? or who are 00:06:19.699 --> 00:06:22.300 using a laptop that needs Wi -Fi. That's when 00:06:22.300 --> 00:06:25.120 the school provides what's called a guest SSID. 00:06:25.459 --> 00:06:28.399 The article describes it as a partitioned network. 00:06:28.579 --> 00:06:31.379 Like a quarantine zone. In a way, yeah. You want 00:06:31.379 --> 00:06:33.459 them to get to the internet, to Google Docs, 00:06:33.560 --> 00:06:36.100 but you absolutely do not want their personal, 00:06:36.480 --> 00:06:39.279 potentially virus -ridden laptop touching the 00:06:39.279 --> 00:06:41.399 main school network. You don't want it to be 00:06:41.399 --> 00:06:44.420 able to see the finance server or the grading 00:06:44.420 --> 00:06:46.660 system. So you separate the traffic? You build 00:06:46.660 --> 00:06:49.149 a digital fence. The guest network goes straight 00:06:49.149 --> 00:06:51.610 out to the internet, and the important internal 00:06:51.610 --> 00:06:54.230 stuff stays safe behind the firewall. OK, so 00:06:54.230 --> 00:06:56.550 we've got the landscape, kids on all kinds of 00:06:56.550 --> 00:06:59.410 devices, IT saying, don't ask me to fix it, guest 00:06:59.410 --> 00:07:01.870 networks. It feels like a really fragile balance. 00:07:02.029 --> 00:07:04.050 And that is exactly where the system breaks. 00:07:04.310 --> 00:07:06.170 And not because of some sophisticated hacker. 00:07:06.389 --> 00:07:08.709 Yeah. It breaks because of a loophole. Which 00:07:08.709 --> 00:07:11.689 brings us to the Kara story. I read this part 00:07:11.689 --> 00:07:14.089 of the thirst material three times because it's 00:07:14.089 --> 00:07:18.269 just so cool. clever and scary. It is a classic 00:07:18.269 --> 00:07:20.870 example of lateral thinking. So let's set the 00:07:20.870 --> 00:07:22.569 scene the source gives us. We're in a multimedia 00:07:22.569 --> 00:07:24.750 studio. So this isn't a normal classroom. This 00:07:24.750 --> 00:07:27.550 is where they keep the expensive computers for 00:07:27.550 --> 00:07:29.449 video editing and things like that. Correct. 00:07:29.970 --> 00:07:33.029 And Kara, a student, is there during her study 00:07:33.029 --> 00:07:35.910 hall. She sits down at one of the school's Macintosh 00:07:35.910 --> 00:07:38.810 computers. And to be clear, this is a school 00:07:38.810 --> 00:07:41.329 -owned device. So she expects it to be locked 00:07:41.329 --> 00:07:45.560 down, filtered, safe. Presumably. But she opens 00:07:45.560 --> 00:07:47.860 the web browser and checks the history. And what 00:07:47.860 --> 00:07:50.399 does she find? Pornography. Right there in the 00:07:50.399 --> 00:07:53.459 browser history. On a school computer. Now, just 00:07:53.459 --> 00:07:56.740 pause for a second. Imagine that discovery. Kara 00:07:56.740 --> 00:07:59.759 does the right thing. She reports it to the technology 00:07:59.759 --> 00:08:02.519 integration specialist. And the first assumption, 00:08:02.519 --> 00:08:04.720 of course, is that the tech failed. Right. The 00:08:04.720 --> 00:08:07.339 internet filter must be broken. Why did the filter 00:08:07.339 --> 00:08:09.889 let this through? Exactly. So the specialist 00:08:09.889 --> 00:08:12.189 investigates, checks the logs, checks the settings, 00:08:12.490 --> 00:08:14.610 and the tech says he confirmed the internet filter 00:08:14.610 --> 00:08:17.449 was still functioning. So the wall was up, the 00:08:17.449 --> 00:08:20.230 gate was locked, but the contraband got in anyway? 00:08:20.629 --> 00:08:23.189 It's a mystery. Until the specialist looks at 00:08:23.189 --> 00:08:25.850 the physical computer and he finds a hardware 00:08:25.850 --> 00:08:29.470 oversight. The NIC? The network interface card. 00:08:30.250 --> 00:08:33.190 Specifically the wireless one. The article explains 00:08:33.190 --> 00:08:35.389 that the technicians who installed these Macs, 00:08:35.389 --> 00:08:37.769 they hooked them up with ethernet cables. The 00:08:37.769 --> 00:08:40.129 blue cables. That's standard for a computer lab. 00:08:40.350 --> 00:08:42.509 It's faster and more reliable. Right. And all 00:08:42.509 --> 00:08:44.190 the traffic going through that ethernet cable 00:08:44.190 --> 00:08:48.110 was filtered. It was safe. But the technicians 00:08:48.110 --> 00:08:51.009 forgot to disable the wireless card on the computers. 00:08:51.409 --> 00:08:55.320 Oh. I see exactly where this is going. The computer 00:08:55.320 --> 00:08:58.100 had two doors. One was guarded, the ethernet 00:08:58.100 --> 00:09:01.600 cable, and the other one, the Wi -Fi, was just 00:09:01.600 --> 00:09:04.740 unlocked. Precisely. The previous user, the one 00:09:04.740 --> 00:09:06.720 looking at the inappropriate sites, they were 00:09:06.720 --> 00:09:08.679 clever. They didn't try to hack the firewall. 00:09:08.820 --> 00:09:10.519 They just walked around it. So walk us through 00:09:10.519 --> 00:09:12.500 the hack. How did they actually do it? The text 00:09:12.500 --> 00:09:15.279 details it perfectly. Yeah. The user simply activated 00:09:15.279 --> 00:09:17.720 the wireless card on the Mac. Then they took 00:09:17.720 --> 00:09:20.259 out their personal phone. The BYOD element. And 00:09:20.259 --> 00:09:22.019 they turned on the personal hotspot feature. 00:09:22.250 --> 00:09:24.610 And they connected the school's Mac to their 00:09:24.610 --> 00:09:27.230 own phone's Wi -Fi. And just like that, the school 00:09:27.230 --> 00:09:28.990 computer isn't on the school network anymore. 00:09:29.210 --> 00:09:32.029 It's surfing the web through the phone's cell 00:09:32.029 --> 00:09:34.529 connection. Completely bypassing the school's 00:09:34.529 --> 00:09:38.090 gateway, the filter, all the logging. Everything. 00:09:38.230 --> 00:09:41.129 They created a bridge. That is so simple. You 00:09:41.129 --> 00:09:43.809 don't need to know how to code. You just need 00:09:43.809 --> 00:09:46.110 a phone and a computer where someone forgot to 00:09:46.110 --> 00:09:48.870 lock the Wi -Fi settings. And the fallout, as 00:09:48.870 --> 00:09:51.990 the article points out, is twofold. First, obviously, 00:09:52.220 --> 00:09:55.139 The content. Exposing students to inappropriate 00:09:55.139 --> 00:09:57.600 material is a liability nightmare. But the second 00:09:57.600 --> 00:10:00.399 one is what probably keeps IT directors up at 00:10:00.399 --> 00:10:03.480 night. The malware risk. Yes. The text says it 00:10:03.480 --> 00:10:06.679 clearly. Devices not owned by the school posed 00:10:06.679 --> 00:10:09.460 a potential threat to the school. Think about 00:10:09.460 --> 00:10:12.059 the data path here. The computer is on the unfiltered 00:10:12.059 --> 00:10:14.639 internet via the phone. But it's still plugged 00:10:14.639 --> 00:10:16.580 into the school's network with the cable, right? 00:10:16.720 --> 00:10:19.259 It is. So you have a computer that is straddling 00:10:19.259 --> 00:10:22.139 two networks. It has one foot in the wild west 00:10:22.139 --> 00:10:24.840 of the cellular network and one foot in the secure 00:10:24.840 --> 00:10:27.600 internal school network. So if a virus comes 00:10:27.600 --> 00:10:30.100 down from the phone? It lands on the Mac. And 00:10:30.100 --> 00:10:32.019 from the Mac, it can then crawl backwards up 00:10:32.019 --> 00:10:34.480 the ethernet cable and infect the rest of the 00:10:34.480 --> 00:10:37.019 school. The phone acted as a bridge. It's amazing 00:10:37.019 --> 00:10:39.379 because the school didn't even have a BYOD policy 00:10:39.379 --> 00:10:43.039 in that room. It was a school computer. But just... 00:10:42.809 --> 00:10:46.029 The presence of a personal device in a student's 00:10:46.029 --> 00:10:48.269 pocket was the key that unlocked everything. 00:10:48.909 --> 00:10:51.850 That is the critical insight. In a world where 00:10:51.850 --> 00:10:54.330 every student has an unfiltered internet gateway 00:10:54.330 --> 00:10:57.730 in their pocket, the whole idea of a secure perimeter 00:10:57.730 --> 00:11:00.769 becomes almost meaningless. You can't just... 00:11:00.700 --> 00:11:02.940 build a wall when the students are bringing their 00:11:02.940 --> 00:11:05.139 own tunnels with them. Which brings us to the 00:11:05.139 --> 00:11:07.700 broader human factor that the article gets into. 00:11:07.899 --> 00:11:10.320 It's not just about kids trying to break the 00:11:10.320 --> 00:11:13.259 rules, is it? It's about how these devices just 00:11:13.259 --> 00:11:15.860 change the classroom. Yeah, there's a section 00:11:15.860 --> 00:11:18.080 on the psychology of it. It mentions that educators 00:11:18.080 --> 00:11:21.259 are really concerned about distraction. The phone 00:11:21.259 --> 00:11:24.039 buzzing in the pocket. The notification light? 00:11:24.279 --> 00:11:26.360 The source makes a really strong claim here. 00:11:26.519 --> 00:11:29.000 It says, it has become clear that human brains 00:11:29.000 --> 00:11:32.080 are unable to multitask. I feel personally attacked. 00:11:32.179 --> 00:11:34.080 I try to multitask constantly. I'm probably doing 00:11:34.080 --> 00:11:37.620 it right now. We all think we can. But the research 00:11:37.620 --> 00:11:40.039 and what the educators in the article are saying 00:11:40.039 --> 00:11:42.539 is that we're actually just rapidly switching 00:11:42.539 --> 00:11:44.799 our focus back and forth. And that switching 00:11:44.799 --> 00:11:48.279 kills concentration. If you have your own device, 00:11:48.559 --> 00:11:50.759 you have your entire social life vibrating in 00:11:50.759 --> 00:11:52.539 your pocket while you're trying to learn algebra. 00:11:52.740 --> 00:11:54.899 And since it's your device, the school has less 00:11:54.899 --> 00:11:57.580 authority to just take it away. They can't. It 00:11:57.580 --> 00:12:00.220 blurs the lines. If a kid is reading a comic 00:12:00.220 --> 00:12:03.179 book in class, the teacher takes it. If a student 00:12:03.179 --> 00:12:04.960 is texting on their parents' thousand dollar 00:12:04.960 --> 00:12:08.820 smartphone, taking that away is a much more complicated 00:12:08.820 --> 00:12:11.580 situation. And speaking of complicated situations, 00:12:11.659 --> 00:12:14.500 we need to talk about SEPA. The article brings 00:12:14.500 --> 00:12:17.580 this up as a major regulatory risk. CPET, the 00:12:17.580 --> 00:12:19.220 Children's Internet Protection Act. This is a 00:12:19.220 --> 00:12:21.220 big one. It's a federal law in the U .S. The 00:12:21.220 --> 00:12:23.580 text explains that school filters exist, first 00:12:23.580 --> 00:12:26.259 and foremost, to comply with this law. It's tied 00:12:26.259 --> 00:12:28.960 to funding, isn't it? Exactly. The e -rate program 00:12:28.960 --> 00:12:31.460 gives schools federal money for Internet. But 00:12:31.460 --> 00:12:34.059 the condition is you have to filter out harmful 00:12:34.059 --> 00:12:36.570 and obscene content. You have to prove you're 00:12:36.570 --> 00:12:39.230 protecting the kids. So when a kid uses their 00:12:39.230 --> 00:12:42.710 own data or a hot spot to look at, as the text 00:12:42.710 --> 00:12:46.330 says, unsavory information, are they breaking 00:12:46.330 --> 00:12:49.750 the law? They are bypassing the very safeguards 00:12:49.750 --> 00:12:52.730 the school is legally required to maintain. The 00:12:52.730 --> 00:12:54.909 school is doing its job by filtering its own 00:12:54.909 --> 00:12:58.169 network. But the personal device creates a loophole 00:12:58.169 --> 00:13:00.549 the law wasn't really built to handle. It's like 00:13:00.549 --> 00:13:02.990 the school builds a 10 -foot fence and the student 00:13:02.990 --> 00:13:05.470 just flies a drone over it. Or just walks through 00:13:05.470 --> 00:13:07.129 the gate with the contraband in their pocket. 00:13:08.009 --> 00:13:10.490 The article notes students may be accessing and 00:13:10.490 --> 00:13:13.029 sharing all types of unsavory information right 00:13:13.029 --> 00:13:15.090 under the teacher's noses. And because it's not 00:13:15.090 --> 00:13:17.429 on the school Wi -Fi, there's no record of it. 00:13:17.570 --> 00:13:19.870 The IT department can't see it. They can't stop 00:13:19.870 --> 00:13:22.350 it. It really paints this picture of a losing 00:13:22.350 --> 00:13:25.490 battle for control. On one side, financial pressure. 00:13:25.649 --> 00:13:27.269 Bring your own device. We can't afford them. 00:13:27.289 --> 00:13:30.269 And on the other, bi -T pressure. We can't secure 00:13:30.269 --> 00:13:32.490 devices we don't own. And caught in the middle 00:13:32.490 --> 00:13:35.210 is the student who just wants to connect and, 00:13:35.210 --> 00:13:37.509 well, sometimes break the rules. So bringing 00:13:37.509 --> 00:13:39.970 this all together, the article really strips 00:13:39.970 --> 00:13:42.169 away the buzzwords and shows us the plumbing 00:13:42.169 --> 00:13:45.509 of BYOD. And it is not as neat and tidy as the 00:13:45.509 --> 00:13:48.629 brochures suggest. It's not. It shows that BYOD 00:13:48.629 --> 00:13:51.730 is fundamentally a compromise. It solves one 00:13:51.730 --> 00:13:53.909 problem of money, but it creates a whole host 00:13:53.909 --> 00:13:56.049 of others. We talked about the economics, how 00:13:56.049 --> 00:13:58.529 saving money on one -to -one is the big driver. 00:13:58.710 --> 00:14:01.490 But then we saw the equity costs, how that saving 00:14:01.490 --> 00:14:04.210 for the school becomes a burden on families and 00:14:04.210 --> 00:14:06.210 creates this digital divide right in the classroom. 00:14:06.490 --> 00:14:09.519 We looked at the IT reality. that not my job 00:14:09.519 --> 00:14:12.539 boundary, which again makes total sense, but 00:14:12.539 --> 00:14:14.899 it leaves kids with broken tech high and dry. 00:14:15.259 --> 00:14:17.559 We really dissected that Cara incident. I think 00:14:17.559 --> 00:14:19.919 that's the most memorable part. The realization 00:14:19.919 --> 00:14:22.679 that a simple phone hotspot can make a multi 00:14:22.679 --> 00:14:25.720 thousand dollar filtering system completely useless. 00:14:26.220 --> 00:14:27.799 It makes you wonder what the future is. I mean, 00:14:27.820 --> 00:14:29.519 if you can't lock it all down, what do you do? 00:14:29.720 --> 00:14:31.840 Ban phones entirely. Some schools are trying 00:14:31.840 --> 00:14:33.820 that. But I think the text leaves us with the 00:14:33.820 --> 00:14:36.919 sense that technology is here to stay. The real 00:14:36.919 --> 00:14:40.860 problem is that this mix of personal and institutional 00:14:40.860 --> 00:14:43.899 tech creates these holes in the fence that are 00:14:43.899 --> 00:14:46.740 just very, very hard to patch with technology 00:14:46.740 --> 00:14:49.019 alone. It feels like we're trying to apply a 00:14:49.019 --> 00:14:51.320 technical solution to what is really a behavior 00:14:51.320 --> 00:14:54.559 problem. Or a cultural reality. The devices are 00:14:54.559 --> 00:14:56.879 here. They're in every pocket. We can't pretend 00:14:56.879 --> 00:14:59.220 they aren't. The challenge isn't just how do 00:14:59.220 --> 00:15:02.159 we block them, but maybe how do we teach students 00:15:02.159 --> 00:15:04.600 to exist with them responsibly? So here's a thought 00:15:04.600 --> 00:15:07.799 to leave you with. Schools spend millions on 00:15:07.799 --> 00:15:10.539 firewalls, on filters, on monitoring software. 00:15:11.179 --> 00:15:13.879 But in the story of Kara, that entire security 00:15:13.879 --> 00:15:16.419 apparatus was defeated by a teenager with a cell 00:15:16.419 --> 00:15:19.100 phone and a hunch about a settings menu. It suggests 00:15:19.100 --> 00:15:21.399 that maybe relying only on those technical blocks 00:15:21.399 --> 00:15:24.600 is a fragile strategy. Exactly. If the blocks 00:15:24.600 --> 00:15:27.240 are that easy to bypass, maybe the real firewall 00:15:27.240 --> 00:15:29.320 needs to be built in the student's own judgment, 00:15:29.700 --> 00:15:32.500 not just in the server room. But teaching that... 00:15:32.570 --> 00:15:34.590 That's a whole different challenge. Indeed it 00:15:34.590 --> 00:15:36.529 is. That's the hardest subject of all. Thanks 00:15:36.529 --> 00:15:38.490 for diving in with us today. Check your Wi -Fi 00:15:38.490 --> 00:15:40.970 settings, watch out for those hot spots, and 00:15:40.970 --> 00:15:42.330 we'll see you on the next one.