Monthly Archives: February 2021

Barcode scanner app on Google Play infects 10m users with one update

Source: Hacker News

Article note: Aren't auto-updating never-stable software ecosystems great? The repository model works _great_ when there aren't profit incentives (see: Linux Distros), but paid app stores are just choke-points for exploitation, and it's a clear "This is why we can't have nice things." Also, this is _NOT_ about the Open-Source ZXing Barcode Scanner app... and in fact there seems to be a coordinated negative review campaign months after the most recent update to try to push people on to the malware-infested alternatives.
Comments
Posted in News | Leave a comment

Minneapolis police used Google location data to find George Floyd protesters

Source: Engadget

Article note: Weren't these same outlets just celebrating 3rd party doctrine dragnet bullshit being used on the Jan. 6th idiots? Be careful what you wish for.
Law enforcement has used Google location data to target suspects before, but that now includes people at large-scale protests. TechCrunch has learned that Minneapolis police used a search warrant to obtain geofenced location info in hopes of identify...
Posted in News | Leave a comment

Students Punished for ‘Vulgar’ Social Media Posts Are Fighting Back

Source: NYT > Education

Article note: Schools (and, frankly, employers) should not be in the business of policing online conduct any more than they should police speech in homes, bars, or coffee shops - if it crosses into illegal conduct, it becomes actionable by larger societal mechanisms, but otherwise they should fuck right off. The legal momentum for that position, at least for public schools, might be enough to follow through.

A lawsuit against the University of Tennessee questions when schools can discipline students because of their online speech.

Posted in News | Leave a comment

Study finds nearly 200 percent jump in questions submitted to Chegg after start of pandemic

Source: Inside Higher Ed (news)

Article note: The amount of "That isn't the answer to this semester's assignment" and "You answered question #n from a different form" type issues we had last semester was absurd. That said: Students (rightly or not...) understand college to be a stressful but ultimately meaningless hoop-jump, and respond in kind. Students rationally respond to already kind of half-assed courses being even more shittily translated to online by doing what they have to do to succeed (or giving up).

The number of questions asked and answered on the “homework help” website Chegg has skyrocketed since classes migrated online due to the pandemic, an increase that authors of a new study published in the International Journal for Educational Integrity link to a likely increase in cheating.

Chegg, which has an honor code prohibiting cheating and which promotes itself as a site where students can get help on their homework, allows users to post a question to the site and receive an answer from a Chegg-identified expert “in as little as 30 minutes.” (The site’s posted average response time is 46 minutes.) The authors of the new study found that the number of questions posted on the site in five different science, technology, engineering and mathematics disciplines increased by 196.25 percent in April to August of 2020 compared to the same period in 2019.

“Given the number of exam style questions, it appears highly likely that students are using this site as an easy way to breach academic integrity by obtaining outside help,” the authors write in the article titled “Contract cheating by STEM students through a file sharing website: a COVID-19 pandemic perspective.”

“From my experience as somebody who has set exams, marked exams, read exams, seen too many exams, these things look like exam questions,” said Thomas Lancaster, the lead author of the study and senior teaching fellow in computing at Imperial College London, where he researches issues related to academic integrity and contract cheating. “From the point of view of Chegg, they are not promoting themselves as a service designed to help students to cheat, but they do offer a facility where you can get your answers completed quickly by a tutor, and the answers are delivered within the short time frame which matches an exam.”

“At the same time, these questions have started to increase in volume with the timing being exactly alongside the move to online teaching, the move to online exams and assessments, often in a completely unsupervised environment,” Lancaster continued. “It would seem to be quite a heavy coincidence if this was just purely a lot more students wanting to get assistance for unassessed work. I does seem to me like there are people using Chegg to cheat.”

Candace Sue, Chegg’s director of academic relations, said in a written statement that the authors “mistakenly imply -- without any evidence -- that increased usage of Chegg has [sic] correlates to an increase in cheating. With millions of students going online in a matter of months, students have lost valuable on-campus and faculty support services, and stress and anxiety is high. Chegg provides much needed learning support to these students, especially during the pandemic.”

“Chegg is a learning platform used by millions of students around the world to study, and we are deeply committed to academic integrity,” Sue said. “Students need help and the overwhelming majority of Chegg users are hard-working and honest, and they use our platform to supplement their learning. We take extremely seriously any attempts to cheat by those who abuse our offerings, and we invest heavily to prevent misuse of our learning platform.”

The company recently unveiled a new program, Honor Shield, which allows faculty to submit exam questions to the site in advance so they can be blocked during designated exam periods. "Further," Sue wrote, "we cooperate with every official academic Honor Code investigation and respond to every copyright takedown request as soon as possible. We remain 100% committed to addressing this challenge."

The new study examining usage of Chegg by STEM students comes amid rising concern about the potential for increased cheating as classes have moved online en masse and amid debate about the appropriateness of using remote proctoring technology. Proponents of remote proctoring software argue that the migration of courses online provides new opportunities and motivations for students to cheat, while opponents argue for the need to protect student privacy and not to contribute to their anxiety by adopting a surveillance approach.

The study also follows a recent article in Forbes about Chegg titled "This $12 Billion Company Is Getting Rich Off Students Cheating Their Way Through Covid." Forbes interviewed 52 students who used Chegg's study service. Not including the six students supplied by Chegg, all but four of the others said they use Chegg to cheat.

Camilla J. Roberts, president of the International Center for Academic Integrity, said there are increasing concerns in her field about Chegg and other sites like it.

“Thomas Lancaster is definitely known for his research in contract cheating,” said Roberts, who is also director of the Honor and Integrity System at Kansas State University. “If it’s a study by him, I know it’s going to be reputable, I know it’s going to be solid research. From what I’ve seen personally and through colleagues through the International Center for Academic Integrity, we have also seen an increase in our number of violations since the pandemic started. He [Lancaster] talks directly about Chegg, but there are definitely many sites like that and many different companies.”

The International Center for Academic Integrity issued a statement in October discussing the problem and raising concerns about students turning "to online companies advertising to 'help' a student, when in fact, they undermine teaching and learning." The statement, which does not name Chegg or any other specific companies, further faults the "so-called 'tutoring' or 'helping' websites" for "creating hurdles for educational administrators and instructors who are trying to get information about the posts and/or remove posts of copyrighted materials."

Gary Pavela, an expert on academic integrity and co-founder of the Integrity Seminars, said the sites do “seem too well-designed to in a way … facilitate academic dishonesty, whether intentional or otherwise.”

Pavela emphasized a need for professors to tell students they are aware of and monitoring sites like Chegg.

"If students believe everyone is doing it, we’ve lost the battle," Pavela said. "They need to know that everyone is not doing it and many of their peers disapprove. Don't give up on honor codes. That's still relevant and perhaps more relevant than ever."

"We do need to improve the awareness of professors that there are sites like Chegg out there," said Lancaster. "It is far from the only one, but it's the one we based this particular study on because we can see the numbers, whereas some sites operate entirely behind closed doors so we have no idea who a student is communicating with when they're meant to be doing work on their own. We need to get rid of the view that I've heard communicated by professors that these sites either don't really exist, their students would never cheat, or that these students are only cheating themselves. Ultimately, yes, they are cheating themselves if they get to a position where they can't continue with their course because they just lack the core foundational learning that they need, but beyond that they're cheating and being completely unfair to all the other students who are doing their own work."

The challenges around cheating using Chegg and similar websites also came up Thursday during a conference on an unrelated topic organized by the American Physical Society. Robert Birgeneau, a physicist and former chancellor of the University of California, Berkeley, described an incident last semester in which a student in a 600-person undergraduate physics class he was co-teaching posted a midterm exam on Chegg less than five minutes into the test -- "so a half an hour later the answers to all the problems were available on Chegg."

"We went through an elaborate process to deal with this, first of all discovering who the students were who were cheating, but then secondly threatening to sue Chegg, because they stole our intellectual property by posting the exam," Birgeneau said. "Then Chegg agreed to cooperate with us, so we then sent them two days in advance of our next exam the exams themselves and then they blocked all attempts. Then it turned out one of our students told us, however, there's another website in India."

For the final exam, Birgeneau said he and his co-professor "put together an elaborate honor statement, and you were not allowed to take the exam without having signed the honor statement, which had a lot of things that you were committing yourself to. The students understood if they violated that they would probably get thrown out of the university, because it was such a strongly worded one. That was completely successful, actually."

Douglas Harrison, vice president and dean of the school of cybersecurity and information technology at the University of Maryland Global Campus, an online institution, said the spike in Chegg usership uncovered by Lancaster was concerning. But he said "one big unanswered question is how does that spike compare to the overall number of students whose learning moved online" after the pandemic started?

"If as the article argues, most of this spike in question submission at Chegg was cheating activity, it also tracks with what we know about the primary psychological drivers of cheating, and those are mainly stress, pressure and anxiety," Harrison said. "That period of time that the article’s covering tracks with the earliest stages of the mad dash to move to remote teaching, and it was immensely disorienting and destabilizing. It’s certainly no excuse for cheating, but it's important context."

He added that the context is important because "one of the trends of the last year’s move to remote teaching has been a coterminous condemnation of cheating online as a condemnation that online education is inherently inferior or more susceptible to compromise, and there’s evidence out there that’s not the case. I just think it's important that that spike not be automatically equated with an assumption of some kind of failure of online learning."

Editorial Tags: 
Image Source: 
Chegg
Is this diversity newsletter?: 
Newsletter Order: 
0
Disable left side advertisement?: 
Is this Career Advice newsletter?: 
Magazine treatment: 
Trending: 
Trending text: 
Likely Increase in Cheating
Trending order: 
2
Display Promo Box: 
Live Updates: 
liveupdates0
Posted in News | Leave a comment

SolarWinds patches vulnerabilities that could allow full system control

Source: Ars Technica

Article note: Remember how, like a decade ago, everyone realized paid bolt-on security products were bullshit bordering on malware in the desktop space, and got rid of the Symantec/McAfee type bullshit? It turns out the same kind of C-Suite morons who buy security products from ads in airports didn't get the memo, and now we have the breach that keeps on breaching. It took me seeing three articles go by before I realized it's another separate widely exploited SolarWinds vuln being reported on.
SolarWinds patches vulnerabilities that could allow full system control

Enlarge (credit: Getty Images)

SolarWinds, the previously little-known company whose network-monitoring tool Orion was a primary vector for one of the most serious breaches in US history, has pushed out fixes for three severe vulnerabilities.

Martin Rakhmanov, a researcher with Trustwave SpiderLabs, said in a blog post on Wednesday that he began analyzing SolarWinds products shortly after FireEye and Microsoft reported that hackers had taken control of SolarWinds’ software development system and used it to distribute backdoored updates to Orion customers. It didn’t take long for him to find three vulnerabilities, two in Orion and a third in a product known as the Serv-U FTP for Windows. There's no evidence any of the vulnerabilities have been exploited in the wild.

The most serious flaw allows unprivileged users to remotely execute code that takes complete control of the underlying operating system. Tracked as CVE-2021-25274 the vulnerability stems from Orion’s use of the Microsoft Message Queue, a tool that has existed for more than 20 years but is no longer installed by default on Windows machines.

Read 9 remaining paragraphs | Comments

Posted in News | Leave a comment

Brawl between two UK fraternities started as a feud over rental property, records show

Source: Kentucky.com -- Education

Article note: That is some "living down to stereotypes" shit of the highest order.

A simmering dispute between two University of Kentucky fraternities over rental properties boiled over into an egging incident and two late-night brawls last September, court records show. Three UK students … Click to Continue »

Posted in News | Leave a comment

4+1 Multi-pens: A Survey

My increasingly absurd 4+1 multi-pen collection, left to right:
Dr.Grip 4+1, Uni Style Fit Meister 5, Zebra Clip-On Multi, Zebra Sarasa, Hi-Tec-C Coleto 5, Uniball Jetstream 4&1

I’m a little obsessive about my everyday objects, in that stereotypical engineer “determine an optimal solution and stick to it” sort of way. For about a decade I carried a little (handmade, periodically replaced) sleeve with a Bic MatiC grip 0.7 pencil and Black, Blue, and Red Uniball Vision Elite pens in 0.5mm (plus a chapstick and flash drive).

Trusty old Pocket Organizer

That utensil set is for a note-taking system where my own work and other temporary or uncertain things are in pencil, notes and other reference material are in black, provided examples and commentary are in blue, and corrections and attention points are in red. Diagrams are multi-colored for clarity.

I have a ritualized paper-handling (I carry a clipfolio and periodically file into binders), page-labeling (Top right,Topic/Date/Sequence Number), bullet hierarchy (A little drift over the years, but mostly ⊕ > • > ⁃) , and archiving (Rarely-used topics get twist-ties through the binding holes and stored in boxes) system that I’ve been using for decades at this point.

Since 2019 I’m primarily teaching labs, so in addition to my own note-taking I do a lot of drawing examples and correcting solutions where a variety of colors is useful, and I kept wanting more than the 3+1. Carrying around a whole stack of writing utensils seemed unreasonable… until I found a 4+1 multi pen I got as conference swag, and it set me off on an expedition.

I tried my conference-swag Zebra Clip-On Multi for a few weeks, liked it for the most part but missed the writing quality of my Vision Elites, got slightly obsessed, and bought examples of most of the 4+1 pen bodies on the market to compare. Then I used each for a week during the Fall ’19 semester to get a feel for them.

TL;DR
My current favorite 4+1 multi-pen body is the Pilot Dr. Grip 4+1, loaded with Uniball Signo D1 refills and Pentel Ain Stein HB lead. It’s only major weakness is the covered tiny eraser.

Continue reading
Posted in DIY, General, Objects | Leave a comment

3C589 PCMCIA Network Cards and OpenStep

Google being displayed in OmniWeb 3.1 on OpenStep 4.2.  In 2021.

After my last post about OpenStep 4.2 on my ThinkPad 560E, one of the dangling TODO items was figuring out why the network setup that was made of all known-working parts didn’t work. I’ve now figured it out.

[TL:DR: The OpenStep 4.2 Etherlink III driver does a bad job with PnP and Media Autodetect on 3C589 cards. To make one work you will probably need to use 3Com’s DOS configuration utility to configure the EEPROM in the card.]

Continue reading
Posted in Computers, DIY, General, Objects | Leave a comment

Nntpit: Minimalist Reddit2nntp Gateway

Source: Hacker News

Article note: I frequently make the observation that the BBS -> Usenet -> Forum -> Digg -> Reddit continuum has been essentially the same thing reinvented over and over with a little less user control and a little more centralization and coercion. Looking at reddit-via-newsreader makes it very clear just how good the "the user and their client are in control of presentation, protocols move content between them" model was, and how thoroughly we've lost it.
Comments
Posted in News | Leave a comment

How Yevgeny Zamyatin shaped dystopian fiction

Source: Hacker News

Article note: _We_ really is a good read that more people should be exposed to.
Comments
Posted in News | Leave a comment