Remote learning security concern after threatening strangers breach online classrooms in lockdown | #emailsecurity


Ms Wolf said the directory contained 278,233 email addresses and inappropriately disclosed her child’s personal information. She said the department’s slow response to her complaint meant children were at risk for an extended period.

“Somebody needs to be held to account in the Department of Education,” Ms Wolf said.

Data rights activist Asher Wolf complained to the Office of the Victorian Information Commissioner.

A number of parents and schools raised concerns during the year about Google Classroom, freedom of information documents show.

One parent called the directory a “privacy and security nightmare”, containing “everyone’s full names, photos, if available, and a direct mechanism to contact that student”.

One school said it was concerned teachers’ emails were visible, writing: “Already we have a parent emailing a teacher directly.”

Loading

Cyber safety expert Susan McLean said most parents accepted the use of digital platforms without understanding the risk. “Parents need to question the use of a lot of these apps and platforms and ask these types of questions,” she said.

Kylie Auld, the department’s director of knowledge, privacy and records, told the Office of the Victorian Information Commissioner the directory was originally created for cross-school collaboration but the department was moving to a school-specific directory model, to be completed by the end of June last year.

The promised transition did not occur until April this year. The single directory still exists, but can now be seen only by teachers.

Google said its education platform used counter-abuse measures such as 10-character meeting codes and gave teachers control over whether external participants could join video meetings.

Following the incidents in April and August, the Education Department immediately took steps to address the issues, a spokeswoman said.

“This has involved extensive work with the technology vendor, which is still ongoing,” she said.

“In the interim, the department has disabled the G Suite directory for students so that students can no longer search and find other users within the G Suite directory.”

In a response to the Office of the Victorian Information Commissioner, Ms Auld said email addresses were created for students to allow them to access apps used for classwork, but the ability to send or receive emails was disabled by default. The system was also configured to block emails sent to or from individuals outside the department’s directory.

However, the freedom of information documents show an external email was able to reach a student distribution list in April last year.

This story is co-published with The Citizen, a publication of the Centre for Advancing Journalism, University of Melbourne.

The Morning Edition newsletter is our guide to the day’s most important and interesting stories, analysis and insights. Sign up here.



Original Source link

Leave a Reply

Your email address will not be published. Required fields are marked *

fifty eight − = 51