Author: Cyrus Wong (黃俊彥) — Google Developer Expert - Cloud (AI), Senior Lecturer at HKIIT

1. Problem Statement: The Proxy Account Sharing, "Fake Screen-Recording" & Keylogger Crisis in University Computer Labs & 200-Seat Lecture Theatres

When running hands-on programming classes and invigilated practical assessments across physical computer labs and 200-seat lecture halls at the Hong Kong Institute of Information Technology (HKIIT / VTC), our engineering team encountered three real-world identity and physical-presence exploits that traditional username-and-password authentication and campus IP checks cannot stop:

The "Give My Password to a Classmate" Proxy Lab Exploit (Fake Video Playback & Proxy Bingo) : Even when campus CIDR IP restrictions ( checkipaddress ) block off-campus logins, an absent student simply texts their email and password to a friend sitting inside the computer lab.…