howartp

We use Class One in Skipton, NYorks as a catering supplier. They've (recently?) launched online ordering, but in school we cannot use it as the page content never loads other than the header/footer/menu structure. https://orders.chefserve.co.uk/classone/#/order/orderEntry Google console shows it's talking to an API endpoint on TCP port 456, which is blocked by our Smoothwall. Long story short, in order to get it working I not only have to unfirewall that port, I also have to go to Web Proxy > Web Proxy > Settings > Advanced and add 456 to the 'Allow access to web servers on these additional ports' box. I've refused to do this now i've proved it as 456 is "Hackers paradise" according to several TCP/UPD Port listings. Anyone else come across this? Anyone else have a view on it?

My A3's were bought on FTE (campus agreement) 3 years ago, or at least I thought they were. Problem is, i'm now trying to move to Office365 and I don't have enough licenses as MS issue the licenses based on how many you told them - ie FTE. So when we renew in June we're going to have to buy one per staff. Students are ok cos you get 50:1 ratio of staff licenses free for students.

Our DPO (Veritau) has advised us: We have sent such an email to Class Charts support, TES help and The DPO Centre (TES's outsourced DPO). Will report back if I hear anything.

I have followed and support Paul's stance since the start, and the reply above is correct that for RPA you only need to register, not install it. However I've recently attended an ANME meeting where one of the schools was hit and lost the majority of their network including backups to encryption. (Very little data actually exfiltrated, from memory). The issue started on Friday night, the police noticed it on CyberAlarm and immediately tried to contact the school. They couldn't get hold of anyone until they eventually contacted ISP at midnight and had their internet connection switched off; school didn't know anything until Monday morning. On the back of this i've made the decision to activate CyberAlarm and ensure 24/7 contact details for myself and my senior tech are available to the police on the other end of it.

How do you see yesterday? The wayback machine scraped them on 1st January: https://web.archive.org/web/20240101003426/https://www.tes.com/en-gb/policies/general-terms-business

But did they (your parents) click through, or just screenshot the first page? My parents only screenshot the first page with the homework summary (etc) and the Head's announcements - you can see my screenshot in my earlier post - so I've no concerns about them taking a screenshot in order to contact me to report the issue. Maybe I could/should ask them to delete the screenshot from their end, but at the end of the day all they've seen so far is a name and a school - in this one particular instance.

We each have 72 hours to make a disclosure to the ICO, ie by approx 11am Thursday. My thinking, and what I'll be suggesting to DPO, is we file an explanation report tomorrow afternoon if we've heard nothing from ClassCharts; the ICO need to be made aware of it and the more reports they get, the better.

That was my screenshot and we haven't yet made the other schools aware; have other schools notified the schools they know of?

They appear to be seeing the homework/achievement/attendance/activity log of a.n.other student, but all i've seen is screenshots of the first landing page - not sure if anyone has clicked into them and seen further data within or not.

Does Sensor > Settings > Sensor Display exist for this sensor? On the Disk Space Free sensor you can pick which sensor value to display; not sure if the same/similar option is there for all sensor types?

Entra > Devices > Device Settings: Users may join devices to MS Entra: All/Selected/None Defaults to All.

10.55 here.

Advice is to lock out parents and pupils; how do you see data being shared if neither of these can log in? - - - Updated - - - Apologies - yes, you mean other schools will still see your data if THEY haven't taken the same actions.

Nope, we're single school academy - never heard of either schools 2/3. Peter

On desktop, parent at our school (School 1) is seeing Student 2 from School 2 on the left menu and the homework/behaviour totals etc, and Student 3 from School 3's announcements at the bottom. So not just one wrong student, in one wrong school!

There's a message on their phone system saying they're aware of an issue; I continued past it to speak to someone and they told me this was the advice they were giving schools whilst they worked on it. A communication will apparently come out to tell us we can turn it back on again. - - - Updated - - - (One of our parents sent us a screenshot showing two other pupils from two other schools, which is how I knew about it and rung up to report it)

Hi everyone. Please be advised: ClassCharts are aware of an issue where parents are seeing data from students at other schools - they are advising you to disable parent and pupil access to ClassCharts whilst they investigate.

They're moving away from the old separate places (where to be frank the UI is Win 95'ish, and you have buttons and tabs on the top menu bar that nobody can ever find) to the centralised modern workflow where everything is on the left hand menu. The bottom of the page that's linked shows you how to set your migration progress, ie "only use old", "use both whilst I migrate" or "I'm done, use the new settings".

The legacy MFA settings (https://account.activedirectory.windowsazure.com/UserManagement/MfaSettings.aspx) are going away, replaced by Authentication policies (https://entra.microsoft.com/#view/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade/~/AdminAuthMethods/fromNav/Identity) You need to - use the table on the page you linked to setup auth policies that match your legacy MFA policies. We don't use SSRP so i've not looked at that yet, but I suspect the same applies - you need to make sure the new policies match your old settings.

Did you present it within 2 minutes of power-up?

https://www.overnetdata.com/edulink-one/ Edulink One is the other product a lot of schools use. We're interested in it but persevering for now.

Installed Hive at my partners house in October. All radiators have their TRV, set at an appropriate temperature for the room all day; they are not allowed to 'call for heat' so only actually warm up when the boiler is scheduled on. We then schedule the boiler according to our day (she works strange shifts and i'm not yet living there full time). We're pretty good at knocking it down if we go out eg to theatre when it would normally be on, then back on as we're driving home. Alexa can also control it/boost it though we've not played with the appropriate voice controls for that yet.

Ah, didn't spot the second photo further down - I thought both straps had been installed at ankle level, but I guess they were installed at top and bottom of pillar then fallen to floor with gravity once it fell over.

The main fixing points are for bolts down to the floor - which don't appear to have been used. I suspect the straps they have used are supposed to be further up the base unit, to provide a secondary attachment to prevent tipping. Very poor installation.

We pay £75/device for three years. Up to 6 repairs per device (2 per year by default but they happy to scale it across), almost-no-questions-asked as long as it's not clearly intentional damage. We have ~500 devices per 3-year scheme with them so potentially 1800 devices "live" at any one time. They provide pre-paid packets and shipping packs that we put iPad in, tape it up, drop off at Post Office in village (2 minutes walk) - if we post Monday, it arrives Tuesday, they repair Tuesday/Wednesday and ship back to us, arriving Wednesday/Thursday, in general.