Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Canvas online again as ShinyHunters threatens to leak schools’ data

theverge.com

Post reply on HN
Print view View original

31–40 of 690 posts

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#31

Post by nebula8804 »

HDBaseT wrote: post #18
exprez135 wrote: post #3

The Canvas instance at the nearby university is now down (May 7, 4 PM Eastern), but was briefly displaying the message in this screenshot (1). The ransom message implies that today's problem is the second wave in an attack on Instructure after ignoring their first breach in recent days. 1: https://ibb.co/r29RjdnH

Yeah, this is ongoing. We received communication that Canvas is down for "Under Maintenance" although it seems ShineyHunters have compromised Canvas again with that message you posted. We do not see that message anymore, although all instrucuture.com URLs are down. The list of schools in the ShinyHunters publication can be found here: https://web.archive.org/web/20260507042014/http://91.215.85....

Seems like Canvas instances of schools not listed are also down (at least my alma mater is)

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#32

Post by auxiliarymoose »

bigfatkitten wrote: post #4

I use Canvas for some postgraduate studies, and my teenage daughter uses it at her high school. We already bond over how awful the Canvas UX is (and she has a bunch of Chrome extensions to improve it.) Now we’ve got something else to gripe over together.

It is open source, so you could send pull requests with improvements: https://github.com/instructure/canvas-lms

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#33

Post by mystraline »

anematode wrote: post #29
tom1337 wrote: post #15

> Canvas is currently undergoing scheduled maintenance doesn't seem that scheduled to me

Well, scheduled by whom? :)

Whoever it is, is likely defended by Cloudflare. They seem to like the booters.

https://news.ycombinator.com/item?id=48025001

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#35

Post by DaSHacka »

vondur wrote: post #30

It looks like every CSU System is on the list (California State University). Surprised this hasn't hit the front page yet.

Possibly because they haven't released the data yet?

I'm honestly surprised more people aren't talking about this.

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#37

Post by HDBaseT »

nebula8804 wrote: post #31
HDBaseT wrote: post #18

Earlier quoted context omitted.

Yeah, this is ongoing. We received communication that Canvas is down for "Under Maintenance" although it seems ShineyHunters have compromised Canvas again with that message you posted. We do not see that message anymore, although all instrucuture.com URLs are down. The list of schools in the ShinyHunters publication can be found here: https://web.archive.org/web/20260507042014/http://91.215.85....

Seems like Canvas instances of schools not listed are also down (at least my alma mater is)

[dead]

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#39

Post by crazygringo »

SoftTalker wrote: post #20

So many universities used to run homegrown or on-prem student systems. This is the downside of consolidating in the cloud. If the infrastructure is compromised, it affects everyone, not just isolated or single installations. I wonder how they are feeling about that decision now? I guess they can say "not our fault" so they might be feeling better than if it was a vulnerability in their own system.

If an exploit is found in the software, hackers will often be able to attack hundreds of separate institutional installations in an automated way just as easily. And depending on the exploit, potentially more easily if on-prem admins fail to take all recommended security steps.

I'm actually much more interested if there is any financial liability for Instructure here? It's interesting that it's the universities being ransomed, while the technical failure was Instructure's. We're used to uptime SLA's -- what about security breach SLA's?

Post reply on HN