Latest

Securing New Products at Clever

Clever Goals is a new product that tracks students’ educational software usage. It creates progress data, a new type of data for Clever. This sensitive data needs to be protected from unauthorized access, and users should feel in control over how it’s used. How does the…


Clever Reliability — May 2018 Update

Two months ago, we experienced the worst outage in the history of Clever SSO. We wrote up a postmortem soon afterwards. We mentioned at the time that this postmortem was the beginning of our process to reevaluate everything we do to make sure we can be worthy of…


saml2-js and CVE-2017–11429

Over the past month, Clever worked with CERT to address a vulnerability in our open-source SAML2 library.

Clever maintains an open source library implementing the SAML protocol in Node.js known as saml2-js. We use this library internally in our SAML…


Swappiness and Amazon ECS

At Clever, one of our tenets is “Always a Student”, and in that spirit of learning we wanted to share the changes we made to fix memory allocation issues in AWS Elastic Container Service related to swappiness.