"Secure" quiz windows

"Secure" quiz windows

by Martin Dougiamas -
Number of replies: 15
Picture of Core developers Picture of Documentation writers Picture of Moodle HQ Picture of Particularly helpful Moodlers Picture of Plugin developers Picture of Testers
Moodle 1.5 development now contains working code for a new "secure" quiz option (off by default) to

  • put the quiz in a new, fullscreen window
  • require javascript to be turned on
  • implement as many javascript anti-copying techniques as we can think of
Average of ratings: -
In reply to Martin Dougiamas

Re: "Secure" quiz windows

by David Scotson -

I would be very careful about managing user expectations regarding this feature. I note that you put secure in quotes, presumably because you know it isn't. wink

I'm generally of the opinion that a false sense of security is the worst possible outcome. This is particularly true when you are pitting the wits of large numbers of digital natives (i.e. tech-savvy youth) against teachers, generally from an older generation, who may well just believe what they are told.

In reply to David Scotson

Re: "Secure" quiz windows

by Martin Dougiamas -
Picture of Core developers Picture of Documentation writers Picture of Moodle HQ Picture of Particularly helpful Moodlers Picture of Plugin developers Picture of Testers
Absolutely, I completely agree ... I was wary of it from the beginning for precisely that reason. However, I think the way it's been implemented will be useful in a lot of existing Moodle environments and it is a non-default option.

The label on the quiz setup page actually uses the same quotes around secure. smile In fact the database column is called "popup" because that's all I was going to call it even in the interface, but I think it made sense to draw some attention in the GUI to the purpose of the popup plus the javascript features it contains.

Here is the help file from CVS:


Display in a "secure" window

The "secure" window tries to provide a little more security for quizzes (to prevent copying and cheating) by restricting some of the things that students can do with their browsers.

What happens is that:

  • Javascript is made a requirement.
  • The quiz appears in a new fullscreen window.
  • Some mouse actions on the text are prevented.
  • Some keyboard commands are prevented.

 

NOTE: This security is NOT watertight. Do NOT rely on these protections as your sole strategy. It is impossible to implement complete protection of quizzes in a web environment so please do not rely on this option if you are really worried about students cheating. Other strategies you can try are to create really large databases of questions from which you randomly choose questions, or even better, rethink your overall assessment to put more value on constructive forms of activity such as forum discussions, glossary building or assignments.

In reply to Martin Dougiamas

Re: "Secure" quiz windows

by Bernard Boucher -

Hi Martin,

              first thanks.

Now that Moodle's quiz support key detection and timing with Martinized codewink, do you think it may be a good idea to try to limit the number of F5 refresh as an option (off by default) in all pages.

Maybe the first F5 permit anytime but subsequents should be distanced by 5 or 10 seconds, adjustable somewhere in admin page?

I will try that during xmas time.

Bye,

Bernard

In reply to Bernard Boucher

Re: "Secure" quiz windows

by Martin Dougiamas -
Picture of Core developers Picture of Documentation writers Picture of Moodle HQ Picture of Particularly helpful Moodlers Picture of Plugin developers Picture of Testers
This is really a different thing entirely.

I don't think a solution to that is even possible with Javascript, since the page is not even loaded in the browser before the next refresh occurs.

The best solution for fast refresh is probably an Apache module like mod_throttle.
In reply to Martin Dougiamas

Re: "Secure" quiz windows

by Bernard Boucher -

Thanks,

           I will have one more thing to try durng xmas time.

Bye,

Bernard

In reply to Martin Dougiamas

Re: "Secure" quiz windows

by Jacob Garrett -

Martin,

At our school we are undertaking the development of a secure browser for quizzes or assignments that require a higher level of security. This browser could be required for use with the addition of a protection checkbox on assignments or quizzes. Unless checked, this would not interfere with the use of any other browser. If checked it would require the use of the special secure browser (more secure and customisable than just javascript). We would be willing to make the browser available to other users under a gnu/gpl style license.

Please share your thoughts.

In reply to Jacob Garrett

Re: "Secure" quiz windows

by Martin Dougiamas -
Picture of Core developers Picture of Documentation writers Picture of Moodle HQ Picture of Particularly helpful Moodlers Picture of Plugin developers Picture of Testers
Go for it!  How do you plan to ensure people are using this browser?  
In reply to Martin Dougiamas

Re: "Secure" quiz windows

by Jacob Garrett -

Martin,

We have a programmer currently working on the browser and would really like to consult with you on the method we use to ensure its use. We have some ideas, however, as you understand the real inner workings of Moodle you could probably steer us clear of potential pitfalls. I would like to continue this discussion via email djohnson@echs.org. Thanks for your reply.

In reply to Jacob Garrett

Re: "Secure" quiz windows

by dovix :) -
How do you stop users from using a simple screen grabber to take screenshots ?
In reply to Martin Dougiamas

Re: "Secure" quiz windows

by Timothy Takemoto -

Dear Martin

Thank you very much for "securing" the quiz window.

Would it be possible to also include Rob Butner's additional preventive measure that

1) Encripts the javascript a little so that it is more difficult to see what measures are being implemented

2)And Rob Butner's words ""diables printing, disables storing the page in cache, kills the CNTRL+C, CNTRL+P, disables Adobe Acrobat Image to text capture, disables the ability to select text with the mouse, disables the clipboard, and disables right click. "

He sent me a new version my email recently which he claims works even in Opera, but I did not get it to work.

I have posted a theme which uses Rob Butner's pre Opera "blockit" to
http://moodle.org/mod/forum/discuss.php?d=12821&parent=62986
It can be decripted using the decripter appended to my forum post here
http://moodle.org/mod/forum/discuss.php?d=13828&parent=67237

I would attach the Opera proof version but there seems to be some garbling of the Opera-proof-version (i just tried decripting it) perhaps since he sent it inside a mail rather than as a file.

I will get in touch with Rob Butner (he is not a member of the course now, I think) and ask him to send the new version as a file.

Tim
tkmt

In reply to Timothy Takemoto

Re: "Secure" quiz windows

by Martin Dougiamas -
Picture of Core developers Picture of Documentation writers Picture of Moodle HQ Picture of Particularly helpful Moodlers Picture of Plugin developers Picture of Testers
All of this should already be in there, Tim.  Please let me know if any of these isn't working as expected.
In reply to Martin Dougiamas

回應: Re: "Secure" quiz windows

by Chiu Charlie -
Sorry for the new question after such long time.
I installed and testing 1.5+ now and just wonder in this "secure" quiz, why Alt-tab is not locked to preventing switching windows to other source for answer checking.
Is there any concern?
Also, after submitted the answer, can system popup and ask to close quiz windows?

Just some thought, and thank you for the good work.
In reply to Martin Dougiamas

Re: "Secure" quiz windows

by Reed Law -
I am having trouble with my quiz and I'm not sure if the "secure" window is the culprit.  I had several students take the quiz multiple times and each time they submitted they would end up with a "failed to save quiz attempt" error.  I cleared their scores and tried to take the quiz myself on the same computer with the students' accounts.  I had no problem completing the quiz.  I suspected, but I can't confirm, that the students were using forbidden keystrokes or switching windows.  Would this cause an automatic failure?
Another related problem is: in a couple of large classes taking the quiz in a lab I had about half of the students get zeroes on a 20-question quiz.  They all complained that their selected answers were being erased.  I cleared their scores and let them try again.  I found that the students who did not submit before the time-limit was reached were getting zeroes, regardless of any correct answers.  When I practiced the quiz on my own computer, using Firefox 1.07, the timout caused the proper response of automatically submitting my current responses.  The labs are equiped with IE 6.  What is the intended behavior of timing-out on a quiz?
Average of ratings: Useful (1)