Live data from Hacker News

Canvas online again as ShinyHunters threatens to leak schools’ data

theverge.com

451–460 of 690 posts

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#451

So many universities used to run homegrown or on-prem student systems. This is the downside of consolidating in the cloud. If the infrastructure is compromised, it affects everyone, not just isolated or single installations. I wonder how they are feeling about that decision now? I guess they can say "not our fault" so they might be feeling better than if it was a vulnerability in their own system.

Is there a good self-hostable FOSS version of Canvas/Blackboard?

Moodle?

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#452
post #244

Earlier quoted context omitted.

No building has a 100% chance of not caving in, yet somehow I think charges would be laid if a skyscraper caved in.

The equivalent analogy is charging lock/door/drywall/timber makers and suppliers for lapses if a thief entered the house by picking a lock or drilling/sawing through the wall.

No, it’s more like me storing my money at a bank, and then someone stealing from the bank, who told me they were secure. And turns out they had shitty locks.

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#453
post #212

Earlier quoted context omitted.

> the students themselves don't have the artifacts to resubmit via email because they were done in Canvas It’s so simple to send an e-mail to the student with relevant records on completion of a quiz or whatnot. They don’t do it, because they want to control the data. (And universities don’t insist on it for who knows what reason.)

Students having records of what their score was doesn't prove to the professor / university what score they received. "FWD: Exam 1 Results" is not especially auditable.

[deleted]

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#454
post #212

Earlier quoted context omitted.

> the students themselves don't have the artifacts to resubmit via email because they were done in Canvas It’s so simple to send an e-mail to the student with relevant records on completion of a quiz or whatnot. They don’t do it, because they want to control the data. (And universities don’t insist on it for who knows what reason.)

Students having records of what their score was doesn't prove to the professor / university what score they received. "FWD: Exam 1 Results" is not especially auditable.

Emails from Canvas saying a grade is available do not currently include the actual grade in the email, so that would have to be implemented first. And it's probably not implemented quite intentionally because of FERPA.

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#455
post #430

Earlier quoted context omitted.

I think you completely misread my comment.

I understood your comment perfectly fine. I'm asking which graduates of which colleges you were referring to. It looked like you were generalizing about US HS and colleges. If so, plenty of other countries' HS and college education systems work better, so your comment doesn't extend.

> I understood your comment perfectly fine. I'm asking which graduates of which colleges you were referring to.

They are referring to MOST graduates of MOST colleges. This is a deliberate overgeneralization about the nature of post-secondary education meant to highlight how it's frequently viewed solely in terms of completion rather than with regards to any skills or knowledge gained from it.

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#456
So all these top universities using Canvas as a core part of their infrastructure somewhat begs the question : why would a technology degree from them have any real value if they can't even have their infrastructure built and maintained by students themselves? If their education is really worth that much money, why can't they build their own infrastructure?

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#458

Earlier quoted context omitted.

No building has a 100% chance of not caving in, yet somehow I think charges would be laid if a skyscraper caved in.

This analogy seems to be portraying 'ransomware hackers' as an unstoppable force of nature akin to gravity . I'm not sure that's a fair analogy.

Your analogy portrays gravity as a thing that buildings cannot be built to withstand. There are plenty of structurally sound buildings and while there are plenty of secure apps the problem is there’s no incentive to build the latter.

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#459

I'm surprised how few comments there are on this thread. This is probably affecting millions of students at the most stressful time of the year. Incidentally I've always hated Canvas and probably every other LMS provider, but what is particularly amusing about this current outage is that it is occurring at exactly the time when universities are demanding that all professors put all of their materials on Canvas, witho…

I'm in Europe, and we don't use Canvas (at least, I've never heard of it). However, we have similar diseases. In my particular school, it's a massive SharePoint site plus ever more stuff in Teams. Plus Moodle, plus other services.

The MS services have not improved teaching at all. What they do, is fragment communications, and add ever more places people have to look, in hopes of finding things.

But the administration loves them. "The bureaucracy is expanding, to meet the expanding needs of the bureaucracy."

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#460

So all these top universities using Canvas as a core part of their infrastructure somewhat begs the question : why would a technology degree from them have any real value if they can't even have their infrastructure built and maintained by students themselves? If their education is really worth that much money, why can't they build their own infrastructure?

Have you look at student generated code ?

I mean, maybe it changed in the last 10 years. But I was a TA grading CS majors for a while. Their C capstone or what have you.

Some were decent but naively coded. Most were pile of shit half hazardly put together so it output what is needed to get passing grade.

But I agree with you in spirit!

Post reply on HN