gatheringpluginusage statisticsfrompublicly ... · motivation weareusingthesepluginslists...

14
Alexander Bias, Ulm University Gathering plugin usage statistics from publicly available Moodle instances

Upload: others

Post on 19-Jun-2020

11 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Gatheringpluginusage statisticsfrompublicly ... · Motivation Weareusingthesepluginslists areoutdatedat thetime ofpublication Onlyglobal pluginstatisticsavailable, nobreakdown intoworldregions

Alexander Bias, Ulm University

Gathering plugin usagestatistics from publiclyavailable Moodle instances

Page 2: Gatheringpluginusage statisticsfrompublicly ... · Motivation Weareusingthesepluginslists areoutdatedat thetime ofpublication Onlyglobal pluginstatisticsavailable, nobreakdown intoworldregions

Motivation

● We are using these plugins lists

are outdated at the time of publication

Page 3: Gatheringpluginusage statisticsfrompublicly ... · Motivation Weareusingthesepluginslists areoutdatedat thetime ofpublication Onlyglobal pluginstatisticsavailable, nobreakdown intoworldregions

Motivation

● We are using these plugins lists

are outdated at the time of publication

● Only global plugin statistics available,

no breakdown into world regions

Page 4: Gatheringpluginusage statisticsfrompublicly ... · Motivation Weareusingthesepluginslists areoutdatedat thetime ofpublication Onlyglobal pluginstatisticsavailable, nobreakdown intoworldregions

Publicly available information?

● List of D-A-CH HiEd Moodle instances

● Moodle instances are reachable

● List of plugins published on moodle.org

Page 5: Gatheringpluginusage statisticsfrompublicly ... · Motivation Weareusingthesepluginslists areoutdatedat thetime ofpublication Onlyglobal pluginstatisticsavailable, nobreakdown intoworldregions

The trick

● Every plugin must have a version.php

● Iterate over all given Moodle instances

● Request each known plugin’s version.php

Page 6: Gatheringpluginusage statisticsfrompublicly ... · Motivation Weareusingthesepluginslists areoutdatedat thetime ofpublication Onlyglobal pluginstatisticsavailable, nobreakdown intoworldregions

The trick

● HTTP 200: The plugin is installed!

● HTTP > 200: The plugin is most probably

not installed or technically obfuscated

Page 7: Gatheringpluginusage statisticsfrompublicly ... · Motivation Weareusingthesepluginslists areoutdatedat thetime ofpublication Onlyglobal pluginstatisticsavailable, nobreakdown intoworldregions

The data basis

● 230 Moodle instances in D-A-CH HiEd

● > 1600 published plugins on moodle.org

Page 8: Gatheringpluginusage statisticsfrompublicly ... · Motivation Weareusingthesepluginslists areoutdatedat thetime ofpublication Onlyglobal pluginstatisticsavailable, nobreakdown intoworldregions

The results: Base metrics

Moodle sites crawled 230

Moodle sites without any plugin 22

Moodle sites with at least one plugin 208

Mean plugins per site 22

Median plugins per site 18

Page 9: Gatheringpluginusage statisticsfrompublicly ... · Motivation Weareusingthesepluginslists areoutdatedat thetime ofpublication Onlyglobal pluginstatisticsavailable, nobreakdown intoworldregions

1 - 35 36 - 100 185

The results: Plugins per site

Page 10: Gatheringpluginusage statisticsfrompublicly ... · Motivation Weareusingthesepluginslists areoutdatedat thetime ofpublication Onlyglobal pluginstatisticsavailable, nobreakdown intoworldregions

The results: 20 Most used pluginsmod_publication 49

format_topcoll 47

qbehaviour_adaptivemultipart 47

block_quickmail 46

atto_fullscreen 44

qbehaviour_dfcbmexplicitvaildate 44

qbehaviour_dfexplicitvaildate 44

qtype_stack 43

mod_attendance 42

block_xp 41

mod_hvp 118

mod_choicegroup 103

mod_hotpot 101

mod_scheduler 87

mod_questionnaire 64

mod_adobeconnect 58

format_grid 54

mod_journal 54

block_course_overview_campus 53

mod_lightboxgallery 51

Page 11: Gatheringpluginusage statisticsfrompublicly ... · Motivation Weareusingthesepluginslists areoutdatedat thetime ofpublication Onlyglobal pluginstatisticsavailable, nobreakdown intoworldregions

One more thing

Page 12: Gatheringpluginusage statisticsfrompublicly ... · Motivation Weareusingthesepluginslists areoutdatedat thetime ofpublication Onlyglobal pluginstatisticsavailable, nobreakdown intoworldregions

What about security?

Exposing the highlighted information to

unauthenticated crawlers isn‘t necessarily a

security threat.

Unless you are running unsupported code.

Page 13: Gatheringpluginusage statisticsfrompublicly ... · Motivation Weareusingthesepluginslists areoutdatedat thetime ofpublication Onlyglobal pluginstatisticsavailable, nobreakdown intoworldregions

Try it yourself

The crawler plugin is available on

github.com/moodleuulm/moodle-local_sitestats.

Please, use it responsibly and at own risk.

Page 14: Gatheringpluginusage statisticsfrompublicly ... · Motivation Weareusingthesepluginslists areoutdatedat thetime ofpublication Onlyglobal pluginstatisticsavailable, nobreakdown intoworldregions