The Canvas Hack

This month, colleges and universities across the country postponed final exams and due dates for assignments after Canvas, a learning management system used by 41 percent of North American higher ed institutions, temporarily went offline due to a hack. The University of Illinois at Urbana-Champaign postponed “all final exams and assignments, including papers, projects, etc., scheduled for Friday, Saturday, or Sunday,” provost John Coleman wrote to students and employees, and that, for “consistency and clarity,” the postponement affects all classes—even those that don't use Canvas.

Cybercrime group ShinyHunters identified itself as the hackers.

hack screen

Message that appeared to Canvas users

ShinyHunters first emerged in 2020 and claims to have successfully attacked 91 victims so far. The group is primarily after money, but has also been willing to cause reputational damage to their victims. In 2021, ShinyHunters announced they were selling data stolen from 73 million AT&T customers. ShinyHunters received global attention in 2025 after Google urged 2.5 billion users to tighten their security following a data breach via Salesforce, a customer management platform.

Unlike data breaches where hackers directly break into databases holding valuable information, ShinyHunters – and several other groups – have recently targeted major companies through voice-based social engineering, which is also known as “vishing,” for voice phishing. Social engineering is when a person is tricked or manipulated into providing information or performing actions that they wouldn’t normally do.

Your AI Is Not Free

AI manThe phrase that if an app is free, you are the product means that when an app doesn’t charge you money, it usually makes money from you instead. They do that mainly by collecting your data or selling your attention to advertisers.

If that is true, then how is AI changing what that means? It is a question that deserves several posts here to really answer.

Your behavior, preferences, and time become what is being monetized. Your data becomes the product. Free apps often gather your demographics, browsing or in-app behavior, location, interests, and habits. This information is then used to target ads or sold to third parties.

The addictive nature of app design keeps you scrolling, tapping, or watching so they can show you ads. You pay with time, not dollars. “Free” is a business model, not a gift.

I will give these companies a nod that running an app costs money (servers, engineers, storage). If you are not paying, the company must earn revenue another way. Ad-free options are becoming more common as a premium. You have probably noticed that on apps and also on video streaming services. You thought that paying for Amazon Prime meant no ads on the videos. Wrong. Free is often an illusion.

In the world of AI, the difference between free and paid tiers is more than a matter of convenience. It is also about identity and privacy.

Privacy becomes the hidden cost. Data is currency. Companies track you across apps and devices, build detailed behavioral profiles, and use algorithms to influence what you see. This raises concerns about autonomy and consent.

Is there no stopping them? As long as you agree to their terms, they have a lot of power. BUT you can read those terms and privacy settings more carefully. (They rely on the fact that many users don't read the terms or adjust their settings at all.) Educate yourself and understand how digital ecosystems make money. You can choose paid or privacy-focused alternatives. And you can remove the app entirely from your life.

I see comparisons of using AI to using social media platforms. I don't think AI data is the same as social media data. Social media platforms monetize your attention. The longer you scroll, the more ads they can show. AI chatbots operate on a different axis. Your prompts aren’t just content; they’re training signals. They reveal how people think, what they struggle with, what they’re curious about, and how they phrase questions. Maybe it is anonymized (a good thing) but it is still valuable and often sensitive data.

Alarmist articles will remind you that many free AI chatbots use your prompts, your corrections, and your uploaded files. They have that photo of your family that you let them enhance. What will they do with what you give them? I can't answer that as of now, and certainly not for the future. I know that your conversation history is used to train or fine-tune future versions of the model. Hey, you are part of the product pipeline - but don't expect to be paid for your contributions.

I also concede that the business model matters and that different AI companies monetize differently. For example, Microsoft provides its own privacy commitments and policies, and those govern how your data is handled. For details, they always direct users to their Privacy Statement.

Here are 4 business models currently out there:
Ad-supported = Your attention is monetized.
Freemium = Free tier gathers usage; paid tier subsidizes development.
Enterprise licensing = Your data may be isolated; the company earns from businesses.
Open source =  The model is free; the company may sell hosting or support.

So "if an app is free, you are the product" still applies, but not always in the same way. When an AI tool is free, you’re not just the product — you’re also the collaborator. You’re an unpaid teacher, tester, and a source of fuel for improvement.

Unplugging From Online Addiction

online addictionThis week, you probably saw headlines like "Meta and YouTube designed addictive products that harmed young people," as a jury in Los Angeles awarded the plaintiff damages of $6 million, with Meta to pay 70% and YouTube the remainder

We are all plugged in to the electronic web around us that is far larger than the World Wide Web. That feeling of being unable to unplug is incredibly common and results from a powerful combination of psychological triggers, clever product design, and the essential role technology plays in modern life. "Addiction" is a strong word in this context, but it is the operative word in these kinds of cases.

Don't feel like you are "weak" or lack willpower if you find it difficult to disconnect. These systems are scientifically optimized to maximize your engagement. The core reason for compulsive checking is a chemical reaction in your brain centered on dopamine, the neurotransmitter associated with pleasure, motivation, and reward-seeking. 

Social media and even email platforms use the same psychological principle that makes slot machines and video games addictive. You don't know when the next "win" will appear. That could be a "like," a validating comment, an alert, or an email from someone "important." Are any of these really important? Maybe - and that possibility mixed in with that famous Fear of Missing Out (FOMO) is powerful. It compels you to keep checking. 

Designers know they need apps and websites to be addictive. I can list some of these techniques, and you can take them as things to be conscious of and avoid. You could also use it as a designer to create an addictive app or website. These things are intentionally engineered as features that make it easy to lose track of time and difficult to stop.

One of those techniques is using infinite scroll, which eliminates natural stopping cues (like the bottom of a page). The content just keeps loading, encouraging endless consumption. |

Push notifications hijack your attention and create a sense of immediate urgency or curiosity, pulling you back into the app regardless of what you were doing.

Autoplay on videos and content streams automatically transitions you to the next item, removing the moment you would have had to make a conscious choice to continue or stop.

As I said earlier, many techniques used in gaming are used in the gamification of other apps. You might not think of things like streaks, badges or LinkedIn profile completeness bars create a feeling of required daily attendance to avoid losing progress or status.

Most of these are psychological traps. FoMO and the social validation of likes and shares, and positive comments tap directly into our fundamental need for social acceptance and validation.

Do you ever find yourself waiting in line, standing on the train, or during a commercial break, checking your phone? That instant, low-effort stimulation. is a form of addiction. 

It's true that technology is no longer optional. We need it for much of our communication and work. We crave constant connectivity. Some jobs demand constant email and instant messaging availability. The lines between work and personal time have been blurring for at least two decades. We need directions (maps), banking, tickets, appointments, and emergency communications from our digital devices. That new reality seems to make a complete disconnect feel irresponsible, unsafe, and maybe impossible.  

But I don't think it is hopeless. The solution is not to throw away devices or turn off your cell service and WiFi or have more willpower. Advice from "experts" is to create friction between yourself and the addictive features. Only allow notifications for direct calls, texts, and genuinely critical applications. Designate specific times (like the first hour of the day, mealtimes, or the hour before bed) and locations (the bedroom, the dinner table) as completely device-free. Remove the most addictive social media apps from your phone, or move them off the home screen and turn off those badges and notification sounds that remind you that there are 3 new somethings on Instagram.

The Rite of Privacy

privacy roadPrivacy is a cornerstone of personal freedom, yet its meaning and importance have evolved over centuries.

Aristotle viewed the public sphere, or polis, as the space where true freedom and civic life were possible. For him, public life was about participating in politics and achieving lasting accomplishments, while private life was more concerned with household affairs and personal needs. This distinction meant that privacy was often seen as secondary to public engagement, but it also laid the groundwork for later debates about the value of personal space and autonomy. Even the Romans also drew a line between public and private spheres. Public life was where individuals could gain honor and recognition, while private life was associated with family, home, and personal matters.   Fast-forward a millennium or two, and thinkers like Rousseau saw privacy as a retreat from the pressures of society—a necessary space for self-reflection and authenticity. Hannah Arendt later argued that privacy is essential for forming personal identity and exercising political rights.In 1890 Samuel Warren and Louis Brandeis published in the Harvard Law Review an essay on the right to privacy By the early part of the 20th century, courts began interpreting the U.S. Constitution to protect an expansion of privacy to include personal freedom and dignity.

The history of privacy reveals that it has always been closely tied to personal liberty and the boundaries between the individual and society. From ancient debates about public and private life to modern legal protections, the concept of privacy has continually evolved in response to new challenges. Privacy remains a vital issue today, shaping debates about technology, freedom, and the rights of individuals in a rapidly changing world. As concerns escalated, privacy was recognized as a fundamental human right,  and laws and regulations were created to address the concerns caused by the spread of computers and data collection and storage.

Then came Edward Snowden.

The scale and scope of government surveillance was exposed. The global debate about privacy was joined with personal data security.  A full five years after surveillance and data collection concerns were exposed, the European Union’s General Data Protection Regulation claimed to set a new global standard for data protection and user rights.  Even California, with its trove of data-driven companies, took the GDPR seriously and enacted the California Consumer Privacy Act.

locked phone?Personal data has become a valuable commodity in the digital economy. Companies collect, analyze, and sell user information to drive advertising, product development, and business strategies.

This shift has made privacy a key economic issue, as individuals must navigate the trade-offs between convenience and control over their data. 

As surveillance and data collection become more widespread, concerns about personal liberty and autonomy have grown. When every action can be tracked, individuals may feel less free to express themselves or make independent choices. These issues are at the heart of modern privacy debates, reminding us that protecting privacy is essential for maintaining freedom in a digital society. Privacy in the modern era is shaped by rapid technological change, new legal frameworks, and the growing power of data. As personal information becomes more valuable and vulnerable, understanding how privacy has evolved is crucial for protecting autonomy and freedom.

Privacy is not just a right of the past—it’s a challenge for the future. We all must stay vigilant and informed. Freedom depends on it.