Thanks for writing this article. Good job poking around and helping uncover vulnerabilities. It is your curiosity that may have helped save lives and/or careers. Who knows what the exploit could have been used for? As for the university (I’ve never even heard of Depauw University), it’s most likely that they’re not aware of how hacking works and what the implications would be if a hacker with ill-intentions were to exploit the vulnerabilities. They should be proud to have a student like you in their university. Kudos to your father for approaching a lawyer.