EduVULCAN: Difference between revisions

Line 20:

==== Blocking third party apps ====

On the 25th of April 2024, [https://github.com/wulkanowy/wulkanowy Wulkanowy], one of the most popular 3rd party FOSS clients, mysteriously stopped working and started displaying a "''No Access''" error message upon logging in. Wulkanowy stated this was a deliberate move by VULCAN, who allegedly placed an extra piece of code in the login endpoint’s response. This tricked the app into interpreting the request as a failure, while the ~~normal~~ app would continue to function.<ref>https://czyvulcanapojebalo.pl/assets/1.webp</ref>

On the 25th of April 2024, [https://github.com/wulkanowy/wulkanowy Wulkanowy], one of the most popular 3rd party FOSS clients, mysteriously stopped working and started displaying a "''No Access''" error message upon logging in. Wulkanowy stated this was a deliberate move by VULCAN, who allegedly placed an extra piece of code in the login endpoint’s response. This tricked the app into interpreting the request as a failure, while the official app would continue to function.<ref>https://czyvulcanapojebalo.pl/assets/1.webp</ref>

[https://czyvulcanapojebalo.pl/historia czyvulcanapojebalo.pl] also alleges that VULCAN analyzed the Wulkanowy SDK further to try to exploit every potential vulnerability that could cause the app to malfunction.<ref name=":1">[https://czyvulcanapojebalo.pl/historia czyvulcanapojebalo.pl - "historia"]</ref><ref>https://czyvulcanapojebalo.pl/assets/2.webp</ref>

Line 38:

Additionally, VULCAN criticized the [https://czyvulcanapojebalo.pl/assets/10.webp developer’s review of the official app on Google Play] and referred to unofficial apps as "parasites."<ref name=":0" /><ref name=":1" />

The eduVULCAN Terms of Service was also adjusted to disallow the use of external apps (§3, section 11).<ref>[https://eduvulcan.pl/dokumenty/regulamin eduVULCAN - Terms of Service "Regulamin"]</ref> These measures appeared to prepare the way for the new account system.

The eduVULCAN Terms of Service was also adjusted to disallow the use of external apps and clarify that Vulcan "may employ technological measures to prevent access to the service using such software" (§3, section 11).<ref>[https://eduvulcan.pl/dokumenty/regulamin eduVULCAN - Terms of Service "Regulamin"]</ref> These measures appeared to prepare the way for the new account system.

== New eduVULCAN account system ==

Line 46:

# '''''eduVULCAN'' accounts''' - These provide access to the mobile app but come with new limitations.

Several '''''previously free''''' features in VULCAN, such as '''push notifications, messaging teachers, and submitting absence notes,''' are now behind a paywall. The cost for the full school year is '''32.99 PLN with tax''' (around 8 USD) '''per student'''.<ref>https://dziennik.vulcan.edu.pl/kev/usluga-rozszerzona/#oferta</ref> This fee is in addition to the costs schools pay for access to the service, which remain undisclosed.

Several '''''previously free''''' features in the VULCAN mobile app, such as '''push notifications, messaging teachers, and submitting absence notes,''' are now behind a paywall. The cost for the full school year is '''32.99 PLN with tax''' (around 8 USD) '''per student'''.<ref>https://dziennik.vulcan.edu.pl/kev/usluga-rozszerzona/#oferta</ref> This fee is in addition to the costs schools pay for access to the service, which remain undisclosed.

Access to the website version of these features is still free, however this is required by law.<ref>https://isap.sejm.gov.pl/isap.nsf/download.xsp/WDU20240000050/O/D20240050.pdf</ref>

@@ Line 20: / Line 20: @@
 ==== Blocking third party apps ====
-On the 25th of April 2024, [https://github.com/wulkanowy/wulkanowy Wulkanowy], one of the most popular 3rd party FOSS clients, mysteriously stopped working and started displaying a "''No Access''" error message upon logging in. Wulkanowy stated this was a deliberate move by VULCAN, who allegedly placed an extra piece of code in the login endpoint’s response. This tricked the app into interpreting the request as a failure, while the normal app would continue to function.<ref>https://czyvulcanapojebalo.pl/assets/1.webp</ref>
+On the 25th of April 2024, [https://github.com/wulkanowy/wulkanowy Wulkanowy], one of the most popular 3rd party FOSS clients, mysteriously stopped working and started displaying a "''No Access''" error message upon logging in. Wulkanowy stated this was a deliberate move by VULCAN, who allegedly placed an extra piece of code in the login endpoint’s response. This tricked the app into interpreting the request as a failure, while the official app would continue to function.<ref>https://czyvulcanapojebalo.pl/assets/1.webp</ref>
 [https://czyvulcanapojebalo.pl/historia czyvulcanapojebalo.pl] also alleges that VULCAN analyzed the Wulkanowy SDK further to try to exploit every potential vulnerability that could cause the app to malfunction.<ref name=":1">[https://czyvulcanapojebalo.pl/historia czyvulcanapojebalo.pl - "historia"]</ref><ref>https://czyvulcanapojebalo.pl/assets/2.webp</ref>
@@ Line 38: / Line 38: @@
 Additionally, VULCAN criticized the [https://czyvulcanapojebalo.pl/assets/10.webp developer’s review of the official app on Google Play] and referred to unofficial apps as "parasites."<ref name=":0" /><ref name=":1" />
-The eduVULCAN Terms of Service was also adjusted to disallow the use of external apps (§3, section 11).<ref>[https://eduvulcan.pl/dokumenty/regulamin eduVULCAN - Terms of Service "Regulamin"]</ref> These measures appeared to prepare the way for the new account system.
+The eduVULCAN Terms of Service was also adjusted to disallow the use of external apps and clarify that Vulcan "may employ technological measures to prevent access to the service using such software" (§3, section 11).<ref>[https://eduvulcan.pl/dokumenty/regulamin eduVULCAN - Terms of Service "Regulamin"]</ref> These measures appeared to prepare the way for the new account system.
 == New eduVULCAN account system ==
@@ Line 46: / Line 46: @@
 # '''''eduVULCAN'' accounts''' - These provide access to the mobile app but come with new limitations.
-Several '''''previously free''''' features in VULCAN, such as '''push notifications, messaging teachers, and submitting absence notes,''' are now behind a paywall. The cost for the full school year is '''32.99 PLN with tax''' (around 8 USD) '''per student'''.<ref>https://dziennik.vulcan.edu.pl/kev/usluga-rozszerzona/#oferta</ref> This fee is in addition to the costs schools pay for access to the service, which remain undisclosed.
+Several '''''previously free''''' features in the VULCAN mobile app, such as '''push notifications, messaging teachers, and submitting absence notes,''' are now behind a paywall. The cost for the full school year is '''32.99 PLN with tax''' (around 8 USD) '''per student'''.<ref>https://dziennik.vulcan.edu.pl/kev/usluga-rozszerzona/#oferta</ref> This fee is in addition to the costs schools pay for access to the service, which remain undisclosed.
 Access to the website version of these features is still free, however this is required by law.<ref>https://isap.sejm.gov.pl/isap.nsf/download.xsp/WDU20240000050/O/D20240050.pdf</ref>