School’s Closed!

Just finished reading this article on SecurityFocus.

Two Ohio high-school students face expulsion and criminal charges after allegedly using their access to a Web server to post a notice that the local schools had closed due to snow.

It seems that the unnamed perpetrators used their own valid access password to make the modification to the website. How can the school district not have foreseen this?

I’m not sure if criminal charges should apply. It was perhaps more effective at getting them out of school than wearing their pajamas inside out, but still was just a prank.