Changes
Created page with "'''DyKnow Vision''' is proprietary classroom software made by Dynamic Knowledge Transfer, LLC and used by the College of Engineering at Virginia Tech..."
'''DyKnow Vision''' is [[proprietary software|proprietary classroom software]] made by Dynamic Knowledge Transfer, LLC and used by the [[College of Engineering]] at Virginia Tech. DyKnow Monitor, an optional module, includes [[w:malware|malware]]-style features such as application and URL blocking, remote opening and closing of programs and screen captures of students' computers.
=Malware Features=
The Monitor module was enabled in fall of 2007 but by fall of 2010 its cost and non-compliance with the [[Acceptable Use Policy]] had been noticed by the COE Director of Information Technology and the module was removed.
=Security=
In the spring of 2009, the [[IT Security Office]] and Dynamic Knowledge Transfer were alerted that the login process was unsafe. Passwords are sent by DyKnow over the wire as an [[w:MD5|MD5 hash]] with a static [[w:Salt (cryptography)|salt]] and symmetrically encrypted with [[w:Advanced Encryption Standar|AES]]. While the salted MD5 hash is invulnerable to standard [[w:Rainbow table|precomputation attacks]], the symmetric encryption was performed with key information shared between all clients, allowing for simple decryption if the traffic can be intercepted. Within a month of notification, the issue was worked around at Virginia Tech. Users were instructed to enable [[w:SSL|SSL]] for transactions and unencrypted access to the server was shut off. No response from DyKnow on this issue is known of.
=Patents=
Dynamic Knowledge Transfer has been granted three [[w:Software patent|software patents]] related to DyKnow.
* [http://www.google.com/patents/about?id=yY94AAAAEBAJ US 7003728]
* [http://www.google.com/patents/about?id=idh_AAAAEBAJ US 7213211]
*[http://www.google.com/patents/about?id=0AC6AAAAEBAJ US 7508354]
=External Links=
* [http://schoolcomputing.wikia.com/wiki/DyKnow DyKnow entry on the School Computing wiki]
* [[Online Course Systems]] [http://www.edtech.vt.edu/ocs/dyknow/index.shtml DyKnow support page]
[[Category:Proprietary software]]
=Malware Features=
The Monitor module was enabled in fall of 2007 but by fall of 2010 its cost and non-compliance with the [[Acceptable Use Policy]] had been noticed by the COE Director of Information Technology and the module was removed.
=Security=
In the spring of 2009, the [[IT Security Office]] and Dynamic Knowledge Transfer were alerted that the login process was unsafe. Passwords are sent by DyKnow over the wire as an [[w:MD5|MD5 hash]] with a static [[w:Salt (cryptography)|salt]] and symmetrically encrypted with [[w:Advanced Encryption Standar|AES]]. While the salted MD5 hash is invulnerable to standard [[w:Rainbow table|precomputation attacks]], the symmetric encryption was performed with key information shared between all clients, allowing for simple decryption if the traffic can be intercepted. Within a month of notification, the issue was worked around at Virginia Tech. Users were instructed to enable [[w:SSL|SSL]] for transactions and unencrypted access to the server was shut off. No response from DyKnow on this issue is known of.
=Patents=
Dynamic Knowledge Transfer has been granted three [[w:Software patent|software patents]] related to DyKnow.
* [http://www.google.com/patents/about?id=yY94AAAAEBAJ US 7003728]
* [http://www.google.com/patents/about?id=idh_AAAAEBAJ US 7213211]
*[http://www.google.com/patents/about?id=0AC6AAAAEBAJ US 7508354]
=External Links=
* [http://schoolcomputing.wikia.com/wiki/DyKnow DyKnow entry on the School Computing wiki]
* [[Online Course Systems]] [http://www.edtech.vt.edu/ocs/dyknow/index.shtml DyKnow support page]
[[Category:Proprietary software]]
