Security and privacy

I agree that Facebook should be optional, instead of compulsary for being inclusive. Not everyone in the world tattoed their chin with Facebook logo

Open Id may be a better solution than Facebook, but still .. you can't rule out the possibility of students sharing their account access.

Another possible solution is using a digital certificate authentication used for tax return purpose, so someone sharing the access means that they don't mind sharing their tax return information

Mind you John, I think it is more realistic to think that there is a possibility that students will share their account access, unless:

a) you have live sessions requiring each student to present virtually via video conference etc. or

c) you integrate biometrics identification as an additional authentication method to access the account.

With option b), students can still share their accounts by exchanging their eyeballs and/or fingers

We are also preparing some on-line training that will start out as free (kind of like a "beta" test) but hope to change to a commercial venture at some point. I have considered a number of possible security methods, but none are "fool-proof", and some might just be "down right" offensive to students.

Our solution, is to use the simple security measures already available with Moodle. We'll tolerate a certain level of dishonesty. Our plan is to also monitor usage. If we see a particular account with an unual level of activity, we may limit access. We will also limit the time a course is available. If one student attempts the course, and second person follows them, they may not have time to finish.

Finally, our training course is requirement to work in this particular profession. It requires a certificate. We will be using the certificate plug-in that uses the login name. No login, no certificate, no work.

I watched the "security wars" with Lotus, Excel, Autocad, and dozens of others back in the 80's. They never turned out well. Autocad eventually came to the realization that moderate secure was good enough, and those that hacked the SW eventually became paying customers when they realized the value of the SW and needed the support.

I could be totally wrong, but I don't see the need for putting my students through multiple barriers just to insure nobody cheats.

Besides I hate facebook and think it's evil!

Checkout old thread : http://moodle.org/mod/forum/discuss.php?d=34457

The only logical way is to keep track of IP addresses of logged-in users and to compare simultaneous entries.

As far as I know, a Turkish online security company was handing this tool out for free (to encourage security in online trainings.). The link was this.


Sadly I could'nt find the link on the site. But you may try using the "reach us" page.

Regards,

Krishny,