synaesthesia

They do it a lot better than Google - DriveFS is a mess. But then again, at least MS is sort of properly ingrained into Windows.

Interesting. Does anyone know enough or can read between the lines enough to understand if this would affect volume licensing, client access licenses etc? So for example on EES used to license devices and CAL's based on FTE count, with Entra used for basic device management. Particularly as we're a hybrid setup - we have the above but are Google for most things so don't use mail, onedrive, sharepoint, teams, office 365 online etc and just consulting into what impact not having MS Office apps installed would have on students (TLDR; none.)

Using a couple of examples - CPOMS and Redstor. Former obviously contains MUCH sensitive information, the latter - well, contains everything. SSO/SAML enabled in both cases, yet both require separate MFA. Redstor annoyingly so, you practically have to enter a new MFA code every time you move your mouse!

Absolutely, just not personally convinced it's enough as standard especially where trusted devices and passkeys are concerned (passkeys I think are absolute nonsense by default!)

I think some of you have misread that article - it says students' data was accessed, not that a student's account had been breached therefore it would be a staff/admin account that was breached.

Has anyone done a walkthrough scenario with their MIS? So for a typical stance, MFA would appear to be most often employed as a byproduct of SSO/Login with Google/Login with Microsoft, so it then relies on that 3rd party system to ensure security of the login. I can't think of everything from the top of my head but scenarios like a staff laptop is stolen that has their password on a post it note stuck to it. Bitlocker is rendered useless, and as it's a known device would MFA kick in on an unknown IP address or would it assume it's still safe? "Magic Link" (looks at Wonde) or even worse, MFA via email code (stares at Kyocera) also useless. Should MFA be separated from oauth logins?

Doesn't help when you get nonsense in these articles like "The dark web is only accessible via specialist software". I'm not sure off the shelf browsers or easily available downloads count as "specialist" (obviously safety of the off-the-shelf stuff like Brave in this context is debatable!) MFA should absolutely be bare minimum and enforced, not even at school or trust level but by the MIS providers themselves.

TES seems to be having a hard time of it at the moment. Edukey still also dead.

Yeah it's tough. Accountability and responsibility are the name of the game - all the time you used to muse about how doctors and nurses spent more time doing paperwork than treating people? That's us now. Not necessarily a bad thing, but a lot will depend on the school or trust's structure . Academisation levels are likely to be double what they were 12 years ago (guesstimate!) and again depending on structure, what IT looks like could vary from having complete freedom to being just a body on the ground changing passwords and toners which is absolutely soul destroying. VLEs do pop up every now and then but the answer is quite rightly always the same - "why are you still using that with the prevalence of teams/google classrooms?". And to echo some others, yup SIMS is still a thing but it is no longer the market leader; you're more likely to come across Arbor than SIMS, and many schools still using the latter are likely to be considering a move. If they aren't, they should be. And the SIMS cloud system that was touted more than 12 years ago? It's only just sort of hit the ground recently. I can't say hit the ground running, it just sort of "splatted" and no-one paid attention. Infrastructure setups vary wildly from school to school/trust to trust, but as was said cloud first is what's on people's minds. DfE requirements/recommendations are ensuring each wifi point has multi-gigabit connectivity to your core, multi-gig internet connectivity with backup lines and it's no longer the norm to find a secondary school with dozens of virtual machines running. Security wise, everything is 2 or 3 steps more difficult than it was 12 years ago. MFA everything, and in some cases (colleges and unis) that includes students too. Safeguarding/KCSIE changes more often than some people change their underwear, the general premise is still much the same but updated for the influx of AI. Everything needs consent.

This one's hit me hard, an absolute hero of mine. RIP Sir Patrick. Absolute legend of stage and screen, a proper gentleman who's been there and done everything. A fellow Red Dwarf fan. What a loss

Hopefully sharing a beer and some tales with Anton Yelchin somewhere

Cheers Tom, support have me a date of 28th.

Must hand it to their support, their replies have been quick and they've enabled me trial access for logging a ticket, fingers crossed!

I love it (well, I did until today, and I'm currently swearing at it). One bounced email appears to mean you get added to a blocklist and agents automatically uninstalled from your endpoints... Trying to liaise with support now, which is fun for the free tier!

Is that due out imminently, @tom_newton? It's not showing for us yet on Maiden.