In the fall of 2011 I made the following argument: We need more transparency in the LMS market, and clients should have access to objective measurements of the security of a solution. To paraphrase Michael Feldstein’s suggestions from a 2009 post: There is no guarantee that any LMS is more secure just because they say they are […]
Security
Instructure releases their third public security audit
In the fall of 2011 I made the following argument: We need more transparency in the LMS market, and clients should have access to objective measurements of the security of a solution. To paraphrase Michael Feldstein’s suggestions from a 2009 post: There is no guarantee that any LMS is more secure just because they say they […]
Analysis of Instructure Security Testing
Instructure has engaged Securus Global to test the Canvas LMS product for security vulnerabilities. Instructure also invited me to be an independent observer – participating in the process and independently reporting on the testing and Instructure’s response to any vulnerabilities identified. Part 1 of this series of posts described the concept. Part 2 gave a mid-term update, describing the […]
Instructure Security Assessment Results
Instructure has engaged Securus Global to test the Canvas LMS product for security vulnerabilities. Instructure has also invited me to be an independent observer – participating in the process and independently reporting on the testing and Instructure’s response to any vulnerabilities identified. Part 1 of this series of posts described the concept. Part 2 gave a mid-term update, […]
Instructure Security Mid-Term
Instructure has engaged Securus Global to test the Canvas LMS product for security vulnerabilities. Instructure has also invited me to be an independent observer – participating in the process and independently reporting on the testing and Instructure’s response to any vulnerabilities identified. Part 1 of this series of posts describes the concept. In this post, I’ll give […]
Analysis of Blackboard Response to Recent Disclosure of Security Vulnerabilities
There’s been an interesting set of public relations based on the recent news of Blackboard security vulnerabilities. SC Magazine’s Australian edition broke a story on September 16 about an investigation by two or more anonymous Australian universities working with a security firm, Securus Global. In conjunction with the magazine, this investigation exposed a number of security vulnerabilities […]