4 ms·
There shouldn't have been a need to give into hackers, even highly successful hackers. If they're not doing air-gapped backups weekly, that's malpractice and hi
by Zigurd 6mo ago
There shouldn't have been a need to give into hackers, even highly successful hackers. If they're not doing air-gapped backups weekly, that's malpractice and hints at a substandard architecture and/or operations. On a short enough full backup schedule all of Canvas's customers should've been able to recover based on their own copies of assignments and test results. And a policy like that should've been in the SLAs.
In an education environment, there shouldn't be a need to trust software like Canvas for anything mission critical. In fact, if there's anything mission critical in a system like canvas it's an artificial need.
IOW Canvas had to have made themselves vulnerable to a ransom demand in the way that they designed their own product.
- applfanboysbgon 6mo agoBackups do nothing to protect your customers from getting extorted to avoid their data being leaked.
- Zigurd 6mo agoWhat extortable content should schools be creating? And if they are it's crazy that they are trusting it to school SaaS.
- applfanboysbgon 6mo agoI mean, something as simple as name + grades is extortable. There are plenty of students who would not want their bad grades to be public information, and who would be upset with their school if the school allowed that to be leaked, or who may personally pay an extortion if contacted directly. I certainly do think it's crazy that schools are selling out education to SaaSification, but that is normal in the world we live in.
- joseda-hg 6mo agoEnrollment or courses might not be generally super sensible, but financing/financial data, personal identification like phone numbers and emails, chat logs and such