It’s wild. My professor wife (and the rest of the faculty) got a message that it was down and to basically just figure out how to finish without it. Then it came back up, and the Provost told...
It’s wild. My professor wife (and the rest of the faculty) got a message that it was down and to basically just figure out how to finish without it. Then it came back up, and the Provost told everyone to go export the grades real quick in case it goes back down. A nice extra stressor with ? additional consequences to add to finals week.
There's a new statement on the shinyhunters onion site, and nothing else about the Canvas/Instructure breach: I can't help but wonder if someone paid the ransom.
There's a new statement on the shinyhunters onion site, and nothing else about the Canvas/Instructure breach:
Due to the significant amount of press inquries we are receiving every hour from all around the world, we are making a public statement.
We are not commenting and have no further comment to make regarding this global incident.
I can't help but wonder if someone paid the ransom.
Just learned about this from a Youtube short of all things. The timing is definitely bad for students with finals. Along with submitting projects, I'm pretty sure one of my classes actually had...
Just learned about this from a Youtube short of all things. The timing is definitely bad for students with finals.
Along with submitting projects, I'm pretty sure one of my classes actually had its final exam on Canvas. It was a super laidback summer course and was a 101-level class (Intro to New Media or something like that), so the atmosphere was incredibly casual given the subject matter and being summertime. We had the option to go to the final class session to do it there, or just do it at home. Not sure how many other courses would do that during the regular year, but I wouldn't be surprised if some similarly low-level classes would also use Canvas.
(One fun thing about doing the final exam on Canvas: the first guy to finish the exam piped up, "Uh... It's showing me the correct answers." We all turned to the teacher, who just shrugged and said "Go for it." Only reason everyone didn't get 100 is because we had to go back to earlier questions while he was still reading answers, so some people missed an already wrong answer. Good times.)
A question for people who are more familiar with Canvas and its workings: how much of students' personal information is stored in Canvas and Instructure? Obviously it has their names, but would it have things like financial info? I'm pretty sure my school had a separate hub for that stuff, but it's been years and my parents handled the financial stuff anyway so my memory's fuzzy. And even then, some of that data may just be hidden in the back end away from students' eyes.
I know nothing about Canvas but I saw this comment on r/sysadmin on the topic of student information https://old.reddit.com/r/sysadmin/comments/1t6mfiz/canvas_hack/okjnp0r/ Edit: another one...
I know nothing about Canvas but I saw this comment on r/sysadmin on the topic of student information
Selling exam keys, if they even have that, is not a financial win. This is all about the disruption and the insurance ransom payout from Canvas itself by fucking over its customers. Good to know...
Selling exam keys, if they even have that, is not a financial win. This is all about the disruption and the insurance ransom payout from Canvas itself by fucking over its customers.
Good to know that they don't have much info though. We use SSO thankfully.
I don’t believe so. My university sent an email about the data breach at Instructure the day before the ransomware attack saying that our data may have been compromised, but that it isn’t anything...
I don’t believe so. My university sent an email about the data breach at Instructure the day before the ransomware attack saying that our data may have been compromised, but that it isn’t anything very significant. Just emails, student ID numbers, names, and grades.
Most schools use a SSO login for canvas, so my password is held by Microsoft. My university makes us change our password every 6 months anyways, so it’s not likely that anyone’s school email password is shared across many if any other accounts.
Well, unfortunately it's probably Password1, Password2, Password3 (until you can go back to Password1) but it might be the same as people's other passwords. One would hope not, but thankfully the...
Well, unfortunately it's probably Password1, Password2, Password3 (until you can go back to Password1) but it might be the same as people's other passwords. One would hope not, but thankfully the SSO should avoid it.
This had already been a stressful term for our school for other reasons and is really the cherry on top. It also means that some stuff for summer session is being shifted onto me which I am not a...
This had already been a stressful term for our school for other reasons and is really the cherry on top. It also means that some stuff for summer session is being shifted onto me which I am not a fan of, but glad that I am not in the mess of dealing with finals like some other folks. I really feel for the students, professors, and admin who have to sort out this mess.
Oof this is a big mess. Truly feel for both students and staff that have to deal with this at the end of the semester. I transferred universities during my undergrad so I experienced one...
Oof this is a big mess. Truly feel for both students and staff that have to deal with this at the end of the semester. I transferred universities during my undergrad so I experienced one university who was all in on it and one who only transitioned to the system after I graduated. It's easy to see why Canvas took over, you can truly run everything on there. You can have your lecture materials, assignments, quizzes, midterms, and even finals with special provision to use a "lockdown browser" to prevent cheating.
It's back up now, but still not quite working with all the extra parts schools use in it. Like my school uses Honorlock for proctoring quizzes/exams, and that's not working yet. Guess what my quiz...
It's back up now, but still not quite working with all the extra parts schools use in it. Like my school uses Honorlock for proctoring quizzes/exams, and that's not working yet. Guess what my quiz and final exam require and are due Monday? Our professor is not giving any extensions. The course is scheduled to end Monday night and the school requires her to have grades submitted on Tuesday.
Oh boy is this a fucking mess...
I don't even know what the ripple effect will be.
It’s wild. My professor wife (and the rest of the faculty) got a message that it was down and to basically just figure out how to finish without it. Then it came back up, and the Provost told everyone to go export the grades real quick in case it goes back down. A nice extra stressor with ? additional consequences to add to finals week.
There's a new statement on the shinyhunters onion site, and nothing else about the Canvas/Instructure breach:
I can't help but wonder if someone paid the ransom.
Our campus's Canvas is back up... So I suspect someone had ransomware insurance. (It was almost certainly not us)
Could be Instructure had insurance for it, this was not the first time.
https://thenextweb.com/news/the-largest-education-data-breach-in-history-was-not-an-attack-on-a-school-it-was-an-attack-on-a-vendor
That's who I figured, yeah.
Just learned about this from a Youtube short of all things. The timing is definitely bad for students with finals.
Along with submitting projects, I'm pretty sure one of my classes actually had its final exam on Canvas. It was a super laidback summer course and was a 101-level class (Intro to New Media or something like that), so the atmosphere was incredibly casual given the subject matter and being summertime. We had the option to go to the final class session to do it there, or just do it at home. Not sure how many other courses would do that during the regular year, but I wouldn't be surprised if some similarly low-level classes would also use Canvas.
(One fun thing about doing the final exam on Canvas: the first guy to finish the exam piped up, "Uh... It's showing me the correct answers." We all turned to the teacher, who just shrugged and said "Go for it." Only reason everyone didn't get 100 is because we had to go back to earlier questions while he was still reading answers, so some people missed an already wrong answer. Good times.)
A question for people who are more familiar with Canvas and its workings: how much of students' personal information is stored in Canvas and Instructure? Obviously it has their names, but would it have things like financial info? I'm pretty sure my school had a separate hub for that stuff, but it's been years and my parents handled the financial stuff anyway so my memory's fuzzy. And even then, some of that data may just be hidden in the back end away from students' eyes.
I know nothing about Canvas but I saw this comment on r/sysadmin on the topic of student information
https://old.reddit.com/r/sysadmin/comments/1t6mfiz/canvas_hack/okjnp0r/
Edit: another one https://old.reddit.com/r/sysadmin/comments/1t6mfiz/canvas_hack/okjgl8r/
Selling exam keys, if they even have that, is not a financial win. This is all about the disruption and the insurance ransom payout from Canvas itself by fucking over its customers.
Good to know that they don't have much info though. We use SSO thankfully.
I don’t believe so. My university sent an email about the data breach at Instructure the day before the ransomware attack saying that our data may have been compromised, but that it isn’t anything very significant. Just emails, student ID numbers, names, and grades.
Most schools use a SSO login for canvas, so my password is held by Microsoft. My university makes us change our password every 6 months anyways, so it’s not likely that anyone’s school email password is shared across many if any other accounts.
Well, unfortunately it's probably Password1, Password2, Password3 (until you can go back to Password1) but it might be the same as people's other passwords. One would hope not, but thankfully the SSO should avoid it.
This had already been a stressful term for our school for other reasons and is really the cherry on top. It also means that some stuff for summer session is being shifted onto me which I am not a fan of, but glad that I am not in the mess of dealing with finals like some other folks. I really feel for the students, professors, and admin who have to sort out this mess.
Oof this is a big mess. Truly feel for both students and staff that have to deal with this at the end of the semester. I transferred universities during my undergrad so I experienced one university who was all in on it and one who only transitioned to the system after I graduated. It's easy to see why Canvas took over, you can truly run everything on there. You can have your lecture materials, assignments, quizzes, midterms, and even finals with special provision to use a "lockdown browser" to prevent cheating.
It's back up now, but still not quite working with all the extra parts schools use in it. Like my school uses Honorlock for proctoring quizzes/exams, and that's not working yet. Guess what my quiz and final exam require and are due Monday? Our professor is not giving any extensions. The course is scheduled to end Monday night and the school requires her to have grades submitted on Tuesday.