This article includes news items that didn’t quite make the cut for part 8 of my annual review of the year in ed-tech
Pokémon Go and the Future of Ed-tech Surveillance
Spot the errors about COPPA and privacy in this story about Pokémon Go.
Bored with Pokemon Go? Try this exciting new app to “catch ’em all” and participate in a mainstreaming of surveillance culture: a mobile app for finding bank robbers, built by the FBI.
Data Obsession and Data Collection
Should we caution the government from collecting even more – something the Department of Education has indicated it plans to do?
“CCSF can’t prove it taught 16,000 students, must pay $39 million,” The San Francisco Chronicle reports. Mindwires Consulting’s Phil Hill says this is the “price of faculty not using LMS.” Rather, it’s the price of deciding that “proof” of online education requires the LMS.
On the Ethics of Data-Driven Journalism: of fact, friction and public records in a more transparent age
The latest in measuring learning from Richard Arum of Academically Adrift fame: “Plan to Define and Test What Students Should Know.” Arum and co-author Josipa Roksa also have an op-ed in Inside Higher Ed on assessment.
“Critical Educational Questions for Big Data,” Parts 1 and 2 by Ben Williamson.
Raising the Bar: The Metric Tide That Sinks All Boats
Via FiveThirtyEight: “What We’re Missing In Measuring Who’s Ready For College.”
Students as Cheaters
Via Inside Higher Ed: “About 6 percent of students who took an online final exam proctored by Examity last fall broke the rules. … Most of the attempts to cheat came in the form of a cheat sheet (21 percent) or using Google to look up answers or translations (14 percent).”
“Ohio State Accuses 85 Students of Cheating on Online Tests,” The Chronicle of Higher Education reports.
“New Services Make Cheating Easier Than Ever For Students,” Buzzfeed reports.
Via NPR: “Educators Went To Jail For Cheating. What Happened To The Students?”
Via The New York Times: “China Threatens Jail Time for College Entrance Exam Cheaters.”
Interesting verb choice in this headline: “Sophisticated test scams from China invade U.S. college admissions.” And the subhead: “Students hire imposter ‘gunmen’ to take the SAT, the GRE and other tests.”
Breaches and Vulnerabilities
Via CSO: “Schools put on high alert for JBoss ransomware exploit.”
Speaking of cybercrime, you know it’s bad when hackers use ransomware to attack San Francisco’s public transit system. Good thing all the technologists in the vicinity are out there solving the world’s most pressing problems.
According to a survey by Webroot, “Students Say They’d Only Pay Ransomware Operators About $50.”
UC Davis suffered a week-long LMS outage, and lots of folks had to weigh in with their thoughts on what this meant about Sakai, running one’s own infrastructure, and open source. “The end is near,” as Buzzfeed put it. Interestingly, the University of Calgary was hit with a massive malware attack, taking out email – EMAIL! – for the week and no one had a “hot take” on what this means for the future of that particular piece of university tech. Weird.
Via Inside Higher Ed: “The FBI and the United States Attorney for the Southern District of New York on Wednesday announced the arrest of a Phoenix-based man who attempted to gain access to more than 2,000 university email accounts at more than 75 colleges and universities.”
Montclair Still Feels Strife From School Tests Posted Online in ’13
“Pop star tells fans to send their Twitter passwords, but it might be illegal,” says Ars Technica. Illegal or not, this is such a dumb idea. “#HackedByJohnson entices young fans so he can post cute messages in their name.”
“How Minecraft undermined my digital defences,” by the BBC’s Mark Ward. (A pretty important read on security and privacy for parents/users of Minecraft.)
Oh look. A(nother) new interoperability standard for ed-tech. Cue xkcd.
Ed-Fi and IMS Global announced a partnership, Edsurge reports, “to work towards creating a ‘unified approach to rostering.’”
The Ed-Fi Alliance and IMS Global Learning Consortium have announced their plans to develop “a single, unified approach for rostering across the most adopted K–12 data standards and have now further solidified their joint support for IMS OneRoster™ as the cross-industry rostering API.” Hooray. Trademarked standards.
Privacy Legislation and Lawsuits
Via The Oregonian: “Two former University of Oregon Counseling & Testing Center employees, who blew the whistle on a superior they said accessed an alleged rape victim’s health records without her consent, settled a lawsuit with the school.”
“A bill designed to strengthen the privacy and security of student educational data continued down its apparently smooth path to passage Wednesday, winning unanimous Senate Education Committee approval,” Chalkbeat reports. Lest you think this is a story about federal legislation and that DC gridlock is over, to be clear, this is a measure in the state of Colorado.
Proposed legislation before Georgia’s General Assembly would “require schools to provide certain information to students and parents prior to using any digital-learning platform; to provide for definitions; to provide for destruction of student data collected through a digital-learning platform; to provide the opportunity to opt out; to provide for legislative findings; to provide for related matters; to repeal conflicting laws; and for other purposes.”
Via Chalkbeat: “A Colorado mom asked for records about her son. The school district billed her $567.” Yay, FERPA.
From the National Association of State Boards of Education: “Policymaking on Education Data Privacy: Lessons Learned.”
Via The Chronicle of Higher Education: “Group Unveils a ‘Model Policy’ for Handling Student Data.”
“Are Student Privacy Concerns Holding ‘Hostage’ a Key Education Research Bill?” asks Education Week. “Hostage.” Nice word choice.
Privacy Protections and Privacy Education
Bill Fitzgerald looks at school directory information and how much can be gleaned from this data, despite the privacy protections that FERPA purports to provide.
Education Technology, Data Collection, and Infosec
Apple released a preview of features that will appear in iOS9.3 and that will help schools manage devices more easily. More via Edsurge.
Apple has acquired LearnSprout, a company that initially worked on API- and SIS-integration tools (but that had recently pivoted to an analytics dashboard). Edsurge surmises that the acquisition will help Apple with new iOS features that promise to better integrate devices and apps into school administrative tools.
Via The New York Times: “Who’s Too Young for an App? Musical.ly Tests the Limits.” (Once upon a time, Musical.ly was an ed-tech startup.)
I’m sticking this here in the surveillance section as it crosses the line into creepy. Via Campus Technology: “MIT Teaches Wireless Routers to Know How You’re Feeling.”
Via TorrentFreak: “iKeepSafe Inadvertently Gives Students a Valuable Lesson in Creators’ Rights.”
Via Buzzfeed: “We Looked Inside Yale’s Admissions Files And Found How They Talk About Applicants.”
Meanwhile, over at Edsurge: “A Small Liberal Arts School Becomes a Testing Ground for the ‘Facebook of Learning Management Systems’.”
Via The New York Times: “Public Advocate Letitia James has sued the New York City Education Department, saying a $130 million computer system meant to track services for students with disabilities was a failure.”
A Culture of Surveillance
Inside Higher Ed reports that a student filmed a psychology instructor at Orange Coast College as she made comments in class about Donald Trump and posted the video to the College Republicans’ Facebook page. She’s had to flee the state because of threats.
And I guess that’s why I’m a little skeptical about professors clamoring to be on “the watchlist.” A better tactic, I’d argue, is to make sure your department and institution have concrete steps they’ll take in order to protect academic freedom and – quite literally – protect academics’ lives when these sorts of threats occur.
The Washington Post asks, “When every moment of childhood can be recorded and shared, what happens to childhood?”
Surveillance-as-a-service, via the Hechinger Report: “Paying attention?” an app asks – helping kids monitor their own classroom behavior."
The University of Melbourne said it would track students’ location through their WiFi usage.
Virginia Commonwealth University boasted that digital cameras installed around campus had captured “evidence in more than 1,000 incidents.”
Universities and Surveillance Capitalism
“It’s time to rethink ethics education,” writes Annette Markham in response to the OKCupid data release fiasco."
The Chronicle of Higher Education chats with Candace Thille: “As Big-Data Companies Come to Teaching, a Pioneer Issues a Warning.”
The EFF points out “Loopholes and Flaws in the Student Privacy Pledge.” The Future of Privacy Forum responds: “Student Privacy Pledge Loopholes? Nope. We Did Our Homework.” Did you know that the Future of Privacy Forum is financially backed by AT&T, Comcast, Facebook, and Google? Did you know that its run by Jules Polonetsky, who used to run DoubleClick, Google’s ad service? (I did. I did my homework.)
“Why Are Educators Learning How to Interrogate Their Students?” asks The New Yorker.
Via the Washington Post: “ This employee ID badge monitors and listens to you at work – except in the bathroom.” Coming soon to an LMS near you…
Via Education Dive: “Projections: 4 years to widespread wearable tech in K–12.” Imagine the surveillance possibilities!
Via The Chronicle: “UC Berkeley faculty members are buzzing over news that University of California President Janet Napolitano ordered the installation of computer hardware capable of monitoring all e-mails going in and out of the UC system. ‘The intrusive device is capable of capturing and analyzing all network traffic to and from the Berkeley campus and has enough local storage to save over 30 days of all this data,’ Ethan Ligon, one of six members of the school’s Senate-Administration Joint Committee on Campus Information Technology, wrote in an e-mail Thursday to fellow faculty members.”
Via Inside Higher Ed: “The faculty of the Graduate School at Rutgers University in New Brunswick took a stand against Academic Analytics on Tuesday, resolving that administrators shouldn’t use proprietary information about faculty productivity in decisions about divvying up resources among departments, or those affecting the makeup of the faculty, graduate teaching assignments, fellowships and grant writing. They also demanded to view their personal data profiles by Sept. 1.”
“Officials are backing away from a controversial rule allowing Minnesota’s state colleges and universities to examine the personal cellphones of their employees,” The Star Tribune reports.
According to the AP, “a Tampa, Florida, middle school teacher has been suspended after parents complained that she gave students a questionnaire on personal information including their sexual orientation, gender identity and religion.”
Survey by security camera maker finds more than half of adults want security cameras in schools.
“California district embraces wearable tech in the classroom,” says Education Dive. The district: The Tustin Unified School District. The surveillance and privacy questions: brushed off.
“Popular Discussion Platform Piazza Getting Pushback For Selling Student Data,” says Mindwire Consulting’s Phil Hill.
“Will fingerprint scans at Lake Zurich School District 95 protect students’ privacy?” asks the Lake Zurich Courier. Dear god no.
Google is Tracking Your Students
Bill Fitzgerald has more questions for Google.
“G Suite Found to Comply With Federal, State Privacy Laws,” says Edsurge – that is, compliant according to the California Educational Technology Professionals Association, not a court of law.
Via the EFF: “Google Changes Its Tune When it Comes to Tracking Students.” Maybe.
Via Education Week: “Google Acknowledges Data Mining Student Users Outside Apps for Education.”
Social Media Monitoring
Via The Guardian: “Facebook, Twitter, Google and Microsoft team up to tackle extremist content.”
The companies are to create a shared database of unique digital fingerprints – known as “hashes” – for images and videos that promote terrorism. This could include recruitment videos or violent terrorist imagery or memes. When one company identifies and removes such a piece of content, the others will be able to use the hash to identify and remove the same piece of content from their own network.
Via the Brennan Center for Justice: “Map: Social Media Monitoring by Police Departments, Cities, and Counties.”
Via The Verge: “The FBI just got its hands on data that Twitter wouldn’t give the CIA.” Good thing @jack’s so woke.
The privacy-violating hashtag #whatIwishmyteacherknew has been turned into a book, so that the teacher behind this can profit from her students’ struggles. So unbelievably gross. Here’s a different example of ownership (and the surrender of ownership) of students’ stories via the Star Tribune: “Retired Minn. teacher’s final assignment: Giving back his students’ stories. Richard Roach retired from teaching 23 years ago, but he’s still passing back ”autobiographies“ he assigned decades ago.”
Via ESPN: “Ole Miss officials have determined that a text message conversation published to Miami Dolphins rookie Laremy Tunsil’s Instagram account during the NFL draft did happen last year, sources told ESPN’s Outside the Lines, but the school is still looking into whether the messages were altered before they were published.” The Instagram photo showed Tunsil asking Ole Miss’s athletic director for help paying his rent and his mom’s utility bill. It was one of two social media messages – the other a Twitter photo of Tunsil smoking marijuana through a gas mark – that were posted during the NFL draft.
Via The Intercept: “The CIA Is Investing in Firms That Mine Your Tweets and Instagram Photos.”
Bill Fitzgerald on “Students and Social Media.”
“Students, Directory Information, and Social Media – Part 2” by Bill Fitzgerald.
Via the ACLU: “Facebook, Instagram, and Twitter Provided Data Access for a Surveillance Product Marketed to Target Activists of Color.” More via The NYT. This particularly tool is sold by Geofeedia, which also sells schools surveillance tools to monitor students’ social media profiles.
The latest in bad blockchain ideas: the UK government will test using the blockchain to track welfare recipients.
Via Reuters: “Immigration hardliner says Trump team preparing plans for wall, mulling Muslim registry.”
Via the EFF: “Tech Companies, Fix These Technical Issues Before It’s Too Late.” “If a tech product might be co-opted to target a vulnerable population, now is the time to minimize the harm that can be done.” Education technology companies. Get your shit together now.
Via Techcrunch: “UK parliament rubberstamps mass surveillance law.”
Via the MIT Technology Review: “AT&T Is Selling Law Enforcement Access to Its Customers’ Data.”
The Tor Project still has not been able to get an answer as to whether or not Carnegie Mellon University worked with the FBI in order to de-anonymize the Tor browser’s users.
Coffee shops in the UK that run Wi-Fi networks might have to store internet data under new snooping laws, The Guardian reports.
“The UK government’s National Pupil Database has already been used to combat ‘abuse of immigration control’ – despite ministerial assurances that the collection of pupils’ nationality will not be passed to the border officials,” The Register reports. The Guardian has more details.
Via Bloomberg: “Secret Cameras Record Baltimore’s Every Move From Above.”
The FBI has requested that Apple provide a back door to bypass device security. CEO Tim Cook has responded with “ A Message to Our Customers.” (Elsewhere, via The Daily Dot: “ Minorities and women largely shut out of encryption debate.”)
Not directly education-related, but I’ll include it here nonetheless: “US cannot force Microsoft to hand over emails stored abroad, court rules,” The Guardian reports. More via Inside Higher Ed blogger Tracy Mitrano.
Via Schools Week: “While the compulsory retention of every website visit for every person in the UK was recently debated and passed in the House of Commons in the Investigatory Powers Bill, the plans for statutory surveillance of every child’s Internet use, in schools and at home, has gone unnoticed.”
Researchers at Purdue’s Visual Analytics for Command, Control and Interoperability Environments, or VACCINE, a US Department of Homeland Security center based at the university – uh, nice acronym – have created a system that “could let law enforcement and public safety agencies tap into thousands of cameras in places like parking garages, college campuses, national parks, and highways.”
Via The New York Times: “Broadband Providers Will Need Permission to Collect Private Data.” So says the FCC.
“Talking Dolls May Spread Children’s Secrets, Privacy Groups Allege,” The Wall Street Journal reports. Buzzfeed has more on the FTC complaint filed over the My Friend Cayla doll and the I-Que robot: these toys “collect personal information from children and send it to a software company that contracts with military and intelligence agencies.”
How Minecraft undermined my digital defences
“Vtech, having leaked 6.3m kids’ data, now wants to run your home security,” Boing Boing reports.
Via Motherboard: “Internet-Connected Fisher Price Teddy Bear Left Kids’ Identities Exposed.”
VTech has acquired Leapfrog for $72 million. And a lot of publications that wrote up the press release failed to talk about VTech’s recent privacy breach. But hey. (More on VTech in the data and privacy section below.)
“Even Barbie gets a smart home and a drone in 2016,” says Mashable. Surveillance Barbie. What could possibly go wrong?
The privacy news site PogoWasRight.org has filed an FTC complaint against uKnowKids, a business that claims to monitor children online.
ToyTalk, maker of the Hello Barbie surveillance doll, is rebranding as PullString, according to Techcrunch. (Heh.) The company is pivoting away from surveillance toys (ostensibly) and will now make a scripting platforms for bots, hopping on to the latest Silicon Valley craze. I mean, not that surveillance still isn’t part and parcel of what Silicon Valley is promoting. But bots!
Via the AP: “Disney to scan fingers of 3 year olds to prevent fraud.”
And again, Motherboard Vice: “Nintendo’s Charming ‘Miitomo’ Could Be the Most Brilliant Data Mining App Ever.” (To which I extend congratulations. Because up ’til now, MOOCs were the most brilliant data mining app ever.)
Via the Pacific Standard: “Google’s Broken Privacy Promise.”
Via Open Effect: “Every Step You Fake: A Comparative Analysis of Fitness Tracker Privacy and Security.”
Via The New York Times: “Europe’s Top Digital-Privacy Watchdog Zeros In on U.S. Tech Giants.”
Via AV Club: “Apple gets patent to disable cell cameras at concerts, and it’s super evil.” Just at concerts. Suuuure.
Via Reuters: “Uber Technologies Inc on Tuesday released its first ever transparency report detailing the information requested by not only U.S. law enforcement agencies, but also by regulators. The ride-sharing company said that between July and December 2015, it had provided information on more than 12 million riders and drivers to various U.S. regulators and on 469 users to state and federal law agencies.” Uber provided data to the government in almost every case in which it was requested.
Via The Guardian: “Facebook’s new app for teens is ‘always public and viewable by everyone’.”
Via the International Business Times: “Google Gets Sued Over Face Recognition, Joining Facebook And Shutterfly In Battle Over Biometric Privacy In Illinois.”
Via The Intercept: “Tech Money Lurks Behind Government Privacy Conference.”
“Google aims to kill passwords by the end of this year,” says The Guardian. The notion of biometrics instead of passwords is a terrible idea, and let’s hope it never comes to Google Apps for Education where schools will love it (at the expense of student and staff privacy, of course).
Via the MIT Technology Review: “Largest Study of Online Tracking Proves Google Really Is Watching Us All.”
Via The Verge: “Lawsuit claims Facebook illegally scanned private messages.” The lawsuit contends that, doing so, Facebook has violated both the Electronic Communications Privacy Act and California Invasion of Privacy Act.
“Your Friendly Slack Bot Might Be Exposing Your Company’s Conversations,” says Motherboard. Probably something to keep in mind if you want to argue that Slack is “the new LMS.” But bots!!
Yik Yak and Anonymity
Shocking, I know, but Campus Technology reports that “Yik Yak Users Not So Anonymous After All.”
Via The New York Times: “Putting the Heat on Yik Yak After a Killing on Campus.”
The EFF has sent a letter to the Department of Education asking it “to protect university students’ right to speak anonymously online, warning that curtailing anonymous speech as part of anti-harassment regulations would not only violate the Constitution but also jeopardize important on-campus activism.”
Via The New York Times: “Wildly Popular App Kik Offers Teenagers, and Predators, Anonymity.”
“Yik Yak tries to make a comeback with launch of private chat,” reports Techcrunch’s Sarah Perez. The anonymous messaging app has seen no significant growth in the past year – but it’s seen plenty of negative PR about the impact it’s had on campuses.
Inside Higher Ed reports that “Several civil liberties and academic freedom organizations have sent the U.S. Education Department a letter urging it to avoid decisions or policies that would punish colleges that do not ban Yik Yak.”
“Yik Yak asks users to create user names in a step away from anonymity,” The Verge reports. What could possibly go wrong?
“Students Were Mad Their College Banned Yik Yak. So They Went on Yik Yak.”
“Library Access vs. Library Security.”
Via Boing Boing: “NH bill would explicitly allow libraries to run Tor exit nodes.”
Via Boing Boing: “First-ever Tor node in a Canadian library.”
The ALA has released library privacy guidelines for students in K–12 schools.
Via The Washington Post: “The U.S. Education Department’s new planned system of records that will collect detailed data on thousands of students – and transfer records to private contractors – is being slammed by experts who say there are not adequate privacy safeguards embedded in the project.”
“Deep Fried Data”