Archive for the ‘Passwords’ Category

Cyber Ethics

Monday, September 28th, 2009

Rich Reeder, Stony Brook University’s Chief Information Officer (CIO) passed this along to us from the Multi-State Information Sharing and Analysis Center (MS-ISAC), a collaborative state and local government-focused cyber security entity that is significantly enhancing cyber threat prevention, protection, response and recovery throughout the United States. The organization distributes a monthly cyber security newsletter and we try to publish their advice either here on our blog or as a tip on the Division of Information Technology Web site.

The topic this month is cyber ethics, not a bad thing to contemplate from time to time.

What is Cyber Ethics?
Cyber ethics refers to the code of responsible behavior on the Internet. Just as we are taught to act responsibly in everyday life, with lessons such as "Don’t take what doesn’t belong to you," and "Do not harm others," — we must act responsibly in the cyber world as well.

What Are Responsible Behaviors on the Internet?
Responsible behavior on the Internet in many ways aligns with acceptable behavior in everyday life, but the consequences can be significantly different. For example, verbal gossiping is generally limited to the immediate audience (those within earshot) and may well be forgotten the next day. However, gossiping on the Internet can reach a far wider audience. The "words" are not forgotten the next day, but may live on the Internet for days, months or years and cause tremendous harm.

Some people try to hide behind a false sense of anonymity on the Internet, believing that it does not matter if they behave badly online because no one knows who they are or how to identify them. That is not always true. Computers, browsers, and Internet service providers may keep logs of their activities which can be used to identify illegal or inappropriate behavior.

The basic rule is do not do something in cyber space that you would consider wrong or illegal in everyday life.

When determining responsible behaviors, consider the following:

  • Do not use rude or offensive language.
  • Don’t be a bully on the Internet. Do not call people names, lie about them, send embarrassing pictures of them, or do anything else to try to hurt them.
  • Do not copy information from the Internet and claim it as yours. That is called plagiarism.
  • Adhere to copyright restrictions when downloading material including software, games, movies, or music from the Internet.
  • Do not break into someone else’s computer.
  • Do not use someone else’s password.
  • Do not attempt to infect or in any way try to make someone else’s computer unusable.

We were taught the rules of "right and wrong" growing up. We just need to apply the same rules to cyber space!

For more information on cyber ethics, visit the following Web sites:

U.S. Department of Justice:
www.usdoj.gov/criminal/cybercrime/cyberethics.htm

MS-ISAC:
www.msisac.org/awareness/news/2007-01.cfm

Symantec:
www.symantec.com/norton/library/familyresource/article.jsp?aid=pr_cyberethics

Cyber-Ethics Champions Code:
www.playitcybersafe.com/resources/EthicsCode.pdf

StaySafeOnLine:
www.staysafeonline.info/content/cyber-ethics-materials

KeePass

Thursday, June 11th, 2009

by David Ecker, Manager of Client Support

We seem to have Internet passwords for every Web site we visit from reading online news to conducting online banking. I originally tried to keep all my passwords the same, but then restrictions were placed on how long a password could be and the types of characters allowed. At work I was keeping track of all my Stony Brook passwords on a piece of paper (I have since learned this is NOT a good idea).

I went on vacation for a week and when I returned, I couldn’t remember the password for my computer. There were so many passwords running through my head. Was it the name of the dog, my mother’s maiden name, or my favorite song? I called Stony Brook’s Computer Accounts office and they reset my password, but I knew I had to change. I spent the next few evenings after my family went to bed searching the Internet for a solution.

I found an open source program called KeePass that is designed exactly for the problem I was encountering. I was excited, but skeptical since I needed more options:

  1. It had to be portable, so I could carry it with me.
  2. It had to have encryption on the password file, so I could feel comfortable putting passwords into it.

I checked it out and, yes, it does both of these things. I have been using KeePass for almost a year and it has been a lifesaver. I no longer have to remember my passwords. I can just look them up in a file. It even has this neat little feature where you can copy and paste your password into a Web browser.

If passwords are driving you crazy, make a turn for the better and try KeePass.

Start the Spring 2008 Semester Off Right

Wednesday, January 23rd, 2008

Attention Students!

Sunday, Jan. 27

10:00 a.m. - 4:00 p.m.

Computer Registration Assistance at the SAC’s Traditions Lounge

Welcome back for the start of the Spring 2008 semester. Client Support and the Division of Information Technology will be here to help make sure your computer is hooked up, registered, and ready to go.

From 10 a.m. - 4 p.m. on Sunday, Jan. 27, staff technicians will be on hand to assist students with registration and wireless issues in the Traditions Lounge, located on the main floor of the Student Activities Center (SAC). The technicians in attendance will do their best to solve your problems and answer any questions you may have. If your computer has other issues that will take longer to attend to, you will be encouraged to bring your machine to the Client Support Drop-in Center, located on the fifth floor of the Frank Melville Jr. Memorial Library, Room S-5410. The Drop-in Center will also be open from 10 a.m. - 4 p.m. on Sunday, Jan. 27, and will resume regular business hours (Mon. - Fri. 8:30 a.m. - 5 p.m.) on Jan. 28.

Questions? Call Client Support at 631.632.9800 or submit a help request.

iPhone Mania Hits Stony Brook!

Tuesday, July 17th, 2007

 

 

 

 

 

 

 

 

 

 

 

Members of the Client Support staff enjoy friendly, back-and-forth banter about which is better … Mac or PC. We have three staff members, in particular, who laud the prowess of all things Apple.

Lindsay is one of those people. She had everyone in the office talking when she returned from her vacation out west with an iPhone. For many of us, this was our first time seeing one LIVE, up close, and in person. I sheepishly asked if I could hold it. She told me not to feel embarrassed. Apparently, I wasn’t the only one who made such an odd request. Lindsay pointed her way through different screens like she was Steve Jobs. I watched in awe as she tilted the phone to its right to show me a video being played in horizontal screen mode.

"Where is this all going?" I wondered to myself and will I one day own an iPhone of my very own? Not for another two years, at least. I just renewed my Verizon Wireless contract and upgraded to an LG VX8600. I’m so yesterday’s news.

Anyway, we urged Lindsay to blog about her iPhone discoveries because students will undoubtedly be coming back to campus as proud owners of iPhones this fall. Lindsay agreed to share her test results with me, so here is what we’ve learned.

The iPhone will connect to AirNet, the service that provides campus wireless access to Stony Brook University faculty, staff and students. You can log in through the web for limited network access with no problem. This will let you surf the web a lot faster than AT&T’s Edge Network will allow you to. The downside is that you can’t send or receive email while using AirNet’s limited network access.

You can connect to Stony Brook’s VPN (virtual private network) to gain access to your email through the mail client on the iPhone.

This is how you connect to the VPN:

  • Hit Settings on your iPhone’s main menu.
  • Scroll down and select General
  • Next, click on Network

You will come to a screen that looks like this:

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

  • Click on VPN
  • Select Settings underneath
  • Choose PPTP
  • Enter server address:  pptp.airnet.stonybrook.edu
  • Account name is your NetID
  • Password is your NetID password. You should get an alpha/numeric keypad to type this in.

There appears to be a glitch that occurs when your phone goes to sleep (when this happens you lose your connection to the VPN) or if you leave the VPN and come back to it at another time. When you go in again, you have to turn your VPN on and repeat the above steps. Otherwise, you will only get a numeric keypad to type in your NetID at the password screen when you try to use the VPN shortcut. You will not be able to type in alpha characters.

Lindsay’s way around this was to go into Windows and change her NetID password to all numerics. You don’t have to do this. In fact, we do not encourage it. You can go back into the VPN Settings each time to put in your NetID password without changing it. Our Division of Information Technology Security Officer advises that an all-numeric password is very insecure and should not be used as a password on any Stony Brook University system.

Lindsay said a lot of people with iPhones are encountering this bug. It is currently being discussed on some forums.

We’ll wait for the software update and in the meantime keep asking Lindsay if we can hold her iPhone!