Micro Librarian Support?

[GuyJD]

If anyone's bothered to try it... is it as slow to load and a horrible interface like the library stuff?

I had to register to try and get an issue resolved, it's not the quickest site, not very intuitive to use and I get about 50 emails a day to say that another support thread had been created withing the "MLS Junior Librarian.Net" circle

 

So it definitely sounds like it's run by the same people.

[mavhc]

Lucky they had so many free programmers who had time to create a new site because all the bugs in their existing systems were fixed

[LeMarchand]

and key influencers

 

Like Elle Darby?

 

I also got an email detailing all the things I must do to make their system work (aka, "It's your fault" )

 

I didn't get that one, but then my "cloud" library has switched to Libresoft and my other 2 are still on the old "non-cloud" version - much to the concern of MLS.

[CMDRShepard]

When you call their support they recommend getting in contact with them via https://edoocoo.com

 

I had an issue yesterday along with a few other people that also posted on there and they replied on there within a couple of hours, so if you have an issue it may be worth registering on edoocoo to see if that gets a response.

 

I would recommend avoiding Edoocoo like the plague. I tried creating an account there last night, which failed on first attempt with no error message, so I tried again after opening the 'Inspect Element' function of Firefox so I could check if my request was actually being sent, and somehow accidentally obtained details for Charlie (who I assume to be the site's creator), including administrator password and email addresses in plain text. This website has some awful functionality and security, and if I were a customer of theirs, I'd be pushing for MLS to sack their current CyberSec/PenTest team if that's any indication of the security present in their hosted solutions.

 

I sure as hell would not want our pupils' personal details to be publicly available on the web because they do not understand how to properly harden their public web solutions. I'm fairly sure it likely breaches some laws too.

[BOOT]

There are similar issues with MLS too...

[Katy]

Ew. I just went on there and hit F12, expanded a few of the hidden divs and saw this:

 

 

Obviously it gets replaced with real text when unhidden but still... just cringeworthy.

[localzuk]

Edoocoo seems a bit dodgy - they filed accounts saying they are a dormant company. Which they quite obviously are not! Their domain is apparently registered to Oomagoo Ltd, which was dissolved by court order...

 

Very interesting who MLS get into bed with.

[bennz]

Since MLS is owned by Capita I wonder if they are aware that the people that run MLS on their behalf have spawned another company and are moving Capita customers to use it.

You also then have to wonder how much development time, testing etc is being put into the library system schools are paying a large sum of money for.

Doesn't seem right at all.

[CharlieW]

Hi Guys, Charlie here from edoocoo. I hope you don’t mind me appearing on this forum.

MLS have made me aware of the post that was uploaded regarding edoocoo security issues. They’re obviously concerned as am I. I’ve just asked my developers to take a look at what the problem was and he can’t seem to find anything. Can anyone shed some light on it for me please, so we can replicate it, find it and fix it?

 

Quick bit of background on edoocoo. We’re a small start up trying to create a better platform for the education community to come together. We’ve personally funded all work to date, and have not traded - hence the dormant status. I approached MLS to trial the platform as another channel of support for their customers, which they agreed to do. We have a small, independent team of developers who work on edoocoo, and I can vouch that they are really working hard to make the platform better with every release.

 

 

I would personally appreciate it if you could let me know the exact stages that you went through to get the error message, and see my log in details. We don’t actually have an administrator password, so again I’m really interested to find out if we have got a problem we haven’t discovered so we can fix it.

We do take all feedback seriously, so please do feel free to fire over any thoughts you have on edoocoo, and I’ll have a good look at them.

[bald_pig]

So, MLS are watching this thread, and can respond quickly when they feel like it?

 

interesting...

[CharlieW]

I think they were actually directed to the site by a school IT manager today on twitter. They then highlighted the edoocoo problem to me. The response was from me, as I'm really keen to find out if there is a problem with the security of our platform, so we can jump on and fix it quickly. Edited February 7, 2018 by CharlieW
Updated

[CMDRShepard]

MLS have made me aware of the post that was uploaded regarding edoocoo security issues. They’re obviously concerned as am I. I’ve just asked my developers to take a look at what the problem was and he can’t seem to find anything. Can anyone shed some light on it for me please, so we can replicate it, find it and fix it?

 

 

Hi Charlie, good to hear from you.

 

Personally, I would advise starting by changing your administrator password from '*' to something more secure.

[kevrod79]

Interesting call today with one of their team leaders. Seems the customer services manager is unwell. Told them the product was poor, the support was poor and the comms were poor. Asked what was wrong with product to be told that the developers are looking into it. Made it quite clear that we were looking to move and asked for a copy of our catalogue as the export routine in Eclipse is garbage. Wonder how long I am going to have to wait / how many times I am going to have to remind them to send it to me.

[CharlieW]

Hi There, I don't think even I'm that stupid as to use that The "*" is hiding the actual password character. Any chance you could fire over a screen shot of what you're seeing, so I can show it to the guys please?

[Griff]

I would personally appreciate it if you could let me know the exact stages that you went through to get the error message, and see my log in details. We don’t actually have an administrator password, so again I’m really interested to find out if we have got a problem we haven’t discovered so we can fix it.

We do take all feedback seriously, so please do feel free to fire over any thoughts you have on edoocoo, and I’ll have a good look at them.

 

That might be your first port of call setup a password, you might want to use capital letters numbers and symbols or consider using a pass phrase best of luck

Edited February 7, 2018 by Griff
you all beat me to it :P

[CMDRShepard]

Hi There, I don't think even I'm that stupid as to use that The "*" is hiding the actual password character. Any chance you could fire over a screen shot of what you're seeing, so I can show it to the guys please?

 

I honestly didn't expect that to be the case, but I had to be sure. In my line of work, it's often pragmatic to assume the worst.

 

Might be easier to try it yourself in that case. Log out, then log in using any email address (I used yours seen as yours comes back as the default when a blank GET request is made, which is another issue I'd perhaps raise with your devs) and with just a * as the password. I think someone made a booboo when setting up your password definitions.

 

I'd be worried if your InfoSec, Testing and Dev teams have all missed this. This should be probably the first thing they check when checking functionality as part of their unit tests, formal functional testing, and security testing, and should have been done well before the system went live with a publicly accessible domain.

[clareq]

is it just me, or is edoocoo one of the most unintuitive websites I've seen? I've logged on, but what now? It isn't a forum, I think it wants to be Facebook, but I just want Eclipse to work!

[GuyJD]

is it just me, or is edoocoo one of the most unintuitive websites I've seen? I've logged on, but what now? It isn't a forum, I think it wants to be Facebook, but I just want Eclipse to work!

You need to search for a Circle that matches the software you want support on and subscribe to it, it's a lot like Google+ from what I remember of that.

[CharlieW]

Might be easier to try it yourself in that case. Log out, then log in using any email address (I used yours seen as yours comes back as the default when a blank GET request is made, which is another issue I'd perhaps raise with your devs) and with just a * as the password. I think someone made a booboo when setting up your password definitions.

 

Thanks for the pointer, really appreciated. The dev guys did find a problem; by entering an email and a "*" it would take you into Viewer Mode, where non registered viewers could see the platform. You couldn't actually post or comment on the site, you could just see the circles. This has been sorted now so a massive thanks for high lighting it.

[CharlieW]

is it just me, or is edoocoo one of the most unintuitive websites I've seen? I've logged on, but what now? It isn't a forum, I think it wants to be Facebook, but I just want Eclipse to work!

edoocoo is about educational relevancy. No social or external noise, just topic relevant content. Sorry about finding it unintuitive, hopefully this will become more clear as the content builds and becomes more relevant. Any pointers how you think we could improve it would be appreciated.

[CharlieW]

That might be your first port of call setup a password, you might want to use capital letters numbers and symbols or consider using a pass phrase best of luck

We have a few protocols in place; password can't be "password", can't be their name and must be at least 5 characters long. Perhaps I'll get the guys to look at fleshing it up a bit. Many thanks.

[LeMarchand]

Thanks for the pointer, really appreciated. The dev guys did find a problem; by entering an email and a "*" it would take you into Viewer Mode, where non registered viewers could see the platform. You couldn't actually post or comment on the site, you could just see the circles. This has been sorted now so a massive thanks for high lighting it.

 

Is being able to "preview" the site a bad thing? I certainly cba to sign up for something that I have no idea what it'll be like, even with a fake name/email. Even Experts-Exchange gives you an idea of what to expect.

 

I suspect that many members here found Edugeek on Google searches rather than by recommendation.

[synaesthesia]

Absolutely. A search for just about anything IT related and you can be sure Edugeek is on the first page. Search for an educational IT issue and EG will be top hit 99% of the time. It's easy to view and to search and the owners are not affiliated or biased with any suppliers. It's also rather noise-free despite being more "open" by design.

[CharlieW]

Hi there, we do think it is a good thing to preview the platform. We want potential users to read circles and posts of interest, and if they find it engaging, they join and share their thoughts. Without wanting to sound too wishy washy, we're aiming to create a platform that allows educators to build their own Personal Learning Network. Lots of work to do yet, but fingers crossed we can get there.

[liam84728]

afternoon all,

 

I mentioned that our librarian switched to Oliver from Softlink in the new year and I have to say that so far it has been an extremely positive move for us.

They use AWS and the speed in comparison to when we had Eclipse is like chalk and cheese, the librarian has been able to run reports extremely quickly (for the first time in a long time!) and students are using the system on their own devices both online and with the mobile app.

I really would recommend giving them a call if you are considering other options, their technical team have been first class in responding to me and the move across went very smoothly indeed.

Price wise they were cheaper than some others that we were looking at and also from some of the comments on here their pricing is very competitive.

One final thing - they offered us the chance to go local install as well but as a school it just made more sense to have it hosted but it was nice to have the option.