This morning there was a flurry of effort to locate an article called “Hacking WebCT.” My coworker was able to locate it. We were disappointed.
The main points of the article were:
- Lazy administrators make compromising user accounts easy.
- Lazy instructors make getting questions for assessments easy.
These apply to any LMS. So, here is some advice to counter the issues raised in this article.
Accounts
Default passwords are the bane of any system. Make users change them. (Yes, this increases support tickets.) This usually comes about because the administrators did not integrate the LMS authentication with LDAP, Kerberos, or CAS which allows for central management of accounts. Central management of accounts means fewer accounts are likely to sit around with easily guessed intially imposed credentials.
Linking many services together also raises the exposure should one account account me compromised. Enforce decently strong passwords. Too strong and frequently changed password will encourage users to employ means of remembering passwords which defeat the point. Passwords probably should not ever be just birthdays.
Not sure what advice to provide about the potential of a student installing a keylogger on a computer in a classroom?
Assessment Cheating
A long availability period (like a week) provides opportunities for enterprising students to exploit the issues with passwords to see and research questions in advance. Instead, a quiz with a short availability period like an hour means less time to go look at the other account, record the questions, research them, then go back into the proper account and take the assessment.
Instructors should use custome questions. Students can obtain questionss provided by publishers in ePacks or with textbooks from previous students, the same textbooks the instructor received, or even web sites online which sell the information.
High stakes testing ensures students are looking to cheat. When the value of questions is high, these easier methods than knowing the material ensures a war between students and instructors over cheating. Of course, lowering the value of the questions increases the workload of the instructor.
Related posts
The Twitter Timesink
May 6, 2009 in Social / IM / Chat by Ezra S F | No comments
Glenn asked: “What is it about Twitter that makes it more of a time sink than Facebook?”
I consider a time sink something where I invest a high value of time for boring and poor value.
My contacts mostly duplicate in Twitter what they provide in Facebook. The time I spend reading Twitter posts I’ve already read in Facebook is a waste of my time. My Twitter contacts respond about a 1/5th as much as Facebook users (it used to be higher in Twitter). So I get more out of Facebook.
Twitter Replies suck. The Replies system makes it look like my contacts reply much more to me than others which I find highly unlikely. More likely the Replies implementation stifles conversation by requiring either everyone to be public or to allow all the participants to follow each other for there to be one conversation. Instead its many different (sometimes hidden) duplicate conversations. Facebook comments are attached to the status update so following a conversation is significantly easier.
Twitter Apps suck. Last Friday, I looked at Facebook Connect for AIR. My complaint about it was my interactions with Facebook would be as limited as Twitter. The promise of Twitter apps is to do more than the Twitter.com web UI provides. Many just provide easier ways to do the same thing: see your Twitter timeline. Others let you see quantification of your usage. Facebook apps by contrast provide access to content not within Facebook, so more of the web because part of my Facebook access so I can actually do more.
Except Socialthing and Tweetdeck. They are exemplary implementations of Twitter Apps. They extend the functionality of just Twitter by itself and are primary reasons I kept at it for so long. Socialthing unofficially died a while ago and official stoppage of support was announced last week while I wasn’t using it. Tweetdeck probably will stick around for a while.
Twitter lacks granular privacy. In Twitter, either you are private or public or ban specific users. I’m torn between public and not. So I opted for private with sneezypb where I mostly subscribe to friends. My other account, ezrasf, was where I subscribed to Blackboard community members, educational technologists, etc. Facebook could improve some in privacy as well. Compared to Twitter, Facebook makes a great attempt at granular privacy. Plurk, another microblogging / status update site, represents the privacy Holy Grail for me. It allows for making specific posts public, private, available to groups, or individuals.
Related posts