Class Photo, Group Chat and a Leaked Screenshot
After a school function, a student takes a group photo of 32 classmates and posts it in a WhatsApp group of 45 members without asking everyone. One absent classmate is mocked in the comments, and a screenshot of the chat is forwarded to another group. The student's phone has no screen lock and the password for the school portal is 'school2024'; the same password is used for personal email. The student also uses the school's open Wi-Fi to log in to the portal. A teacher learns about the mocking and asks the student to 'just delete the photo and say sorry'. The targeted classmate is upset and has stopped attending group activities. The school has a written anti-bullying policy that requires reporting to the principal and preserving evidence. The student wants to handle it privately and avoid trouble.
1. Identify the digital-citizenship and security mistakes in this scenario, and explain which one creates the most immediate risk to the targeted classmate.
Read the worked answer
Mistakes include posting a group photo without consent, allowing mocking comments to continue, forwarding or failing to stop a screenshot, having no screen lock, reusing a weak password such as 'school2024', and logging in over open Wi-Fi. The most immediate risk to the targeted classmate is the forwarded screenshot. Deleting the original post does not recall copies that are already in another group. The mockery can continue and the classmate's image and distress are being redistributed without control. The weak password is a serious account risk, but it is not the direct cause of the current harm. A good answer separates the immediate safeguarding issue from the longer-term account-security issues.
2. The teacher says 'delete the photo and say sorry'. Explain why this is insufficient and give a better response sequence consistent with the policy.
Read the worked answer
Deleting the photo may reduce further viewing, but it does not retrieve the forwarded screenshot and it can destroy evidence needed under the anti-bullying policy. A private apology also places the burden on the student who was harmed and does not address the group dynamics. A better sequence is: preserve evidence with screenshots before any deletion; report to the principal as the policy requires; ask the group admin to remove the mocking comments and stop further forwarding; contact the targeted classmate and their family with support, not pressure to 'move on'; and record what actions were taken. The student who posted should apologise specifically for the consent and mocking failures, without demanding forgiveness. Platform reporting should also be used for the forwarded screenshot.
3. Recommend three concrete changes to the student's account and device security, with reasoning.
Read the worked answer
First, enable a screen lock with a PIN or biometric and a short auto-lock timeout. Anyone who picks up the unlocked phone can read the group chat and portal. Second, replace 'school2024' with a unique passphrase for the school portal and a different password for personal email, stored in a password manager. Reuse means one breach exposes both accounts. Third, enable two-factor authentication where available and avoid logging in to the portal over open Wi-Fi; use mobile data or a trusted network, and check that the portal address is correct. These measures reduce the chance of account takeover and limit the damage if the phone is lost.