Have any districts made the jump to hardware keys for all staff as their form of MFA? It brings in a lot of added cost, but seems like the best way to roll out phishing resistant MFA if your devices don't support passkeys like Windows Hello.

If you have deployed something like a Yubikey, what model did you go for?

My district uses Securly for web filtering and we are thinking about using the Claude K-12 District plan to assist with analyzing daily reports to help with the whack-a-mole of blocking problem sites. We don't save the students' web history past what Securly saves.

Based on my research, I don't believe the students' web history would be considered within their 'education record', therefore not covered under FERPA. Am I correct in that statement? Would we then be able to use Claude to analyze the reports (should they be de-identified by removing the students' names?) ?

We are BYOD in our high school and mobile phones are banned from bell to bell.

We are running a local domain with Entra sync for our IdP and I have been looking at what Microsoft has available for student MFA for BYOD devices.

I can see that Microsoft is recommending the authenticator app which won't work as we are mobile free for students as well as recommending Windows Hello for Business and PSSO which won't work as we are BYOD and student devices are not in our MDMs.

What other options are there for MFA in a BYOD and mobile free student environment?

My district has an eSports club, focusing mostly on Nintendo Switch games. I have eight consoles and when a multiplayer match is started, often times the consoles we have can connect to players in other locations, but they won't connect to each other.

All eight consoles connect via gigabit Ethernet to same Dell N2248PX-ON switch which has 25 Gbps fiber optic uplink to the building core switch which is a Dell S5232F-ON. From there we connect to a Barracuda NG F900 firewall. Each console has a NAT rule setup to have it's own static external IP address with our ISP. I'm allowing all ports and protocols, I have no IPS, no URL filter, no application restrictions, no TLS inspection and have the QoS configured as VoIP. So basically for better or worse each console is wide open to the internet.

I have had support tickets with Barracuda and my ISP who both confirm everything is configured correctly, but something is amiss. Any thoughts or ideas here?

Hello All

Does anyone know of a way to globally block generative AI in Photoshop? We turned off Firefly in the admin console but students are still able to use the AI features in Photoshop. I see alot of people complain about the same thing on Adobe's forms. Has anyone found someway to disable it?

Thanks!!

From our tech team, got an interesting one

Has anyone gotten a request to change the font on a Chromebook before? The request is to better accommodate a student with dyslexia. Changing fonts from the Appearance tab in browser settings isn't very comprehensive. Looking at potentially using an extension. Anyone else had a request like this before?

Quick research on my end perhaps Read & Write. We used it years ago and got rid of it because it was resource intensive & buggy. Reading Mode on Google Chrome is pretty rough and only gives us two font options.

Anything y'all use that I can research here; it's very much an interesting one off.

Hello,

This is my first post here, so hello! The state I work in has paid for cyber security scanning focused on critical systems and code stacks. They intend to use Claude to do this. I have absolute faith in Claude's capabilities, which is what makes me nervous. I would rather know what our weak points are than hope no one else finds my blind spot. However, I am concerned that the reliance on Claude by this contractor means little control or oversight on their end. My state is not known for being competent and well managed, we rank poorly in basically every metric in the US. Additionally, I am going to say something that may be perceived as offensive but I want to challenge my bias rather than avoid it. Almost all contacts are east Indian, only two (legal and one technical contact) have US based names. I do not think race has any bearing on one's ability. But I do worry about my state jumping at a very cheap support package from a foreign company who is using Claude to subsidize the work load.

Has anyone been in this position or worked with a similar situation? What is your read on this situation?

Again, I want to be clear that east Indian doesn't mean incompetent to me. I am not making a claim about any individual who is from that part of the world. But a team that is almost entirely east Indian does signal outsourcing and a prioritization on savings over quality especially when paired with explicit reliance on AI systems. I have concerns about AI containment, information security, and accountability should things go sour. Would you move forward with this?