<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
    <channel>
        <title><![CDATA[ phasewalk.pckt - pckt ]]></title>
        <link><![CDATA[ https://phasewalk.pckt.blog ]]></link>
        <description><![CDATA[  ]]></description>
        <language>en</language>
        <pubDate>Fri, 22 May 2026 07:32:23 +0000</pubDate>

                    <item>
                <title>Thoughts on the Canvas LMS Hack</title>
                <link>https://phasewalk.pckt.blog/thoughts-on-the-canvas-lms-hack-f9cqhyp</link>
                <description><![CDATA[Full Post: Unraveling the Canvas Hack The Canvas learning management system is AGPL-licensed, open-source software. However, our educational institutions don’t run their own instances of Canvas! They’re all paying customers of Instructure’s hosting services. Instructure holds the master credentials, the privileged API keys, OAuth tokens, and database access. This creates a single point-of-failure. If you can compromise this layer, you gain access to 9,000+ institutions in one fell swoop. This is...]]></description>
                <author>phasewalk.pckt</author>
                <guid isPermaLink="false">thoughts-on-the-canvas-lms-hack-f9cqhyp</guid>
                <pubDate>Fri, 08 May 2026 07:25:37 +0000</pubDate>
                            </item>
            </channel>
</rss>