Flaw in DuckWeb was caused by lax security practices

On Tuesday, July 21 around 11 pm Pacific, I stumbled across a serious information security flaw in DuckWeb, the University of Oregon’s student information portal. For some of the work I’ve been doing with Publish2, I’ve been paying close attention to the composition and beauty of URLs. When printing out my degree audit for a trip down to Eugene the next day, I realised that the print version of the degree audit had a unique string of digits at the end of the URL. Curious, I changed the last two, refreshed, and ended up with someone else’s degree audit.

Continue reading

Appropriate mediums for appropriate conversations

The administration of Whitman College, the school I went to for my freshman year, has decided to cut funding to its Varsity Alpine and Nordic ski teams. The community is in uproar about this decision; if you aren’t on one of the teams, then you… Continue reading →

Parallels between journalism and education

I’ve got an email thread going with John Lowe of the Detroit Free Press, and it’s conversations like these that make me wish there was a better tool for having transparent, but directed conversations. The discussion topic is education, specifically the current university system, and… Continue reading →