Live data from Hacker News

Canvas online again as ShinyHunters threatens to leak schools’ data

theverge.com

681–690 of 690 posts

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#682

Perspective from the trenches: I teach at a university that uses Canvas. We are in our final exams period right now. We got our first email (from Academic Affairs) notifying us that it was down at 5:17pm EDT this afternoon, with little info; followup emails were sent at 6:24 and 6:57 with more info, but mostly about how we would be compensating for it and not about what actually was going on (other than, "nationwide…

Maybe a hybrid approach. Scramble to create a final exam/project and give them the option to do pass/fail or a real grade, their choice. And then wish for the death of saas and a day where you can deploy your own software you can control and modify as you need.

You cant really do that in lots of cases. What grounds the grade is from is in many cases set in stone.

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#683
post #141

A friend who teaches at MIT said they were hit by this. I found it ironic and a little sad that a place like MIT doesn't have an IT staff that can maintain their own on-prem solutions for things like this. But it turns out that MIT used to have their own homegrown system, and recently switched to Canvas. Bet they're regretting that now. The build vs. buy decision seems to have swung very hard toward buy in the last d…

My university also had their own system before - what was especially great with that system was that it was all open. Every course had its own webpage, where you first chose which year/semester you were interested in ans then you got all the course information for that year, all the assignments and the exam if it were from a previous year.

It made it so much easier if you wanted to know more about a course before taking it, so much easier to find extra practise materials (last years assignments and exam etc).

Now its all in Canvas and only reachable for those who are enrolled at the course.

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#684
post #522
post #493

Earlier quoted context omitted.

> The alternative would be that each school develop their own platform for this I worked at a university which did exactly this, in the UK. It was a bespoke platform which integrated incredibly well with the rest of the systems the university used because it was designed from the ground-up to meet the institution's needs, there were regular user groups involving academics to understand what features needed to be buil…

That sounds like a dream. My (also UK-based) university has been working on a new student records management project for years that's been incredibly ill-fated. It's destined to replace all their current systems and the first module module was meant to launch last year, except it thoroughly failed testing and nobody has heard anything about it since. No idea how long it'll take to pull through. I don't believe it's a…

In-house bespoke software sounds reasonable, and multi-customer SaaS sounds reasonable, but outsourced bespoke software sounds like a complete dumpster fire:

End users who report problems:

* are ok with IT level 1 telling them IT level 3 is working on it with velocity appropriate to keep their jobs,

* are ok with IT level 1 telling them ${vendor_of_well-known_solution} is working on it with velocity appropriate for many customers, but

* are not ok with IT level 1 telling them ${vendor_of_bespoke_solutions} is working on it with velocity appropriate for one customer (if they even still exist).

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#685
Canvas has paid the ransom.

QUOTE

To our Instructure Community,

We know that for many of our customers, concerns about the potential publication of data related to this incident remain top of mind. We want to acknowledge those concerns directly – we understand how unsettling situations like this can be, and protecting our community is also a top priority for us.

With that responsibility in mind, we reached an agreement with the unauthorized actor involved in this incident. As part of that agreement, the data was returned to us, we received assurances that it will not be further shared on the dark web or elsewhere, and we received proof that any copies of that data were deleted. Further, we have been informed that no Instructure customers will be extorted as a result of this incident, publicly or otherwise. While there is never complete certainty when dealing with cyber criminals, we believe it was important to take every step within our control to give our customers additional peace of mind, to the extent possible.

We are sharing this update in the continued interest of transparency and so that our customers know that we have addressed this element of the incident directly. To reiterate, the agreement covered all of our customers, and there is no need for individual customers to attempt to engage with the unauthorized actor.

We appreciate your patience and trust as we continue to respond to this incident thoughtfully and comprehensively. We remain committed to providing meaningful updates as our work progresses.

Regards,

Steve Daly, CEO, Instructure"

END QUOTE

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#686
post #388

Earlier quoted context omitted.

You honestly don't wanna know If my peers are any indication, a whole lot of TikTok, Reels, Twitter, Discord, and other such mind-numbing platforms. The types of platforms I would consider 'substantive' (or, at least, more substantive than those platforms) are definitely on the way out. The few times friends have seen me browsing Hacker News or a certain Mongolian basket weaving form, the first thing they comment on…

How is Discord mind-numbing?

The massive discord servers have a culture that is no different than any other social media

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#687
post #675

Earlier quoted context omitted.

It's a little weird how I ignored your comment and replied to somebody else and then you felt the need to reply to me again and again

Not really. The comment of yours that started the lack of clarity is this double-negative, and 0/2 of us who responded to you here found it useful: > Most graduates aren't really qualified to work anywhere that they couldn't have worked before going to college in the first place. The double-negative could be read both ways: "Most HS grads aren't really qualified to work anywhere and college doesn't add much" or "a [H…

Do you realize how insufferable you are?

I know that I used a double negative, I meant to do that. Not everything is meant to be written and read the exact same way. That was the particular style of sentence I chose so you can just deal with that and you don't need to keep pointing it out.

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#688

Earlier quoted context omitted.

I don't think you've seen many biology field data sets.

Many relative to the total set, no. But enough to know writing it down isn’t going to cut it. Most datasets I’ve seen are xls, hdfs or csvs nested many directories deep. Not exactly for those who can’t manage an email filter. Without getting into the processing of it either

You can store Perl in any file format.

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#689
post #675

Earlier quoted context omitted.

Not really. The comment of yours that started the lack of clarity is this double-negative, and 0/2 of us who responded to you here found it useful: > Most graduates aren't really qualified to work anywhere that they couldn't have worked before going to college in the first place. The double-negative could be read both ways: "Most HS grads aren't really qualified to work anywhere and college doesn't add much" or "a [H…

Do you realize how insufferable you are? I know that I used a double negative, I meant to do that. Not everything is meant to be written and read the exact same way. That was the particular style of sentence I chose so you can just deal with that and you don't need to keep pointing it out.

Stop being abusive. Your original double-negative comment lacks clarity, it can be read in two completely opposite senses. It would better for you simply to have clarified it (and next time be clearer in the first place). People here brought that to your attention but all you do is attack them. That's on you not us. If your stylistic choices make your writing incomprehensible, then don't use them. That's all.

Put it like this: it was an interesting discussion before that, and looks like people expected you would simply clarify your meaning (like most of us do when we're being unclear), so the discussion could proceed. Not go on all-out attack.

Re: Canvas online again as ShinyHunters threatens to leak schools’ data

#690

Earlier quoted context omitted.

That's great to hear. As I agreed elsewhere in the thread, their true purpose is exactly to shield other workers from this sort of nonsense FUD and make-work. Of course I presume it's also not a strawman because it's not in any way some unique thing to lawyers.

The general counsel at my last university job actually tended to cut through the red tape and excuses of “can’t do this due to legal”. Lots of fun if a department had been stonewalling for “legal reasons” and she was summoned to a meeting.

This, way too many people think they know the law and build up a wall of thinking based on their erroneous understanding of it. They're often afraid to incur the perceived expense of consulting an actual expert.

The same kind of broken thinking exists across MANY other aspects of life. Turn up the radio in your car to avoid hearing the problem that would be 'easy' to fix now and instead ignore it until it turns into a considerably more expensive repair.

I find it's often the same people that make these kinds of misguided decisions that crow the loudest about "kill all the lawyers". Perhaps because of their fear of being called out for their ignorance.

Post reply on HN