Editing EduVULCAN (section)

====Blocking third-party apps====
On 25 April 2024, [https://github.com/wulkanowy/wulkanowy Wulkanowy], one of the most popular third-party [[Free and open-source|free-and-open-source]] (FOSS) clients mysteriously stopped working and started displaying a "''No Access''" error message upon logging in. Wulkanowy stated this was a deliberate move by Vulcan, who allegedly placed an extra piece of code in the login endpoint’s response. This tricked the app into interpreting the request as a failure, while the official app would continue to function.<ref>[https://czyvulcanapojebalo.pl/assets/1.webp czyvulcanapojebalo.pl - 1.webp]</ref>

The website [https://czyvulcanapojebalo.pl/historia czyvulcanapojebalo.pl] also alleges that Vulcan analyzed the Wulkanowy SDK further to try to exploit every potential vulnerability that could cause the app to malfunction.<ref name=":1">[https://czyvulcanapojebalo.pl/historia czyvulcanapojebalo.pl - "Historia"]</ref><ref>[https://czyvulcanapojebalo.pl/assets/2.webp czyvulcanapojebalo.pl - 2.webp]</ref>

Later versions of VULCAN introduced additional variables in the web requests made by the app, causing third-party clients to become inoperable after each official app update, as these variables were altered with every new version.<ref>[https://github.com/wulkanowy/messages/blob/78eb70a76aad7815563ab9a63882b2b788aeb9cf/generator/src/main/kotlin/mapping/VTokens.kt#L64 github.com/wulkanowy/messages/ - VTokens.kt#L64]</ref>