r/canvas

Hello! I have a student saying they submitted work late to Canvas but my end says missing. I asked them to send me a screenshot and it does say late. We think maybe the student doctored the photo or used a browser extension to change how it looks.

Are we being too negative? Could there actually be a glitch where her end has a submission but my end doesn’t get it?

Ok so I just registered for this course and it uses Canvas. THIS IS MY FIRST TIME EVER USING CANVAS.

I login and I see this "latest update from Canvas" notification. Perf.

I read it and I'm just like how is this real and what did I get myself into. I'm reading that they paid the "hackers" in exchange for deleting the data and that Canvas has received "assurances that [data] will not be further shared on the dark web or elsewhere" and "proof that any copies of that data were deleted". Like who actually believes that?

Can someone explain to me what information/data got compromised?

I just registered and got access to Canvas on May 20th, so would I be impacted in any way?

Even then, what information got compromised from the cyber attack, so I know how to move accordingly in case of another incident?

With the recent chaos surrounding the Instructure / Canvas LMS breach by the ShinyHunters group, I’ve been digging into the current security status. Since a lot of institutions had their final exams disrupted and millions of users' data got exposed, I wanted to share a quick update on where things stand and get your thoughts.

The Current Situation:

Instructure has officially patched the loopholes, rotated the compromised API keys, and paid the ransom to secure the leaked data logs. Technically, Canvas is live and safe to use right now.

The Real Problem (IMO):

This is the second time in less than a year that this specific group targeted Instructure's infrastructure (remember the Salesforce environment breach?).

While the public cloud/multi-tenant setup is convenient, relying entirely on a centralized platform means we don't have absolute control over our server environments. Today it's patched, but tomorrow a new zero-day vulnerability could surface.

How to actually protect your institution?

For schools or corporate training programs that want the features of Canvas without the global vendor risk, migrating to a standalone, self-hosted custom instance seems like the only permanent fix. It gives you 100% control over your security configurations and data protocols.

I had an open book exam on Canvas yesterday. I wrote my answer in canvas and the pasted it into Google docs to check the spelling and then deleted the original answer to replace it with my answer with the right spelling . How likely will I get flagged for that? I also copied a few paragraphs (it is about pros and cons and about 80 words) directly from my personal notes to my canvas answer.

How likely will I get flagged as academic misconduct? 😭🥲

We are new to Canvas and I'm trying to figure out what the best practice is for shell course creation. We have several teachers who have 5-7 unique classes and they want to work on migrating their content over the summer. We had created 1 sandbox for each teacher, but support is recommending that we create sandbox courses for each of these unique courses that could be used for development.

Is there a better way to do this? I don't want students to be enrolled in these sandbox courses.

So one of my summer courses has no due dates other than everything is due the last day so I have procrastinated a little and just got on to do some work today and now the course is gone.... what happened and whar do i do? can i still take the class?

I know Canvas said they were working with law enforcement, FBI, forensics etc.

Is it likely the people responsible for this will face any consequences?

Since Canvas free still isn’t working, would anyone recommend a similar LMS program to use?

I'm about to start the final for my Bio 101 class, but I'm confused. The last three exams have all been in-person, and this final is at-home.

The exam is a simple canvas quiz; no lockdown browser, no camera on, nothing. I emailed the prof to ask if notes are allowed, and she said they aren't. My question is, is there some way she plans on being able to tell whether we used our notes? It doesn't seem like there is. I know that canvas can tell when you open another tab but other than that....?

It really seems like she is begging for her students to cheat. I won't be, but how does she plan on mitigating it?

Someone just tried to login to my school email account—I got an email with the login code to my personal linked one so someone has my password. Luckily I don’t reuse passwords across anything. I never login by clicking on links/etc—only on the app so it wasn’t stolen through phishing and I can’t think of any other possible way. Like I said, I don’t reuse passwords so it’s fully unique to my student miscrosoft account.

Edit: it seems like they don’t have my password, they were trying to change my password (thank you commenters) but 5 ppl have commented they got the same email (I posted a pic of it in a thread, I’ll post another in a seperate commen) so it really seems like they did release or sell our emails?

Edit 2: my mom, who is teaching at a university using canvas, got the same email. Our emails were definitely leaked or sold by someone who’s probably using a bot to find people without 2 factor on and get into their accounts?

Please turn it on if you haven’t!

Already sent help tickets to Instructure. All three have been escalated and no solution for almost 6 days.

New Quizzes: When attempting to edit a quiz in an new course (after copying an old course), I get a "failed to fetch" error.

Google Assignments LTI 1.3: Cannot see rendered documents in Speedgrader. I can download them, but cannot see the .docx files (converted from Google Docs or Google Sheets) in the window where I normally see them. Downloading & grading them all - then uploading after - is not a workable option for most of my colleagues.

Google Assignments LTI 1.3: Have to reattach every Doc, Sheet, Slide after copying through course copy.

I'm going to guess this is all a result of rotating APIs after the hack. Or maybe due to some single-sign-on issue (we log in w/ Microsoft).

Anyone experiencing anything similar from an admin, teacher, or designer role?

can the "moderate" feature detect it?

apolgy for bad english

where were u wen Canvas die

i was at house eating dorito when phone ring

"Canvas is kil"

"no"

Hi all, I volunteer at a rural k-8 elementary school with very low-income kids. This school doesn't assign homework and doesn't teach the 7/8 graders how to use Canvas before high school, which is causing a bunch of them to drop out or fail in the first year. All of the local high schools use Canvas.

Is there a way for me to make a class on Canvas for them to use to practice? Do I need to pay for a teacher account?

Hi, I want to ask something: should the Free For Teachers accounts be reinstated with additional restrictions and security measures, or replaced with something new? This question came to mind when I was talking to some of my family members. So I was talking about the Canvas hack, specifically how Instructure was hacked through an exploit targeting the FFT accounts. And it kind of came around to where my brother said it would be a good idea to reinstate the accounts but with extra security because he thinks that trying to replace it would be more trouble because of they would most likely make a new system from scratch meaning there spending more money not only that but you need to think about teachers who are used to it and may need to get accustom to a new system. My mom has a similar response; hers was more about how her job has these certifications to use a system, and when they run out, instead of paying to reinstate them, they just buy a new one, which means they have to get used to a similar but generally different system.

I ask this question because well it's been on my mind for awhile now and I want to see what other peoples opinions on this, for me its similar to my brothers but to me it the add issue of having to stress test the new system along with this is still during when many students who knows where are still taking classes or teachers who still need to grade assignments and exams. So making a new system would have a bigger disruption, and you may not know if the security measure might not be enough, whereas with the current system, you know what's wrong, so you can cover each opening to make sure it's safe, even if it's not zero, it's better than what it originally was.

Once again I ask this because I'm just very curious on other peoples opinions as I have seen other teachers still worried about the closed FFT accounts, and how they need to grade assignments.

Edit: Okay so I was looking around and I think I found how FFT was exploited so it seems that it was an underlying issue with the support ticketing system, so with that in mind the mean. The Vector: The "Free-For-Teacher" program allows educators to create Canvas accounts without standard institutional verification. Hackers specifically targeted this free offering because it provided a softer entry point than heavily secured university servers. The Vulnerability: Attackers exploited an underlying flaw in the support ticketing system used in the FFT environment.

My school is trying to tell us that canvas wasn't hacked and it's just an update they pushed out that broke everything. It's ridiculous quite frankly. Either instructure lied to them or they just don't want to cause panic. Either way, I just can't believe that the it department is gaslighting is.

Has anyones teach accidentally given you a grade as a percentage rather than the fraction? for me i was supposed to get a 30/50 but instead i got a 60/50. My real question is, if this has happened to anyone, how often has a teacher corrected it?

Kinda freaking out since that’ll make or break it for me since i’m so close to passing & im graduating in a week and a half.

Bruh when i was uploading my video assignment before it could finish the upload it became 12:00 and the assignment was locked 🥀