DyKnow - Revision history

imported>Pew at 17:07, 3 January 2018

2018-01-03T17:07:30Z

imported>Pew at 07:39, 3 January 2018

2018-01-03T07:39:59Z

imported>Pew at 08:58, 2 January 2018

2018-01-02T08:58:56Z

imported>Mhazinsk at 01:49, 30 December 2017

2017-12-30T01:49:10Z

imported>Mhazinsk at 01:48, 30 December 2017

2017-12-30T01:48:05Z

imported>Mutantmonkey at 08:17, 25 February 2012

2012-02-25T08:17:12Z

imported>Mutantmonkey: /* Malware Features */

2012-02-25T08:03:58Z

‎Malware Features

imported>Mutantmonkey at 07:58, 24 February 2012

2012-02-24T07:58:12Z

imported>Mutantmonkey at 07:12, 24 February 2012

2012-02-24T07:12:27Z

imported>Mutantmonkey at 07:12, 24 February 2012

2012-02-24T07:12:04Z

@@ Line 1: / Line 1: @@
 '''DyKnow Vision''' is proprietary classroom software made by Dynamic Knowledge Transfer, LLC and used by the [[College of Engineering]] at Virginia Tech. It is mostly written in C# but has many native components and cannot be run with [[Mono]]. Attempts to run it under [[w:Wine (software)|Wine]] have been unsuccessful. Both DyKnow Vision and DyKnow Monitor are known to contain malware-style features allowing for remote screen capture and forced full-screen.
@@ Line 42: / Line 40: @@
 * [https://code.google.com/p/dyknow-panel-extractor/ dyknow-panel-extractor utility]
-[[Category:Needs restoration]]
+[[Category:Software]]

@@ Line 1: / Line 1: @@
 '''DyKnow Vision''' is proprietary classroom software made by Dynamic Knowledge Transfer, LLC and used by the [[College of Engineering]] at Virginia Tech. It is mostly written in C# but has many native components and cannot be run with [[Mono]]. Attempts to run it under [[w:Wine (software)|Wine]] have been unsuccessful. Both DyKnow Vision and DyKnow Monitor are known to contain malware-style features allowing for remote screen capture and forced full-screen.
@@ Line 40: / Line 42: @@
 * [https://code.google.com/p/dyknow-panel-extractor/ dyknow-panel-extractor utility]
-[[Category:Proprietary course software]]
+[[Category:Needs restoration]]

← Older revision		Revision as of 08:58, 2 January 2018
Line 42:		Line 42:
	[[Category:Proprietary course software]]		[[Category:Proprietary course software]]
	[[Category:Campus bugs]]		[[Category:Campus bugs]]
−	~~[[Category:Move to Uniluug]]~~

@@ Line 20: / Line 20: @@
 If it is preferable for the traffic to remain unencrypted for some time, using [[socat]] as a [[Socat#Cleartext_to_SSL_Tunnel_for_DyKnow|plaintext-to-SSL proxy]] allows the final end of the connection to be encrypted but the initial segment to remain unencrypted.
-DyKnow 5.7 installed a hardcoded root certificate on student computers, allowing traffic to be intercepted in attacks similar to the Superfish vulnerability. SWAT has provided a [remediation tool https://swat.eng.vt.edu/expanded-information-regarding-dyknow-57-vulnerability] to remove the certificate and proxy features of DyKnow.
+DyKnow 5.7 installed a hardcoded root certificate on student computers, allowing traffic to be intercepted in attacks similar to the Superfish vulnerability. SWAT has provided a [https://swat.eng.vt.edu/expanded-information-regarding-dyknow-57-vulnerability remediation tool] to remove the certificate and proxy features of DyKnow.
 ==File Format==

← Older revision		Revision as of 01:48, 30 December 2017
Line 19:		Line 19:

	If it is preferable for the traffic to remain unencrypted for some time, using [[socat]] as a [[Socat#Cleartext_to_SSL_Tunnel_for_DyKnow\|plaintext-to-SSL proxy]] allows the final end of the connection to be encrypted but the initial segment to remain unencrypted.		If it is preferable for the traffic to remain unencrypted for some time, using [[socat]] as a [[Socat#Cleartext_to_SSL_Tunnel_for_DyKnow\|plaintext-to-SSL proxy]] allows the final end of the connection to be encrypted but the initial segment to remain unencrypted.
		+
		+	DyKnow 5.7 installed a hardcoded root certificate on student computers, allowing traffic to be intercepted in attacks similar to the Superfish vulnerability. SWAT has provided a [remediation tool https://swat.eng.vt.edu/expanded-information-regarding-dyknow-57-vulnerability] to remove the certificate and proxy features of DyKnow.

	==File Format==		==File Format==

← Older revision		Revision as of 08:17, 25 February 2012
Line 19:		Line 19:

	If it is preferable for the traffic to remain unencrypted for some time, using [[socat]] as a [[Socat#Cleartext_to_SSL_Tunnel_for_DyKnow\|plaintext-to-SSL proxy]] allows the final end of the connection to be encrypted but the initial segment to remain unencrypted.		If it is preferable for the traffic to remain unencrypted for some time, using [[socat]] as a [[Socat#Cleartext_to_SSL_Tunnel_for_DyKnow\|plaintext-to-SSL proxy]] allows the final end of the connection to be encrypted but the initial segment to remain unencrypted.
		+
		+	==File Format==
		+	The .dyz file format is a gzipped XML file. After decompressing the file, it can easily be parsed using any standard XML library; pen strokes are stored as base64-encoded binary strings that are provided by the Microsoft Ink library. The DyKnow format also has support for storing complete file history, including erased, resized, and moved pen strokes as well as other deleted or changed elements.<ref>[https://code.google.com/p/dyknow-panel-extractor/wiki/DPXReader]</ref>

	==Patents==		==Patents==

@@ Line 2: / Line 2: @@
 ==Malware Features==
-Occasionally, professors have enabled the malware features of DyKnow Vision in class, forcing full-screen mode and spying on students. More specific information regarding this would be informative. In earlier versions of DyKnow, certain key combinations could easily break the forced full-screen mode. Unless students give consent to have their privacy invaded by merely showing up to class and running required software, the malware functionality breaks the [http://www.vt.edu/about/acceptable-use.html Virginia Tech Acceptable Use Policy], but to date, this hasn't seem to have garnered any attention.
+DyKnow Monitor, which comes bundled in some versions of DyKnow Vision, includes malware-style features such as application and URL blocking, remote opening and closing of programs and displays of student screens.<ref>[http://www.dyknow.com/wp-content/uploads/2011/05/monitor54.pdf]</ref> DyKnow Monitor can be prevented from installing by editing the MSI to set a DONT_INSTALL_MONITOR flag. In the current version of DyKnow provided by Virginia Tech, the DONT_INSTALL_MONITOR flag is set by default. However, DyKnow Vision retains many malware features, such as forced full-screen mode and remote screen-capture.
-DyKnow Monitor, which comes bundled in some versions of DyKnow Vision, includes malware-style features such as application and URL blocking, remote opening and closing of programs and displays of student screens.<ref>[http://www.dyknow.com/wp-content/uploads/2011/05/monitor54.pdf]</ref> DyKnow Monitor can be prevented from installing by editing the MSI to set a DONT_INSTALL_MONITOR flag. In the current version of DyKnow provided by Virginia Tech, the DONT_INSTALL_MONITOR flag is set by default. However, DyKnow Vision retains many malware features, such as forced full-screen mode and remote screen-capture.
+Occasionally, professors have enabled the malware features of DyKnow Vision in class, forcing full-screen mode and spying on students through the remote screen-capture functionality. In earlier versions of DyKnow, certain key combinations could easily break this forced full-screen mode. More specific information regarding this would be informative.
 ==Running the Proprietary Software==

@@ Line 4: / Line 4: @@
 Occasionally, professors have enabled the malware features of DyKnow Vision in class, forcing full-screen mode and spying on students. More specific information regarding this would be informative. In earlier versions of DyKnow, certain key combinations could easily break the forced full-screen mode. Unless students give consent to have their privacy invaded by merely showing up to class and running required software, the malware functionality breaks the [http://www.vt.edu/about/acceptable-use.html Virginia Tech Acceptable Use Policy], but to date, this hasn't seem to have garnered any attention.
-DyKnow Monitor, which comes bundled in some versions of DyKnow Vision, includes malware-style features such as application and URL blocking, remote opening and closing of programs and displays of student screens.<ref>[http://www.dyknow.com/wp-content/uploads/2011/05/monitor54.pdf]</ref> DyKnow Monitor can be prevented from installing by editing the MSI to set a DONT_INSTALL_MONITOR flag. In the current version of DyKnow provided by Virginia Tech, the DONT_INSTALL_MONITOR flag is set by default. However, DyKnow Vision retains many malware features, such as forced full-screen mode and remote screen-capture.<ref>[http://www.dyknow.com/wp-content/uploads/2011/05/DyKnow-Step-by-Step-Guide-Full.pdf DyKnow Step-by-Step Guide]</ref>
+DyKnow Monitor, which comes bundled in some versions of DyKnow Vision, includes malware-style features such as application and URL blocking, remote opening and closing of programs and displays of student screens.<ref>[http://www.dyknow.com/wp-content/uploads/2011/05/monitor54.pdf]</ref> DyKnow Monitor can be prevented from installing by editing the MSI to set a DONT_INSTALL_MONITOR flag. In the current version of DyKnow provided by Virginia Tech, the DONT_INSTALL_MONITOR flag is set by default. However, DyKnow Vision retains many malware features, such as forced full-screen mode and remote screen-capture.
 ==Running the Proprietary Software==
@@ Line 30: / Line 30: @@
 * [http://schoolcomputing.wikia.com/wiki/DyKnow DyKnow entry on the School Computing wiki]
 * [[gp:Learning Technologies#Online Course Systems|Online Course Systems]] [http://www.edtech.vt.edu/ocs/dyknow/index.shtml DyKnow support page]
 * [https://code.google.com/p/dyknow-panel-extractor/ dyknow-panel-extractor utility]