Top College News Subscribe to the Newsletter

Class-finder text service blocked by UCF server

Creator summoned for hearing

Contributing Writer

Published: Sunday, June 17, 2012

Updated: Monday, June 18, 2012 15:06

It’s a few hours after your registration appointment begins and suddenly it dawns on you — you forgot to register for the classes in your myUCF cart. Instead of getting stuck refreshing your browser every hour to see if someone dropped the classes you wanted, you signed up for U Could Finish, a short message service that sends you a text message as soon as a seat in your desired class opens up.

The website became of interest when it was promoted on UCF’s Reddit page on June 6. Reddit is a website that allows its users to share new ideas and interests through forum boards.

The tool checks myUCF on an interval up to every 60 seconds and texts you immediately when a seat becomes available in the class you’re monitoring, according to the post on Reddit.

Tim Arnold, a marketing senior, created the U Could Finish SMS, and on Friday, June 8, Arnold discovered that U Could Finish was being blocked access to the myUCF servers. Arnold received no notice of this from UCF; he found out through the UCF Reddit page.

“Other schools are paying developers to do this while our school is building walls against this,” Arnold said.

Arnold’s biggest frustration came Friday morning when he received a summons pending charges from the Office of Student Conduct. The summons is for an appointment to determine if Arnold should be charged with two violations of the UCF Student Handbook: “Misuse of Computing and Telecommunications Resources (14g) — Use of computing facilities and telecommunications resources to interfere with normal operation of the University computing system and/or Misuse of Computing and Telecommunications Resources (14i) — Any violation of the University of Central Florida Use of Information Technology and Resources Policy.”

The appointment is set for July 12 in the Office of Student Conduct in Ferrell Commons. According to the letter, Arnold will have an opportunity to inspect and review all information that could be presented at a hearing. Currently, a hold has been placed on Arnold’s university records. If he fails to attend the appointment, he could be withdrawn from all enrolled courses and forfeit tuition and fees.

The comments for U Could Finish’s post on Reddit quickly multiplied after Arnold posted, “We’re currently offline as UCF has blocked our server without providing any notice.. we are working hard to find the reason for this block, and find if it will be permanent."

According to the U Could Finish webpage, UCF hadn’t returned Arnold’s calls about why the U Could Finish server was blocked.

Courtney Gilmartin, the communications coordinator for UCF News & Information, issued a statement a few days after U Could Finish was blocked access to myUCF servers.

“While the intent of UCouldFinish.com — helping students register for classes — is positive, the way in which the website works places an unmanageable load on UCF’s systems," Gilmartin said in an email. “Since mid-December, the website’s software has accessed UCF’s schedule search page up to 220,000 times as often as every 60 seconds. The frequency of these searches consumes myUCF resources, making it more difficult for other students to use the site."

After becoming an Orientation Team member for summer 2011, Arnold noticed that many of his students struggled with making their class schedules.

“I felt that there had to be a better answer than ‘just keep searching myUCF daily … maybe it will open up,’” Arnold said. “On top of that, I had very fresh memories of when I was in their shoes the previous semester, frustrated about a full pre-calc class I needed.”

After creating a failed tool that emailed students when class seats opened up for registration, Arnold plucked out his wallet and contacted an engineer in Lithuania to transform his crude prototype into a working application.

By December 2011, only six students were using the service.

“The initial version was so crude that it sent emails continuously when it found a seat opening — but it worked,” Arnold said. “About five people used it, and three or four actually got in the classes they needed. Their gratitude was enough to see that everyone at UCF should have the opportunity to use this tool. Thus, I started to work on the current version of U Could Finish just after spring finals and launched it officially [June 2].”

Recommended: Articles that may interest you

5 comments

Scott Arciszewski
Thu Jul 5 2012 15:56
A more sensible approach would have been a browser addon (or iMacros script) that queries it at an interval of once every 60-or-so seconds to simulate normal user activity (click here, then here, then here) without loading any images or stylesheets, using regular expressions to fish out the course number and the availability. Then it sends a query to your server that says "{unique token} has a seat available" and cease checking.

Next, have the server as a backbone that queries the server for all outstanding class ID numbers every hour, over port 9050 (after installing Tor on the server).

This is better for 2 reasons:
1. Decentralized. Makes it harder to stop and/or disable a browser addon that students can download.
2. Reduced load. Each account would only be queried every hour or so if the student were to shut down their computer or get kicked offline.

UCF would have been able to reduce load even further if they cooperated with Mr. Arnold and gave him API access so he could do one quick batch search on his server.

But hey, what do I know? (Other than ethics and practical computer security :P )

Tim Arnold
Thu Jun 21 2012 08:53
Hey guys, Tim Arnold here and I can help answer your questions.

1) I definitely do not know the actual load on UCF's servers - only IT knows their own architecture. However, I can estimate what a properly optimized server *should* be able to handle, as well as the load I am placing compared to normal students searching on their own. With that said, the optimization comes in two ways - first, from not requesting images, stylesheets, etc that normal users do. All I am receiving from MyUCF is the raw text results. Second, rather than requesting every class, I only search for the specific class a student is looking for. And if more than one student wants the same class, I only do one query for both, rather than each individually searching MyUCF themselves.

2) I do not have API access - U Could Finish uses a "guest" access system from myUCF, so it does not go through any credentials whatsoever. We only store the absolute essential information for users, such as Name, Email, and the Phone to text to (no billing information or passwords - handled by Amazon and Facebook respectively).

Thank you all for your comments, and hopefully UCF will implement some sort of solution internally in the near future (and not punish me for trying to help).

Anonymous
Wed Jun 20 2012 23:31
Another thing people haven't considered is security. There's no way Arnold has API access or automation credentials. Therefore chances are his system is running with his own student account information. Giving an automated system, which could be fairly easily hacked mind you (full web accessible), opens up myUCF to potentially malicious traffic.

I'm all for student innovaiton, and honestly I don't blame Arnold. It's a cool thought, a cool concept, and, given what UCF has available, a pretty sensible implementation. But that doesn't change the fact it poses dangers/performance issues to UCF and simply isn't sustainable in the long run.

Anonymous
Wed Jun 20 2012 16:37
This service sounds brilliant; I wish I would have known about it sooner. I understand why UCF may need to block an outside entity from clogging up its servers, but I hope UCF sees the viability of this idea and institutes it itself somehow through MyUCF. It would certainly help many students.
Anonymous
Tue Jun 19 2012 11:59
I'd just like to point out that Arnold is far less qualified to estimate the load his application would place on myUCF servers than the people who actually manage the myUCF servers. He might sit around and talk about how it's "highly optimized to reduce load," but since he isn't sitting on the serverside monitoring the network traffic, he is in no position to make such claims.




log out