Post #2076896
2026-05-06 10:16 UTC
https://www.abc.net.au/news/2026-05-06/australian-educational-facilities-impacted-by-canvas-hack/106650094
We were told about this at uni today. They took pains to tell us they "only" had access to out names, emails, and messages between people. But don't worry, not our passwords or bank details.
I mean, yes, if they had access to passwords (which ought to be encrypted), or bank details (which ought to be handled separately by someone with better creds than the beleaguered uni IT team), that would be a monumental fuck up bigger than the one that actually happened. But also I* can change a fucking password. I can't change my uni address. And who knows what people have put into "messages".
* yes, I understand passwords matter because most people reuse them and don't change them. It's just a less big deal to me personally.
#breach #privacy #cyber #infosec
Replies (1)
-
@mkj@social.mkj.earth 2026-05-06 11:22
@keira_reckons@aus.social Agree 100%! In fact, I wrote a blog post about it a few months back. https://michael.kjorling.se/blog/2025/data-breach-severity-wrong-way/ Conclusion: "the harder a piece of data is to change everywhere it is used, the more severe its unintended or nonconsensual disclosure should be considered."