Interestingly enough, it may not even have been as complicated as that.

According to one Reddit commenter, the UGA calendar is left wide open for submissions - and in some cases, posts may be under minimal (if any) review. So it may be that he simply found the wide open URL, filled out a form, and hit 'submit'.

http://www.reddit.com/r/gatech/comments/2quflw/georgia_tech_...

Seems like that would be fair game without using Tor or some other proxy - since there are no terms or conditions of use mentioned on the form, seems like it's open to anyone to post. But who's to say?

So UGA's theory is he was trespassing because that wide open system is only intended for use by UGA Students, Faculty, etc? Seems flimsy to me.

A recent Defcon presentation [1] has highlighted the risk of using "anonymous" proxies. As such, it is advised never to use any public domain proxy.

[1] https://www.youtube.com/watch?v=kLt_uqSCEUA

I'll just leave this here: http://www.dailydot.com/crime/tor-harvard-bomb-suspect/

So use Tor from someplace that won't be able to tell that you were one of a few people accessing Tor at that moment. Just go to a coffee shop or something.

Or presumably use a VPN to a server in another country, then hop on Tor. Any obvious problem with that?

Technically it'd be fine, there wouldn't be any direct evidence... but using a VPN on campus at the same time a bomb threat comes in through Tor could be enough to draw some suspicion. For something like this though I don't think they'd dig that deep.