Linux and Unix Users Group at Virginia Teck Wiki - User contributions [en]

List of Linux and Unix Users Groups

2025-07-28T15:23:57Z

Caleb: /* Non-University Groups */Moved CINLUG to proper section and fixed a silly typo.

== Universities ==
=== Arizona ===
* [https://new.asulug.org/ Linux Users Group at ASU (ASULUG)]

=== California ===
* [http://www.buug.org/ Berkeley Unix Users Group]
* [http://cplug.org/ Cal Poly Linux Users Group]
* [http://sulug.stanford.edu/ Stanford Linux Users and Open Source Group (SULUG)]
* [https://linux.ucla.edu UCLA Linux Users Group]

=== Georgia ===
* [http://lugatgt.org/ Linux Users Group at Georgia Tech (LUG@GT)]

=== Illinois ===
* [https://lugatuic.github.io/ Linux User Group @ UIC]
* [http://www.acm.uiuc.edu/lug/ Linux Users Group at ACM@UIUC]

=== Indiana ===
* [http://lug.rose-hulman.edu/wiki/Main_Page Rose Hulman Linux Users' Group (RHLUG)]
* [http://purduelug.org/ Purdue Linux Users Group (PLUG)]

=== Louisiana ===
* [http://tlug.latech.edu/ Louisiana Tech University Linux Users Group (TLUG)]

=== Maryland ===
* [http://lounge.cs.umd.edu/umlug/ UMLUG]

=== Michigan ===
* [http://lug.mtu.edu/ Linux Users' Group @ Michigan Tech (MTULUG)]
* [http://www.umich.edu/~lugum/ Linux Users Group @ University of Michigan (LUGUM)]

=== New Jersey ===
* [https://ruslug.org/ Rutgers Student Linux User Group]

=== North Carolina ===
* [https://lug.ncsu.edu North Carolina State University Linux Users Group (LUG@NCSU)]
* [http://www.duke.edu/web/dulug/ Duke University Linux Users Group (DuLug)]

=== Ohio ===
* [http://opensource.osu.edu/ Open Source Club at the Ohio State University]

=== Oregon ===
* [http://lug.oregonstate.edu/ Linux Users Group of Oregon State University (OSU LUG)]

=== Texas ===
* [http://utdlug.org/ Linux Users Group at University of Texas at Dallas]
* Linux Users Group at University of Texas at Arlington - luguta.org

=== Virginia ===
* [http://www.studentorg.vcu.edu/lugvcu/ GNU & Linux User Group of VCU]
* [http://uug.cs.jmu.edu/ JMU Unix Users Group]
* [https://vtluug.org Linux and Unix Users Group at Virginia Tech (VTLUUG)]
* [http://uvalug.org/wiki/Main_Page Linux Users Group at University of Virginia]

== Non-University Groups ==
* [https://www.2600.com/ 2600]
** [http://2600.757.org/ Hampton Roads]
* [https://www.cinlug.org/ Central Indiana Linux User Group (CINLUG)]

[[Category:Reference]]
[[Category:Featured content]]

List of Linux and Unix Users Groups

2025-07-28T15:23:13Z

Caleb: /* Indiana */

== Universities ==
=== Arizona ===
* [https://new.asulug.org/ Linux Users Group at ASU (ASULUG)]

=== California ===
* [http://www.buug.org/ Berkeley Unix Users Group]
* [http://cplug.org/ Cal Poly Linux Users Group]
* [http://sulug.stanford.edu/ Stanford Linux Users and Open Source Group (SULUG)]
* [https://linux.ucla.edu UCLA Linux Users Group]

=== Georgia ===
* [http://lugatgt.org/ Linux Users Group at Georgia Tech (LUG@GT)]

=== Illinois ===
* [https://lugatuic.github.io/ Linux User Group @ UIC]
* [http://www.acm.uiuc.edu/lug/ Linux Users Group at ACM@UIUC]

=== Indiana ===
* [http://lug.rose-hulman.edu/wiki/Main_Page Rose Hulman Linux Users' Group (RHLUG)]
* [http://purduelug.org/ Purdue Linux Users Group (PLUG)]

=== Louisiana ===
* [http://tlug.latech.edu/ Louisiana Tech University Linux Users Group (TLUG)]

=== Maryland ===
* [http://lounge.cs.umd.edu/umlug/ UMLUG]

=== Michigan ===
* [http://lug.mtu.edu/ Linux Users' Group @ Michigan Tech (MTULUG)]
* [http://www.umich.edu/~lugum/ Linux Users Group @ University of Michigan (LUGUM)]

=== New Jersey ===
* [https://ruslug.org/ Rutgers Student Linux User Group]

=== North Carolina ===
* [https://lug.ncsu.edu North Carolina State University Linux Users Group (LUG@NCSU)]
* [http://www.duke.edu/web/dulug/ Duke University Linux Users Group (DuLug)]

=== Ohio ===
* [http://opensource.osu.edu/ Open Source Club at the Ohio State University]

=== Oregon ===
* [http://lug.oregonstate.edu/ Linux Users Group of Oregon State University (OSU LUG)]

=== Texas ===
* [http://utdlug.org/ Linux Users Group at University of Texas at Dallas]
* Linux Users Group at University of Texas at Arlington - luguta.org

=== Virginia ===
* [http://www.studentorg.vcu.edu/lugvcu/ GNU & Linux User Group of VCU]
* [http://uug.cs.jmu.edu/ JMU Unix Users Group]
* [https://vtluug.org Linux and Unix Users Group at Virginia Tech (VTLUUG)]
* [http://uvalug.org/wiki/Main_Page Linux Users Group at University of Virginia]

== Non-University Groups ==
* [[https://www.2600.com/ 2600]
** [http://2600.757.org/ Hampton Roads]

[[Category:Reference]]
[[Category:Featured content]]

List of Linux and Unix Users Groups

2025-07-28T15:22:46Z

Caleb: /* Indiana */Fixed typo

== Universities ==
=== Arizona ===
* [https://new.asulug.org/ Linux Users Group at ASU (ASULUG)]

=== California ===
* [http://www.buug.org/ Berkeley Unix Users Group]
* [http://cplug.org/ Cal Poly Linux Users Group]
* [http://sulug.stanford.edu/ Stanford Linux Users and Open Source Group (SULUG)]
* [https://linux.ucla.edu UCLA Linux Users Group]

=== Georgia ===
* [http://lugatgt.org/ Linux Users Group at Georgia Tech (LUG@GT)]

=== Illinois ===
* [https://lugatuic.github.io/ Linux User Group @ UIC]
* [http://www.acm.uiuc.edu/lug/ Linux Users Group at ACM@UIUC]

=== Indiana ===
* [https://www.cinlug.org/ Central Indiana Linux User Group (CINLUG)]
* [http://lug.rose-hulman.edu/wiki/Main_Page Rose Hulman Linux Users' Group (RHLUG)]
* [http://purduelug.org/ Purdue Linux Users Group (PLUG)]

=== Louisiana ===
* [http://tlug.latech.edu/ Louisiana Tech University Linux Users Group (TLUG)]

=== Maryland ===
* [http://lounge.cs.umd.edu/umlug/ UMLUG]

=== Michigan ===
* [http://lug.mtu.edu/ Linux Users' Group @ Michigan Tech (MTULUG)]
* [http://www.umich.edu/~lugum/ Linux Users Group @ University of Michigan (LUGUM)]

=== New Jersey ===
* [https://ruslug.org/ Rutgers Student Linux User Group]

=== North Carolina ===
* [https://lug.ncsu.edu North Carolina State University Linux Users Group (LUG@NCSU)]
* [http://www.duke.edu/web/dulug/ Duke University Linux Users Group (DuLug)]

=== Ohio ===
* [http://opensource.osu.edu/ Open Source Club at the Ohio State University]

=== Oregon ===
* [http://lug.oregonstate.edu/ Linux Users Group of Oregon State University (OSU LUG)]

=== Texas ===
* [http://utdlug.org/ Linux Users Group at University of Texas at Dallas]
* Linux Users Group at University of Texas at Arlington - luguta.org

=== Virginia ===
* [http://www.studentorg.vcu.edu/lugvcu/ GNU & Linux User Group of VCU]
* [http://uug.cs.jmu.edu/ JMU Unix Users Group]
* [https://vtluug.org Linux and Unix Users Group at Virginia Tech (VTLUUG)]
* [http://uvalug.org/wiki/Main_Page Linux Users Group at University of Virginia]

== Non-University Groups ==
* [[https://www.2600.com/ 2600]
** [http://2600.757.org/ Hampton Roads]

[[Category:Reference]]
[[Category:Featured content]]

List of Linux and Unix Users Groups

2025-07-28T14:45:13Z

Caleb: /* Indiana */Added central Indiana lug

== Universities ==
=== Arizona ===
* [https://new.asulug.org/ Linux Users Group at ASU (ASULUG)]

=== California ===
* [http://www.buug.org/ Berkeley Unix Users Group]
* [http://cplug.org/ Cal Poly Linux Users Group]
* [http://sulug.stanford.edu/ Stanford Linux Users and Open Source Group (SULUG)]
* [https://linux.ucla.edu UCLA Linux Users Group]

=== Georgia ===
* [http://lugatgt.org/ Linux Users Group at Georgia Tech (LUG@GT)]

=== Illinois ===
* [https://lugatuic.github.io/ Linux User Group @ UIC]
* [http://www.acm.uiuc.edu/lug/ Linux Users Group at ACM@UIUC]

=== Indiana ===
* [https://www.cinlug.org/ Central INdiana Linux User Group (CINLUG)]
* [http://lug.rose-hulman.edu/wiki/Main_Page Rose Hulman Linux Users' Group (RHLUG)]
* [http://purduelug.org/ Purdue Linux Users Group (PLUG)]

=== Louisiana ===
* [http://tlug.latech.edu/ Louisiana Tech University Linux Users Group (TLUG)]

=== Maryland ===
* [http://lounge.cs.umd.edu/umlug/ UMLUG]

=== Michigan ===
* [http://lug.mtu.edu/ Linux Users' Group @ Michigan Tech (MTULUG)]
* [http://www.umich.edu/~lugum/ Linux Users Group @ University of Michigan (LUGUM)]

=== New Jersey ===
* [https://ruslug.org/ Rutgers Student Linux User Group]

=== North Carolina ===
* [https://lug.ncsu.edu North Carolina State University Linux Users Group (LUG@NCSU)]
* [http://www.duke.edu/web/dulug/ Duke University Linux Users Group (DuLug)]

=== Ohio ===
* [http://opensource.osu.edu/ Open Source Club at the Ohio State University]

=== Oregon ===
* [http://lug.oregonstate.edu/ Linux Users Group of Oregon State University (OSU LUG)]

=== Texas ===
* [http://utdlug.org/ Linux Users Group at University of Texas at Dallas]
* Linux Users Group at University of Texas at Arlington - luguta.org

=== Virginia ===
* [http://www.studentorg.vcu.edu/lugvcu/ GNU & Linux User Group of VCU]
* [http://uug.cs.jmu.edu/ JMU Unix Users Group]
* [https://vtluug.org Linux and Unix Users Group at Virginia Tech (VTLUUG)]
* [http://uvalug.org/wiki/Main_Page Linux Users Group at University of Virginia]

== Non-University Groups ==
* [[https://www.2600.com/ 2600]
** [http://2600.757.org/ Hampton Roads]

[[Category:Reference]]
[[Category:Featured content]]

Duo 2FA

2025-03-10T01:06:51Z

Caleb: Fix grammar

'''DUO Two-Factor Authentication''' is a proprietary service which provides 2FA
through PAM modules and a web-browser login page. ''While VTLUUG concurs that 2FA''
''is a good practice, DUO is an ineffective, buggy, and anti-freedom solution''.
VTLUUG opposes this outsourcing of important security functionality by the University.

== Issues ==
DUO 2FA has a number of disadvantages and issues. To list a few:
* A cellphone, compatible tablet, or landline is '''mandatory''' for enrollment in 2FA
* U2F is exclusively supported in the Chrome and [[Chromium]] browsers, despite the presence of a [https://github.com/prefiks/u2f4moz functional plugin] which provides the feature in [[Firefox]]
** A workaround for Firefox has been posted [[Yubikey#Using_with_Virginia_Tech_2-Factor_(Duo)|here]].
* [https://duo.com/legal/privacy Privacy policy] is a joke, and implies almost no level of customer or customer data protection
* Use of app isn't ''real'' 2 factor authentication, as it doesn't require the person initiating login to posses device
** Users may get into the habit of just "pushing the button" when it comes up.

=== Privacy Policy ===
They collect PII. Among this is:

==== Device-Specific Information ====
''We also collect device-specific information (e.g. mobile and desktop) from you in order to provide the Services. Device-specific information includes:

* ''attributes (e.g. hardware model, operating system, web browser version, as well as unique device identifiers and characteristics (such as, whether your device is “jailbroken,” whether you have a screen lock in place and whether your device has full disk encryption enabled));''
* ''connection information (e.g. name of your mobile operator or ISP, browser type, language and time zone, and mobile phone number);''
* ''device locations (e.g. internet protocol addresses and Wi-Fi).''

''We may need to associate your device-specific information with your Personal Information on a periodic basis in order to confirm you as a user and to check the security on your device.''

Other things they do:

* Collect data referencing users accessing services, ''the '''dates and times''' [they] are accessing the Services, from where [they] are accessing the Services (by internet protocol address) and device event information such as crashes, system activity, and hardware settings''

==== Disclosure of PII ====
They also '''will''' disclose PII to governments, if requested:

* ''(i) if we are required to do so by law or legal process;''
* ''(ii) to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims;''
* ''(iii) as may be required for the purposes of national security;''
* ''(iv) when we believe disclosure is necessary and appropriate to prevent physical, mental, financial or other harm, injury or loss;''
* ''(v) in connection with an investigation of suspect or actual illegal or inappropriate activity or exposure to liability''

[[category:Campus computing resources]]

Respondus LockDown Browser

2025-03-04T03:34:27Z

Caleb: /* Wine */ Fixed a typo

Respondus LockDown Browser is a piece of proprietary online testing software developed by Respondus, Inc, and used by departments, including the Department
of Engineering Education. Success in running under [[w:Wine (software)|Wine]] varies from version to version, and may involve complex installation procedures, and the software
actively prevents itself from running in a
[http://support.respondus.com/support/index.php?/Knowledgebase/Article/View/201/25/students-see-the-warning-the-browser-cant-be-used-in-virtual-machine-software-such-as-virtual-pc-vmware-and-parallels virtual machine].

== Official Description ==

From the [http://respondus.com/products/lockdown-browser/index.shtml Product page]:

LockDown Browser® is a custom browser that locks down the testing environment within Blackboard, ANGEL, Brightspace by D2L, Canvas, Moodle, and Sakai. When students use LockDown Browser they are unable to print, copy, go to another URL, or access other applications. When an assessment is started, students are locked into it until they submit it for grading. Available for Windows, Mac and iOS [sic].

=== <s> Features </s> Bugs ===

* Integrates with Blackboard, ANGEL, Brightspace by D2L, Canvas, Moodle, and Sakai
* Assessments are displayed full-screen and cannot be minimized
* Assessments cannot be exited until submitted by users for grading

* Task switching or access to other applications is prevented
* Print, Print Screen and capturing functions are disabled
* Copying and pasting anything to and from an assessment is prohibited
* Screen capture, messaging, screen-sharing, virtual machine, and network monitoring applications are blocked from running
* Right-click menu options and function keys are disabled
* Browser menu and toolbar options are disabled, except for Back, Forward, Refresh and Stop

* Source code for the HTML page cannot be viewed
* The browser automatically starts at the login page for the institution’s learning management system
* URLs cannot be typed by the user
* External links don’t compromise the locked testing environment
* Pages from the assessment are not stored on the computer after exiting

* Assessments that are set up for use with LockDown Browser cannot be accessed with other browsers
* Localized for multiple languages, including English, Spanish, French, German, Italian, and Portuguese
* Available for both Windows and Mac computers, as well as iPad

===Malware===
LockDown requires administrative privileges to run, and cannot be run as an unprivileged user.
Features of the browser could be construed to violate [http://www.vt.edu/about/acceptable-use.html Virginia Tech Acceptable Use Policy]
by engag[ing] in any activity that might be purposefully harmful to systems or to any information stored thereon..., however
its use is not widespread enough for this to gain any note.

There is a further extension to Respondus LockDown, called Respondus Monitor
<ref>http://respondus.com/products/monitor/</ref> that allows the proctor to spy on users through their webcam.

==Running the Software==
=== Download ===
LockDown Browser's download website shows the download option based on your OS. Since it does not support Linux, it does not let you download it. So, to download this <s>shitty</s> browser, you need to change the OS in your User Agent to Windows.

The file name must include the school's 9-digit ID code (for VT: 776344933). This must be immediately preceded by a '-' hyphen. If there are multiple numeric sequences '''exactly''' 9-digits long and preceded by a hyphen, the first one is interpreted as the ID code.

The following file names would work:

<code>LockDownBrowser-2-1-3-00-776344933.exe</code> 
<code>LockDown-776344933-March-03-2025.exe</code> 
<code>LD-03032025-776344933.exe</code> 
<code>999999999-776344933-999999999.exe</code> 
<code>LDB-0000000000-776344933-999999999.exe</code> 
Note: the ID id is '''always''' the first 9 digit number with a hyphen in front. The .exe is optional.

Likewise, the following file name would '''NOT''' work:

<code>LockDownBrowser776344933.exe</code> This does not have a hyphen before the 9-digit code. 
<code>LockDown-030320251-776344933.exe</code>This has multiple 9-digit sequences, but the ID code is not first. 
<code>776344933.exe</code>The ID code is not preceded by a hyphen 
<code>Lockdown.exe</code>The ID code simply isn't in the file name 

===Wine===
There are multiple tutorials available by a quick web search which claim to get this working in Wine, <s>however, to date, no member of
VTLUUG has succeeded in doing so and existing information indicates it varies by version of the browser.</s>
There is a solution for running LockDown browser with Wine, provided by [[User:caleb|caleb]] adapted from [https://www.reddit.com/r/UTEP/comments/1bkslgy/tutorial_running_lockdown_browser_on_linux/ this] Reddit post.

This solution requires [https://github.com/Winetricks/winetricks winetricks]

====IMPORTANT NOTE====
While we here at VTLUUG promote the use of free software, many people at the university '''DO NOT'''. Follow these steps at your own risk, and '''ALWAYS''', ask your professor before using LockDown Browser in this ''unsupported'' configuration on an actual exam. Additionally, abusing flaws in Wine's compatibility in order to cheat or otherwise obtain an unfair advantage on exams is '''against the honor code'''. If cheating is your primary goal, there are certainly better ways if you do some research. If one person is caught abusing Wine to cheat on an exam, professors will not allow '''anyone''' to use it anymore, requiring '''everyone''' to use the non-free Windows operating system. If you are tempted to cheat on an exam, consider reaching out to your professor or TA and setting up office hours to discuss the exam.

Additionally, if this method ever fails to work, ensure you have some kind of backup. Whether that is a Windows live-USB you can boot from on the day of the test, a second partition, or an entirely different device, '''bring it with you'''. Many courses provide test exams, which you can use to verify this still works a few hours in advance of the exam. The Chemistry department has a good one, and it is accessible as long as you have taken the course in a previous semester or are currently taking the course.

====Step 1: Setup====
First, install the following packages from your distributions package manager (names may differ):

<code>
wine winetricks gnutls
</code>

for Debian, the command is

<pre>
# apt install wine gnutls-bin winetricks
</pre>
Note that winetricks is only available in the <code>contrib</code> repository on vanilla Debian. Winetricks can be downloaded from their github as a bash script if enabling the contrib repository is not desired.

====Step 2: Winetricks====
Using winetricks, we can install all of the (non-free) fonts and msftedit, which is related to rich text edit controls.<ref>https://learn.microsoft.com/en-us/windows/win32/controls/about-rich-edit-controls</ref>

<pre>
$ winetricks msftedit allfonts
</pre>

====Step 3: Install====
Now simply run:

<pre>
$ wine filename
</pre>

replacing <code>filename</code> with the exact filename of the executable. If an error about the filename missing the 9-digit ID-code appears, ensure the file is [[#Download | properly named]]. After the program is installed, a .desktop file should automatically be created. Launching that file will load the LockDown Browser. Many features work on Gnome, such as detecting when switching desktops using a gesture or attempting to switch to another application. Other desktop environments and window managers have not been tested (yet).

===Virtual Machine (KVM)===
This refuses to run in a Virtual Machine. It may be possible to add the <code>-cpu kvm=off</code> flag to Qemu to prevent it from detecting a virtualized
environment, but this has not been tested to date. It may also be necessary to disable Virtio drivers and devices.

===Natively (Windows or OS X)===
To run on Windows, the software requires administrative privileges. Previous versions were shown to have used Internet Explorer with certain modifications
executed on the fly, to add the "Lock Down" features, however it currently appears to be a stand-alone browser with some resemblance to Google's Chrome. On both OS X and Windows, it is based off of the open-source Chromium
<ref>http://respondus.com/products/lockdown-browser/requirements.shtml</ref>, although previous OS X versions are
believed to have piggybacked off of Safari features. On Windows, the running user must have administrative privileges to run the student edition, however administrative privileges are not necessary to run the browser on OS X.

A version for iOS (iPad-only) is also available, as well as a version for centrally managed Chromebooks for education (k-12).

== Analysis ==
Only cursory analysis has been done thus far, as the author of this article doesn't have a native windows box to run Respondus on. It appears that on launch, it first connects to an unencrypted http server running in AWS, presumably to check if the version is current, then it checks if it is in a virtualized environment.

==Other Notes==
===Actual Bugs===
* No support for U2F -- requires second (expensive) device for other [[gp:2FA|2 Factor Authentication]] methods
* Easily circumvented
** Most students have second computer (i.e. Smartphone), which can be used for cheating (i.e. Google searching)
** Circumvention methods disadvantage students of lower income, who do not have second device.
* No Linux version, disadvantaging students promoting the use of free software
* Does not prevent collaboration in out-of-class testing
* Superfluous for in-class testing, where students are visually monitored anyway
** At most just promotes lazy proctoring of exams
* Cannot take multiple tests within a single session
* Requires administrative privileges which may not be available on multi-user machines
* Hostile to users of password managers

=== Open questions on debugging ===
* Is a TLS cert chain bundled, or can it be MITMed?
* What kind of protocol does it use to authenticate that it is respondus
** A Kerberos-like protocol would be optimal, but I'd be surprised if they did it
* Does the binary do any integrity checks?
* Does qemu-only emulated devices adequately obfuscate that it runs in a VM? Doesn't seem to

==References==
<references/>

[[Category:Software]]

Respondus LockDown Browser

2025-03-03T22:46:12Z

Caleb: /* Download */

Respondus LockDown Browser is a piece of proprietary online testing software developed by Respondus, Inc, and used by departments, including the Department
of Engineering Education. Success in running under [[w:Wine (software)|Wine]] varies from version to version, and may involve complex installation procedures, and the software
actively prevents itself from running in a
[http://support.respondus.com/support/index.php?/Knowledgebase/Article/View/201/25/students-see-the-warning-the-browser-cant-be-used-in-virtual-machine-software-such-as-virtual-pc-vmware-and-parallels virtual machine].

== Official Description ==

From the [http://respondus.com/products/lockdown-browser/index.shtml Product page]:

LockDown Browser® is a custom browser that locks down the testing environment within Blackboard, ANGEL, Brightspace by D2L, Canvas, Moodle, and Sakai. When students use LockDown Browser they are unable to print, copy, go to another URL, or access other applications. When an assessment is started, students are locked into it until they submit it for grading. Available for Windows, Mac and iOS [sic].

=== <s> Features </s> Bugs ===

* Integrates with Blackboard, ANGEL, Brightspace by D2L, Canvas, Moodle, and Sakai
* Assessments are displayed full-screen and cannot be minimized
* Assessments cannot be exited until submitted by users for grading

* Task switching or access to other applications is prevented
* Print, Print Screen and capturing functions are disabled
* Copying and pasting anything to and from an assessment is prohibited
* Screen capture, messaging, screen-sharing, virtual machine, and network monitoring applications are blocked from running
* Right-click menu options and function keys are disabled
* Browser menu and toolbar options are disabled, except for Back, Forward, Refresh and Stop

* Source code for the HTML page cannot be viewed
* The browser automatically starts at the login page for the institution’s learning management system
* URLs cannot be typed by the user
* External links don’t compromise the locked testing environment
* Pages from the assessment are not stored on the computer after exiting

* Assessments that are set up for use with LockDown Browser cannot be accessed with other browsers
* Localized for multiple languages, including English, Spanish, French, German, Italian, and Portuguese
* Available for both Windows and Mac computers, as well as iPad

===Malware===
LockDown requires administrative privileges to run, and cannot be run as an unprivileged user.
Features of the browser could be construed to violate [http://www.vt.edu/about/acceptable-use.html Virginia Tech Acceptable Use Policy]
by engag[ing] in any activity that might be purposefully harmful to systems or to any information stored thereon..., however
its use is not widespread enough for this to gain any note.

There is a further extension to Respondus LockDown, called Respondus Monitor
<ref>http://respondus.com/products/monitor/</ref> that allows the proctor to spy on users through their webcam.

==Running the Software==
=== Download ===
LockDown Browser's download website shows the download option based on your OS. Since it does not support Linux, it does not let you download it. So, to download this <s>shitty</s> browser, you need to change the OS in your User Agent to Windows.

The file name must include the school's 9-digit ID code (for VT: 776344933). This must be immediately preceded by a '-' hyphen. If there are multiple numeric sequences '''exactly''' 9-digits long and preceded by a hyphen, the first one is interpreted as the ID code.

The following file names would work:

<code>LockDownBrowser-2-1-3-00-776344933.exe</code> 
<code>LockDown-776344933-March-03-2025.exe</code> 
<code>LD-03032025-776344933.exe</code> 
<code>999999999-776344933-999999999.exe</code> 
<code>LDB-0000000000-776344933-999999999.exe</code> 
Note: the ID id is '''always''' the first 9 digit number with a hyphen in front. The .exe is optional.

Likewise, the following file name would '''NOT''' work:

<code>LockDownBrowser776344933.exe</code> This does not have a hyphen before the 9-digit code. 
<code>LockDown-030320251-776344933.exe</code>This has multiple 9-digit sequences, but the ID code is not first. 
<code>776344933.exe</code>The ID code is not preceded by a hyphen 
<code>Lockdown.exe</code>The ID code simply isn't in the file name 

===Wine===
There are multiple tutorials available by a quick web search which claim to get this working in Wine, <s>however, to date, no member of
VTLUUG has succeeded in doing so and existing information indicates it varies by version of the browser.</s>
there is a solution for running LockDown browser with Wine, provided by [[User:caleb|caleb]] adapted from [https://www.reddit.com/r/UTEP/comments/1bkslgy/tutorial_running_lockdown_browser_on_linux/ this] Reddit post.

This solution requires [https://github.com/Winetricks/winetricks winetricks]

====IMPORTANT NOTE====
While we here at VTLUUG promote the use of free software, many people at the university '''DO NOT'''. Follow these steps at your own risk, and '''ALWAYS''', ask your professor before using LockDown Browser in this ''unsupported'' configuration on an actual exam. Additionally, abusing flaws in Wine's compatibility in order to cheat or otherwise obtain an unfair advantage on exams is '''against the honor code'''. If cheating is your primary goal, there are certainly better ways if you do some research. If one person is caught abusing Wine to cheat on an exam, professors will not allow '''anyone''' to use it anymore, requiring '''everyone''' to use the non-free Windows operating system. If you are tempted to cheat on an exam, consider reaching out to your professor or TA and setting up office hours to discuss the exam.

Additionally, if this method ever fails to work, ensure you have some kind of backup. Whether that is a Windows live-USB you can boot from on the day of the test, a second partition, or an entirely different device, '''bring it with you'''. Many courses provide test exams, which you can use to verify this still works a few hours in advance of the exam. The Chemistry department has a good one, and it is accessible as long as you have taken the course in a previous semester or are currently taking the course.

====Step 1: Setup====
First, install the following packages from your distributions package manager (names may differ):

<code>
wine winetricks gnutls
</code>

for Debian, the command is

<pre>
# apt install wine gnutls-bin winetricks
</pre>
Note that winetricks is only available in the <code>contrib</code> repository on vanilla Debian. Winetricks can be downloaded from their github as a bash script if enabling the contrib repository is not desired.

====Step 2: Winetricks====
Using winetricks, we can install all of the (non-free) fonts and msftedit, which is related to rich text edit controls.<ref>https://learn.microsoft.com/en-us/windows/win32/controls/about-rich-edit-controls</ref>

<pre>
$ winetricks msftedit allfonts
</pre>

====Step 3: Install====
Now simply run:

<pre>
$ wine filename
</pre>

replacing <code>filename</code> with the exact filename of the executable. If an error about the filename missing the 9-digit ID-code appears, ensure the file is [[#Download | properly named]]. After the program is installed, a .desktop file should automatically be created. Launching that file will load the LockDown Browser. Many features work on Gnome, such as detecting when switching desktops using a gesture or attempting to switch to another application. Other desktop environments and window managers have not been tested (yet).

===Virtual Machine (KVM)===
This refuses to run in a Virtual Machine. It may be possible to add the <code>-cpu kvm=off</code> flag to Qemu to prevent it from detecting a virtualized
environment, but this has not been tested to date. It may also be necessary to disable Virtio drivers and devices.

===Natively (Windows or OS X)===
To run on Windows, the software requires administrative privileges. Previous versions were shown to have used Internet Explorer with certain modifications
executed on the fly, to add the "Lock Down" features, however it currently appears to be a stand-alone browser with some resemblance to Google's Chrome. On both OS X and Windows, it is based off of the open-source Chromium
<ref>http://respondus.com/products/lockdown-browser/requirements.shtml</ref>, although previous OS X versions are
believed to have piggybacked off of Safari features. On Windows, the running user must have administrative privileges to run the student edition, however administrative privileges are not necessary to run the browser on OS X.

A version for iOS (iPad-only) is also available, as well as a version for centrally managed Chromebooks for education (k-12).

== Analysis ==
Only cursory analysis has been done thus far, as the author of this article doesn't have a native windows box to run Respondus on. It appears that on launch, it first connects to an unencrypted http server running in AWS, presumably to check if the version is current, then it checks if it is in a virtualized environment.

==Other Notes==
===Actual Bugs===
* No support for U2F -- requires second (expensive) device for other [[gp:2FA|2 Factor Authentication]] methods
* Easily circumvented
** Most students have second computer (i.e. Smartphone), which can be used for cheating (i.e. Google searching)
** Circumvention methods disadvantage students of lower income, who do not have second device.
* No Linux version, disadvantaging students promoting the use of free software
* Does not prevent collaboration in out-of-class testing
* Superfluous for in-class testing, where students are visually monitored anyway
** At most just promotes lazy proctoring of exams
* Cannot take multiple tests within a single session
* Requires administrative privileges which may not be available on multi-user machines
* Hostile to users of password managers

=== Open questions on debugging ===
* Is a TLS cert chain bundled, or can it be MITMed?
* What kind of protocol does it use to authenticate that it is respondus
** A Kerberos-like protocol would be optimal, but I'd be surprised if they did it
* Does the binary do any integrity checks?
* Does qemu-only emulated devices adequately obfuscate that it runs in a VM? Doesn't seem to

==References==
<references/>

[[Category:Software]]

User:Caleb

2025-03-03T22:39:59Z

Caleb:

Freshman in Engineering. Owns exclusively Microsoft hardware (not actually but it is kinda bad). Member since Spring 2025.

==Devices==
It's very important
===Surface Pro 10 for Business===
This is my main laptop and has the following specs
* Intel Core Ultra 165U
** 12-core 14-thread 4.9GHZ turbo
** Intel UHD Graphics :(
** Intel AI Boost NPU (Appears on Linux but doesn't work)
* 64 GB LPDDR5x RAM
* 1 TB Nvme SSD (Western Digital / Sandisk)
* An display
** 2880x1920 LCD
** Corners are curved, if you like that.
* Surface Slim Pen 2
** Works great with Xournal++
* Surface Pro Flex Keyboard (Sapphire Blue <3)
** Supports attached typing and mousing
** Supports detached (bluetooth) typing and mousing
** Haptic touchpad :P
*** Does not work great with the system ootb. I should create a page just about the flex keyboard.
* Debian 13 (Testing right now but stable by fall 2025)
* Ports
** 2x USB-C (Thunderbolt 4)
** 1x SurfaceConnect

===Surface Go (64GB)===
Was my main for most of High school and has the following specs:
* Pentium Gold 4415Y
** 2-core 4-thread 1.6GHZ
* Intel HD Graphics 615
* 4GB LPDDR3
* 64GB MMC SSD
* 10-in PixelSense Display
** 1800x1200
** Touchscreen
** Pen input
* Silver Type Cover
* Windows 11 24H2 (Will be installing Debian 12 for [[SecureBoot|SecureBoot demonstration]])
* Ports
** 1x USB-C
** 1x 3.5mm Headphone
** 1x Micro-SD Reader
** 1x SurfaceConnect

===Surface Go (128GB)===
Was my main for the last of High school and has the following specs:
* Pentium Gold 4415Y
** 2-core 4-thread 1.6GHZ
* Intel HD Graphics 615
* 8GB LPDDR3
* 128GB Nvme SSD
* 256GB Sandisk Micro-SD card
* 10-in PixelSense Display
** 1800x1200
** Touchscreen
** Pen input
* Burgundy Type Cover
* Burgundy Surface Pen
* Burgundy Surface Arc Mouse
* Debian 12
* Ports
** 1x USB-C
** 1x 3.5mm Headphone
** 1x Micro-SD Reader
** 1x SurfaceConnect

===ASUS Q551L===
* i7-5500U
* NVIDIA Geforce 940M
** 2GB vRAM
* 12GB DDR3 RAM
* 2TB WD Blue SSD
* Arch (Winter break project lol)
* Ports
** 1x Barrel Jack (19V 3.42A Charging)
** 1x Subwoofer Jack
** 1x Ethernet Jack (Gigabit?)
** 1x HDMI
** 3x USB-A 3
** 1x 3.5mm Headphone
** 1x SD Reader
** 1x DVD±RW Drive

==Hobbies==
* Retro Computing
* Photography
* Swimming
* Running
* Biking
* Vinyl
* Linux

==Clubs==
Feel free to ask about the things I'm up to on campus.
* This (Duh :P)
* Environmental Coalition (I went to one meeting)
* Cleanup Club
* Game-day Green Team
* Swim Club
* Triathlon Club
* Others probably

[[Category:Home]]

Respondus LockDown Browser

2025-03-03T22:29:27Z

Caleb:

Respondus LockDown Browser is a piece of proprietary online testing software developed by Respondus, Inc, and used by departments, including the Department
of Engineering Education. Success in running under [[w:Wine (software)|Wine]] varies from version to version, and may involve complex installation procedures, and the software
actively prevents itself from running in a
[http://support.respondus.com/support/index.php?/Knowledgebase/Article/View/201/25/students-see-the-warning-the-browser-cant-be-used-in-virtual-machine-software-such-as-virtual-pc-vmware-and-parallels virtual machine].

== Official Description ==

From the [http://respondus.com/products/lockdown-browser/index.shtml Product page]:

LockDown Browser® is a custom browser that locks down the testing environment within Blackboard, ANGEL, Brightspace by D2L, Canvas, Moodle, and Sakai. When students use LockDown Browser they are unable to print, copy, go to another URL, or access other applications. When an assessment is started, students are locked into it until they submit it for grading. Available for Windows, Mac and iOS [sic].

=== <s> Features </s> Bugs ===

* Integrates with Blackboard, ANGEL, Brightspace by D2L, Canvas, Moodle, and Sakai
* Assessments are displayed full-screen and cannot be minimized
* Assessments cannot be exited until submitted by users for grading

* Task switching or access to other applications is prevented
* Print, Print Screen and capturing functions are disabled
* Copying and pasting anything to and from an assessment is prohibited
* Screen capture, messaging, screen-sharing, virtual machine, and network monitoring applications are blocked from running
* Right-click menu options and function keys are disabled
* Browser menu and toolbar options are disabled, except for Back, Forward, Refresh and Stop

* Source code for the HTML page cannot be viewed
* The browser automatically starts at the login page for the institution’s learning management system
* URLs cannot be typed by the user
* External links don’t compromise the locked testing environment
* Pages from the assessment are not stored on the computer after exiting

* Assessments that are set up for use with LockDown Browser cannot be accessed with other browsers
* Localized for multiple languages, including English, Spanish, French, German, Italian, and Portuguese
* Available for both Windows and Mac computers, as well as iPad

===Malware===
LockDown requires administrative privileges to run, and cannot be run as an unprivileged user.
Features of the browser could be construed to violate [http://www.vt.edu/about/acceptable-use.html Virginia Tech Acceptable Use Policy]
by engag[ing] in any activity that might be purposefully harmful to systems or to any information stored thereon..., however
its use is not widespread enough for this to gain any note.

There is a further extension to Respondus LockDown, called Respondus Monitor
<ref>http://respondus.com/products/monitor/</ref> that allows the proctor to spy on users through their webcam.

==Running the Software==
=== Download ===
LockDown Browser's download website shows the download option based on your OS. Since it does not support Linux, it does not let you download it. So, to download this <s>shitty</s> browser, you need to change the OS in your User Agent to Windows.

The file name must include the school's 9-digit ID code (for VT: 776344934). This must be immediately preceded by a '-' hyphen. If there are multiple numeric sequences '''exactly''' 9-digits long and preceded by a hyphen, the first one is interpreted as the ID code.

The following file names would work:

<code>LockDownBrowser-2-1-3-00-776344933.exe</code> 
<code>LockDown-776344933-March-03-2025.exe</code> 
<code>LD-03032025-776344933.exe</code> 
<code>999999999-776344933-999999999.exe</code> 
<code>LDB-0000000000-776344933-999999999.exe</code> 
Note: the ID id is '''always''' the first 9 digit number with a hyphen in front. The .exe is optional.

Likewise, the following file name would '''NOT''' work:

<code>LockDownBrowser776344933.exe</code> This does not have a hyphen before the 9-digit code. 
<code>LockDown-030320251-776344933.exe</code>This has multiple 9-digit sequences, but the ID code is not first. 
<code>776344933.exe</code>The ID code is not preceded by a hyphen 
<code>Lockdown.exe</code>The ID code simply isn't in the file name 

===Wine===
There are multiple tutorials available by a quick web search which claim to get this working in Wine, <s>however, to date, no member of
VTLUUG has succeeded in doing so and existing information indicates it varies by version of the browser.</s>
there is a solution for running LockDown browser with Wine, provided by [[User:caleb|caleb]] adapted from [https://www.reddit.com/r/UTEP/comments/1bkslgy/tutorial_running_lockdown_browser_on_linux/ this] Reddit post.

This solution requires [https://github.com/Winetricks/winetricks winetricks]

====IMPORTANT NOTE====
While we here at VTLUUG promote the use of free software, many people at the university '''DO NOT'''. Follow these steps at your own risk, and '''ALWAYS''', ask your professor before using LockDown Browser in this ''unsupported'' configuration on an actual exam. Additionally, abusing flaws in Wine's compatibility in order to cheat or otherwise obtain an unfair advantage on exams is '''against the honor code'''. If cheating is your primary goal, there are certainly better ways if you do some research. If one person is caught abusing Wine to cheat on an exam, professors will not allow '''anyone''' to use it anymore, requiring '''everyone''' to use the non-free Windows operating system. If you are tempted to cheat on an exam, consider reaching out to your professor or TA and setting up office hours to discuss the exam.

Additionally, if this method ever fails to work, ensure you have some kind of backup. Whether that is a Windows live-USB you can boot from on the day of the test, a second partition, or an entirely different device, '''bring it with you'''. Many courses provide test exams, which you can use to verify this still works a few hours in advance of the exam. The Chemistry department has a good one, and it is accessible as long as you have taken the course in a previous semester or are currently taking the course.

====Step 1: Setup====
First, install the following packages from your distributions package manager (names may differ):

<code>
wine winetricks gnutls
</code>

for Debian, the command is

<pre>
# apt install wine gnutls-bin winetricks
</pre>
Note that winetricks is only available in the <code>contrib</code> repository on vanilla Debian. Winetricks can be downloaded from their github as a bash script if enabling the contrib repository is not desired.

====Step 2: Winetricks====
Using winetricks, we can install all of the (non-free) fonts and msftedit, which is related to rich text edit controls.<ref>https://learn.microsoft.com/en-us/windows/win32/controls/about-rich-edit-controls</ref>

<pre>
$ winetricks msftedit allfonts
</pre>

====Step 3: Install====
Now simply run:

<pre>
$ wine filename
</pre>

replacing <code>filename</code> with the exact filename of the executable. If an error about the filename missing the 9-digit ID-code appears, ensure the file is [[#Download | properly named]]. After the program is installed, a .desktop file should automatically be created. Launching that file will load the LockDown Browser. Many features work on Gnome, such as detecting when switching desktops using a gesture or attempting to switch to another application. Other desktop environments and window managers have not been tested (yet).

===Virtual Machine (KVM)===
This refuses to run in a Virtual Machine. It may be possible to add the <code>-cpu kvm=off</code> flag to Qemu to prevent it from detecting a virtualized
environment, but this has not been tested to date. It may also be necessary to disable Virtio drivers and devices.

===Natively (Windows or OS X)===
To run on Windows, the software requires administrative privileges. Previous versions were shown to have used Internet Explorer with certain modifications
executed on the fly, to add the "Lock Down" features, however it currently appears to be a stand-alone browser with some resemblance to Google's Chrome. On both OS X and Windows, it is based off of the open-source Chromium
<ref>http://respondus.com/products/lockdown-browser/requirements.shtml</ref>, although previous OS X versions are
believed to have piggybacked off of Safari features. On Windows, the running user must have administrative privileges to run the student edition, however administrative privileges are not necessary to run the browser on OS X.

A version for iOS (iPad-only) is also available, as well as a version for centrally managed Chromebooks for education (k-12).

== Analysis ==
Only cursory analysis has been done thus far, as the author of this article doesn't have a native windows box to run Respondus on. It appears that on launch, it first connects to an unencrypted http server running in AWS, presumably to check if the version is current, then it checks if it is in a virtualized environment.

==Other Notes==
===Actual Bugs===
* No support for U2F -- requires second (expensive) device for other [[gp:2FA|2 Factor Authentication]] methods
* Easily circumvented
** Most students have second computer (i.e. Smartphone), which can be used for cheating (i.e. Google searching)
** Circumvention methods disadvantage students of lower income, who do not have second device.
* No Linux version, disadvantaging students promoting the use of free software
* Does not prevent collaboration in out-of-class testing
* Superfluous for in-class testing, where students are visually monitored anyway
** At most just promotes lazy proctoring of exams
* Cannot take multiple tests within a single session
* Requires administrative privileges which may not be available on multi-user machines
* Hostile to users of password managers

=== Open questions on debugging ===
* Is a TLS cert chain bundled, or can it be MITMed?
* What kind of protocol does it use to authenticate that it is respondus
** A Kerberos-like protocol would be optimal, but I'd be surprised if they did it
* Does the binary do any integrity checks?
* Does qemu-only emulated devices adequately obfuscate that it runs in a VM? Doesn't seem to

==References==
<references/>

[[Category:Software]]

User:Caleb

2025-02-24T22:25:08Z

Caleb:

User:Caleb

2025-02-24T22:06:10Z

Caleb: /* Devices */

Freshman in Engineering. Owns exclusively Microsoft hardware (not actually but it is kinda bad).

==Devices==
It's very important
===Surface Pro 10 for Business===
This is my main laptop and has the following specs
* Intel Core Ultra 165U
** 12-core 14-thread 4.9GHZ turbo
** Intel UHD Graphics :(
** Intel AI Boost NPU (Appears on Linux but doesn't work)
* 64 GB LPDDR5x RAM
* 1 TB Nvme SSD (Western Digital / Sandisk)
* An display
** 2880x1920 LCD
** Corners are curved, if you like that.
* Surface Slim Pen 2
** Works great with Xournal++
* Surface Pro Flex Keyboard (Sapphire Blue <3)
** Supports attached typing and mousing
** Supports detached (bluetooth) typing and mousing
** Haptic touchpad :P
*** Does not work great with the system ootb. I should create a page just about the flex keyboard.
* Debian 13 (Testing right now but stable by fall 2025)
* Ports
** 2x USB-C (Thunderbolt 4)
** 1x SurfaceConnect

===Surface Go (64GB)===
Was my main for most of High school and has the following specs:
* Pentium Gold 4415Y
** 2-core 4-thread 1.6GHZ
* Intel HD Graphics 615
* 4GB LPDDR3
* 64GB MMC SSD
* 10-in PixelSense Display
** 1800x1200
** Touchscreen
** Pen input
* Silver Type Cover
* Windows 11 24H2 (Will be installing Debian 12 for [[SecureBoot|SecureBoot demonstration]])
* Ports
** 1x USB-C
** 1x 3.5mm Headphone
** 1x Micro-SD Reader
** 1x SurfaceConnect

===Surface Go (128GB)===
Was my main for the last of High school and has the following specs:
* Pentium Gold 4415Y
** 2-core 4-thread 1.6GHZ
* Intel HD Graphics 615
* 8GB LPDDR3
* 128GB Nvme SSD
* 256GB Sandisk Micro-SD card
* 10-in PixelSense Display
** 1800x1200
** Touchscreen
** Pen input
* Burgundy Type Cover
* Burgundy Surface Pen
* Burgundy Surface Arc Mouse
* Debian 12
* Ports
** 1x USB-C
** 1x 3.5mm Headphone
** 1x Micro-SD Reader
** 1x SurfaceConnect

===ASUS Q551L===
* i7-5500U
* NVIDIA Geforce 940M
** 2GB vRAM
* 12GB DDR3 RAM
* 2TB WD Blue SSD
* Arch (Winter break project lol)
* Ports
** 1x Barrel Jack (19V 3.42A Charging)
** 1x Subwoofer Jack
** 1x Ethernet Jack (Gigabit?)
** 1x HDMI
** 3x USB-A 3
** 1x 3.5mm Headphone
** 1x SD Reader
** 1x DVD±RW Drive

User:Caleb

2025-02-24T21:42:15Z

Caleb:

Freshman in Engineering. Owns exclusively Microsoft hardware (not actually but it is kinda bad).

==Devices==
Surface Pro 10 for Business
* This is my main laptop and has the following specs
** Intel Core Ultra 165U
*** 12-core 14-thread 4.9GHZ turbo
*** Intel UHD Graphics :(
*** Intel AI Boost NPU (Appears on Linux but doesn't work)
** 64 GB LPDDR5x RAM
** 1 TB Nvme SSD (Western Digital / Sandisk)
** An display
*** 2880x1920 LCD
*** Corners are curved, if you like that.
** Surface Slim Pen 2
*** Works great with Xournal++
** Surface Pro Flex Keyboard (Sapphire Blue <3)
*** Supports attached typing and mousing
*** Supports detached (bluetooth) typing and mousing
*** Haptic touchpad :P
**** Does not work great with the system ootb. I should create a page just about the flex keyboard.
** Debian 13 (Testing right now but stable by fall 2025)

User:Caleb

2025-02-24T21:21:53Z

Caleb: Created page with "Freshman in Engineering. Owns exclusively Microsoft hardware (not actually but it is kinda bad)."

Freshman in Engineering. Owns exclusively Microsoft hardware (not actually but it is kinda bad).