canvas hacked…

5,491 Views | 60 Replies | Last: 5 hrs ago by TyHolden
Signel
How long do you want to ignore this user?
AG
There are going to be a ton more of these in the coming months. Dario Amodei from anthropic said it best -- the CCP will get Deepseek (or one of the Chinese AIs) to start attacking like we did with Claude Mythos within months.

Basically everything is vulnerable, and the AI can find the hole and write the attack code in hours. Everything you can think of that is IT related is at risk.
MouthBQ98
How long do you want to ignore this user?
AG
This problem will only get worse with time. There will be more opportunities as we are more technologically dependent and more tools with which to do these crimes. The same trend makes them hard to catch.

My proposal would be radically disincentivize theft, fraud, and extortion by having society classify public beatings as not cruel and as a routine punishment like in Singapore. And we regard foreign actions doing this as an act of terrorism subjecting the perpetrators to military consequences. We find you and drone you. Dead, done.
gigemags-99
How long do you want to ignore this user?
AG
Signel said:

There are going to be a ton more of these in the coming months. Dario Amodei from anthropic said it best -- the CCP will get Deepseek (or one of the Chinese AIs) to start attacking like we did with Claude Mythos within months.

Basically everything is vulnerable, and the AI can find the hole and write the attack code in hours. Everything you can think of that is IT related is at risk.


They better not come after TexAgs!
TravisCoAg90
How long do you want to ignore this user?
AG
Just go back to the old days when our professors posted our grades on their office doors by our student ID's (oh yeah, our SSN's).
FlyRod
How long do you want to ignore this user?
Ah the great legacy of Sharp, outsourcing to third party vendors. First food services, now this.
TyHolden
How long do you want to ignore this user?
AG
TravisCoAg90 said:

Just go back to the old days when our professors posted our grades on their office doors by our student ID's (oh yeah, our SSN's).

I don't think we ever locked our front door during those days....
I hope I did not offend anybody with this post. If I did, please come see me at my address in my profile so we can talk.
Yesterday
How long do you want to ignore this user?
AG
Stive said:

Waffledynamics said:

We need less tech dependency in schools. Get rid of it and this won't be a problem.

You might as well tell everyone they should start riding horses again.




I disagree completely. At least at the earlier grade levels. iPads shouldn't be introduced until the 6th grade. As it is, our kids reading and writing are awful. They need to learn basic arithmetic and writing before they're introduced to screens.

Junior high and highschool absolutely they need tech!
HTownAg98
How long do you want to ignore this user?
TravisCoAg90 said:

Just go back to the old days when our professors posted our grades on their office doors by our student ID's (oh yeah, our SSN's).

Or calling in at the end of the semester to get your final grades and waiting for the long awkward pause until finally your letter grade was announced.
techno-ag
How long do you want to ignore this user?
AG
FlyRod said:

Ah the great legacy of Sharp, outsourcing to third party vendors. First food services, now this.
You realize practically everybody in higher ed uses Canvas or Blackboard, right?
The left cannot kill the Spirit of Charlie Kirk.
AgGrad99
How long do you want to ignore this user?
AG
Yesterday said:

Stive said:

Waffledynamics said:

We need less tech dependency in schools. Get rid of it and this won't be a problem.

You might as well tell everyone they should start riding horses again.




I disagree completely. At least at the earlier grade levels. iPads shouldn't be introduced until the 6th grade. As it is, our kids reading and writing are awful. They need to learn basic arithmetic and writing before they're introduced to screens.

Junior high and high school absolutely they need tech!

I'm not even sure the older ones need the tech. Kids know how to use tech, without the schools teaching/using it.

It's just become a crutch for teachers/admin. It's also hindering what kids learn, even in college. They take so many tests online...unproctored and open-note. All because it's easier for profs to let them take the tests on their own, instead of doing it in class, and spending time grading it. They aren't studying/learning the material.

And, practically...every job I had out of school required me to learn new tech/software, etc...that I never saw in school. And I've had to continue to learn new tech throughout my career. But the material I studied in school has stuck with me, and has been applied continually along the way.
Mathguy64
How long do you want to ignore this user?
AG
techno-ag said:

FlyRod said:

Ah the great legacy of Sharp, outsourcing to third party vendors. First food services, now this.

You realize practically everybody in higher ed uses Canvas or Blackboard, right?

We are D2L. I look forward to getting shut down this summer. It's only a matter of time.

Giving an AI free rein to attack a system is a nightmare for any platform/database. And since the primary use of these platforms is for open online access, you can't exactly air gap them for a local access only. This isnt just a higher Ed problem or Ed problem. This is an "everyone" problem.

We all joke that Skynet is coming. It's not a joke.

techno-ag
How long do you want to ignore this user?
AG
Mathguy64 said:

techno-ag said:

FlyRod said:

Ah the great legacy of Sharp, outsourcing to third party vendors. First food services, now this.

You realize practically everybody in higher ed uses Canvas or Blackboard, right?

We are D2L. I look forward to getting shut down this summer. It's only a matter of time.

Giving an AI free rein to attack a system is a nightmare for any platform/database. And since the primary use of these platforms is for open online access, you can't exactly air gap them for a local access only. This isnt just a higher Ed problem or Ed problem. This is an "everyone" problem.

We all joke that Skynet is coming. It's not a joke.


Brightspace/D2L is a third, forgot about them.

You're right that the whole internet is vulnerable right now to AI probing for exploits.
The left cannot kill the Spirit of Charlie Kirk.
Yesterday
How long do you want to ignore this user?
AG
AgGrad99 said:

Yesterday said:

Stive said:

Waffledynamics said:

We need less tech dependency in schools. Get rid of it and this won't be a problem.

You might as well tell everyone they should start riding horses again.




I disagree completely. At least at the earlier grade levels. iPads shouldn't be introduced until the 6th grade. As it is, our kids reading and writing are awful. They need to learn basic arithmetic and writing before they're introduced to screens.

Junior high and high school absolutely they need tech!

I'm not even sure the older ones need the tech. Kids know how to use tech, without the schools teaching/using it.

It's just become a crutch for teachers/admin. It's also hindering what kids learn, even in college. They take so many tests online...unproctored and open-note. All because it's easier for profs to let them take the tests on their own, instead of doing it in class, and spending time grading it. They aren't studying/learning the material.

And, practically...every job I had out of school required me to learn new tech/software, etc...that I never saw in school. And I've had to continue to learn new tech throughout my career. But the material I studied in school has stuck with me, and has been applied continually along the way.


I won't disagree. It's definitely a crutch for teachers. I'm
Not even sure we need them to be honest. All the work is ready in canvas and we the parents/kids have to monitor to make sure projects are due, quizzes are done etc. teachers don't even have to grade most things done online. It's wild.
Logos Stick
How long do you want to ignore this user?

I see that private messages between users (students, teachers, staff) was also taken.

This could get good (or bad).
PeekingDuck
How long do you want to ignore this user?
AG
It's just pure laziness and money. Terrible for education.
Jaydoug
How long do you want to ignore this user?
AG
Welcome to the Texas A&M Information Management System…….Enter an Action Code……………………………Now.

<<busy signal>>
Over_ed
How long do you want to ignore this user?
AG
Logos Stick said:


I see that private messages between users (students, teachers, staff) was also taken.

This could get good (or bad).

Underrated.

Yep. And that would provide a lot of AI training material for phishing etc. in the future. So even if the hardware is locked down tight it will be easier to exploit the user base.
ErnestEndeavor
How long do you want to ignore this user?
Signel said:

There are going to be a ton more of these in the coming months. Dario Amodei from anthropic said it best -- the CCP will get Deepseek (or one of the Chinese AIs) to start attacking like we did with Claude Mythos within months.

Basically everything is vulnerable, and the AI can find the hole and write the attack code in hours. Everything you can think of that is IT related is at risk.


Amodei is a clown and a man of...confidence. He's been professing the doomsday of his own products since he worked at Openai and was warning about the extreme dangers of GPT-2 five years ago. It's his entire schtick and it's old.

"Mythos" is more capable than prior existing models in finding bugs but it is not some sort of exponential growth story. It is most likely they didn't release the main model to the public because they didn't want to admit that they used hundred times the training cost for a few percentage points of improvement in the model over existing models.

Independent security labs tested the examples Anthropic gave and every single one of the bugs they described in their Mythos report was findable by other models.

And I agree that AI is a threat to the security of the tech industry, but it's a threat because too many are using AI tools to code and the tools are very good at writing pretty code that looks good. Unfortunately "pretty code that looks good" does not equate to secure code. As humans overrely on AI coding agents and fewer experts work in the field to catch errors, we will see more bugs in systems, not less.

The other danger in AI is that now almost every little butthead sitting in their mom's basement can try to hack things without much expertise. You used to have to be a nerd and actually learn code to be able to hack, now you really don't. That means it's even more important to have real people developing real software with real security instead of vibe coding things.
oldyeller
How long do you want to ignore this user?
AG
Yesterday said:

AgGrad99 said:

Yesterday said:

Stive said:

Waffledynamics said:

We need less tech dependency in schools. Get rid of it and this won't be a problem.

You might as well tell everyone they should start riding horses again.




I disagree completely. At least at the earlier grade levels. iPads shouldn't be introduced until the 6th grade. As it is, our kids reading and writing are awful. They need to learn basic arithmetic and writing before they're introduced to screens.

Junior high and high school absolutely they need tech!

I'm not even sure the older ones need the tech. Kids know how to use tech, without the schools teaching/using it.

It's just become a crutch for teachers/admin. It's also hindering what kids learn, even in college. They take so many tests online...unproctored and open-note. All because it's easier for profs to let them take the tests on their own, instead of doing it in class, and spending time grading it. They aren't studying/learning the material.

And, practically...every job I had out of school required me to learn new tech/software, etc...that I never saw in school. And I've had to continue to learn new tech throughout my career. But the material I studied in school has stuck with me, and has been applied continually along the way.


I won't disagree. It's definitely a crutch for teachers. I'm
Not even sure we need them to be honest. All the work is ready in canvas and we the parents/kids have to monitor to make sure projects are due, quizzes are done etc. teachers don't even have to grade most things done online. It's wild.


On what are you basing the claim that "teachers don't even have to grade most things done online"?

Essays still have to be read and graded individually, usually using a rubric the same as with old school printed essays, but come with the added benefit of having a plagiarism checker like TurnItIn. Video presentations still have to be viewed and assessed, same as an in-class presentation. Multiple choice, I'll grant, can be auto graded, but it's fundamentally no different than using scantrons in the age before Canvas/Blackboard/etc. Gradescope helps, to a degree, with equations, but is not "set and forget." In short, the main advantage these systems provide is easier communication, a (usually) 24/7 repository for course content, flexibility for students submitting assignments, and consolidation of work into a digital database so instructors aren't managing paper. The cost is vulnerability to exploits like this that can have a huge impact vs the limited impact of a single instructor accidentally leaving a stack of essays on the bus.

As to the other poster's claim about exams administered online, how is that any different than an instructor allowing open note in-class or take-home exams? Often this is a result of having so much mandated to cover in a set amount of time that faculty can't afford to lose valuable classroom time to in-class exams. Two in-class exams, for example, effectively eat a week of lecture time in a Tuesday/Thursday class, unless classroom time can be set separate from lecture for an in-person proctored exam, which is hard to manage except in the really big classes where the departments can force the issue and secure the classroom space.

Bottom line: LMSes make it possible to do more with less, but don't necessarily make instructors' lives any easier compared to old school days when a syllabus didn't have to look like a contract, instruction was handled by chalk, a blackboard, and an overhead projector, and all assignments were submitted by hand.

As for impact on student learning, there I would agree that the old methods were more effective at students retaining information, but our society's reliance on Google and instant digital access to information in general is also part of the problem. We have become accustomed to offloading the work of retention to computers, and find ourselves up the creek when that access is lost.
techno-ag
How long do you want to ignore this user?
AG
Reading now the breach was traced to a third party's "free for teacher" accounts.

Welfare system pulling us all down.
The left cannot kill the Spirit of Charlie Kirk.
TX_COWDOC
How long do you want to ignore this user?
AG
Well…..not just students affected per the Vet School CE department.


www.southpawprecision.com
Type 07 FFL / Class 2 SOT
Nightforce Optics Dealer
AGM Night Vision Dealer
Mathguy64
How long do you want to ignore this user?
AG
I think that's just plain prudence. And it should have come out immediately by every IT group at every affected school.
BlackGold
How long do you want to ignore this user?
AG
Shiny Hunters have been behind some of the biggest data breaches recently. Billions of people impacted.
ts5641
How long do you want to ignore this user?
Must've been a dud of a hack. Canvas stuff started coming up in our district yesterday morning. Not all things working properly but bit by bit it was already improving.
IIIHorn
How long do you want to ignore this user?
Due to the OP title, I assumed the topic discussion was about a new art form.


( ...voice punctuated with a clap of distant thunder... )
TyHolden
How long do you want to ignore this user?
AG
IIIHorn said:

Due to the OP title, I assumed the topic discussion was about a new art form.

I'm glad to read that your grandchildren are not only reading this post for you but also responding. Let me know if you need anything at Shady Oaks. I go there with my church group on Sundays. The steamed broccoli is top notch.
I hope I did not offend anybody with this post. If I did, please come see me at my address in my profile so we can talk.
Refresh
Page 2 of 2
 
×
subscribe Verify your student status
See Subscription Benefits
Trial only available to users who have never subscribed or participated in a previous trial.