> “Our legal department is now in touch with them to sign off legally that they will delete the file,” she said.
You'd have to be a fool to sign a document. This will just make you liable if the document does get out.
D.C. accidentally uploads private data of 12,000 students
11–15 of 15 posts
Re: D.C. accidentally uploads private data of 12,000 students
#12In my 2nd year of university the chair of the CS department shared an excel file via email containing the private data of all the CS students. ID numbers, addresses, phone numbers, first/last names. He claimed it was meant for an office assistant but somehow he blasted it to both the BS and MS student lists. I doubt he got more than a slap on the wrist as he remained the chair for another 2-3 years.
All of this information was available via "finger" on a sun e5000 server when I was in college.
Re: D.C. accidentally uploads private data of 12,000 students
#13Feel there is really no way to prevent this. This was doubtfully uploaded knowingly (or possibly with ignorance). Data dumps occur all the time. As a file, they can too easily be shared. For sure, the school should work on increasing their awareness of handling secure data. But, in the end, nothing would really prevent this from happing again.
We do SSL and content inspection of uploads to unexcepted sites to prevent this sort of thing where I work.
I'm completely ignorant here, but how do you do that without this? https://news.ycombinator.com/item?id=11042353
Hoping to learn something, honest question.
Re: D.C. accidentally uploads private data of 12,000 students
#14Earlier quoted context omitted.
We do SSL and content inspection of uploads to unexcepted sites to prevent this sort of thing where I work.
I'm completely ignorant here, but how do you do that without this? https://news.ycombinator.com/item?id=11042353 Hoping to learn something, honest question.
I'm imagining IT has proviosned certificates on the computers under their control that allows them to do a MITM attack on either blacklisted sites, or non-white listed sites.
Re: D.C. accidentally uploads private data of 12,000 students
#15In my 2nd year of university the chair of the CS department shared an excel file via email containing the private data of all the CS students. ID numbers, addresses, phone numbers, first/last names. He claimed it was meant for an office assistant but somehow he blasted it to both the BS and MS student lists. I doubt he got more than a slap on the wrist as he remained the chair for another 2-3 years.
At my university, a publicly accessible file on the university systems listed addresses, phone numbers, and names for all students, not just those of a particular department. Leaking the same information in an email would have been superfluous. Are those supposed to be secret?
I don't know, maybe they are publicly accessible with FERPA. However, considering that some secure systems on (my) campus are pre-registered to our names using just firstname-lastname@xyz.edu with the password being the ID, or some other simple variation thereof, I don't feel very comfortable about it. As much as I wish I lived in a perfect world, I don't, and so it wouldn't surprise me that students don't think to change their original passwords to secure ones.