Click here to receive your FREE subscription to Campus Technology
News
Moodle Hacked at Oregon College
3/14/2008
Umpqua Community College in Winchester, OR announced in February that its Moodle course management system had been hacked earlier in the year, potentially exposing student information. According to a statement from the college, there was no evidence that personal records had been affected. The school also noted that the IT department knew how the system had been compromised and had taken steps to address the security vulnerabilities, which included shutting Moodle down temporarily.Now all users of the college's applications--which include Angel LMS from Angel Learning, Banner from Sungard Higher Education, and the school's portal--must also set up new PINs to prevent the misuse of any data collected during the Moodle breach.
According to an article in The News-Review, a Winchester newspaper, the college became aware of the breach when the system slowed down. An IT investigation uncovered a message from the hacker that had been planted in the system. That same examination revealed that user account information--including names, passwords, and demographic details--had been stored in the software.
The campus had been a long-time user of the open source application, which was being supported by an external service provider. On the Moodle system, students received assignments, completed and turned in course work, and communicated with their instructors.
The school had migrated to Angel in 2007 but implemented Moodle internally at the same time in order to support its nursing program, which wasn't ready to move to a new platform. It was that installation that had been run without safeguards and that lacked a critical security patch, according to The News-Review.
Other instructors outside of nursing were also continuing with their use of Moodle. When IT shut down the internal deployment of Moodle, several professors said they'd be willing to cover the expense of moving the installation to an outside firm that could host the software. The college chose to pay for a similar hosting service but has assigned a task force to decide whether Moodle will continue being used in the future.
Dian Schaffhauser is a writer who covers technology and business. Send your higher education technology news to her at dian@dischaffhauser.com.
Cite this Site
copy text (above) for proper citation
Recommended Reading
- Microsoft Mends Breach in Open Source Sandcastle
Microsoft has released all of the source code used in its Sandcastle project, which is now published at the CodePlex open source developer's Web site, according to a blog. Sandcastle helps developers of managed class libraries create uniform documentation on their projects, using MSDN style.
- Lumens Debuts SXGA Document Camera
Lumens Integration this week debuted a new document camera and presentation system called the DC260 SXGA Digital Visual Presenter. The new gooseneck-style system is the first in Lumens' document camera lineup to support HD output via HDMI.
- U Liverpool Deploys iSCSI in Virtualized SAN
The University of Liverpool Department of Computer Science is moving away from direct-attached RAIDs to a virtualized SAN environment using StorMagic's SM Series iSCSI Storage Area Network.
- Indiana U, Wayne State Teams Capture Wins in Imagine Cup 2008
Winners of the 2008 Imagine Cup technology competition were announced Tuesday in Paris. Student teams from American universities took top honors in two categories and earned achievement awards in other areas. Microsoft, which hosted the event, said it was the most successful run for American teams in the Cup's six-year history.
- IE Is Least-Patched Browser, Report Says
According to a report released last Tuesday, more than 40 percent of Internet surfers don't use browsers with up-to-date security patches--and Internet Explorer users are the biggest culprits.
- Ballmer Wants Board Change at Yahoo
Microsoft's executives have been talking with investor and corporate raider Carl Icahn about renewed plans for Microsoft to acquire part or all of Yahoo, provided that Yahoo's board is replaced. The details were described in an open letter issued Monday by Icahn, which is addressed to Yahoo's shareholders.
