Cookies and EMBC.

[synaesthesia]

Hi,

I've got a fairly major issue which appears to be everywhere, possibly CC3/CC4 caused, but nothing I do seems to help it. The staff involved have spoken to someone at EMBC who quite literally said "what the kids don't know won't hurt them"

The problem. Cookies are being saved somewhere locally so, for instance, I log onto CC3 as a staff member, and go onto their EMBC login, which is set to level 1 filtering for access to youtube and whatnot.

As most staff do, close via the red X, log off.

Log on again as the same staff member. Cookies are doing their job - although it asks you to log in for EMBC, it's still filter level 1 - including access to Youtube and whatnot.

Shut the whole PC down and fire it up again: the same.

Now, the obvious thing is - dont let staff members leave their PC's unattended, don't let staff members log onto their EMBC account on students logins, etc etc. But this is real life and drumming that into people is like asking a chav to drive properly. They might have their hands at 10 and 2 whilst your watching but the next day they're on their own.
Now, I've made all the settings changes possible - cookies are cleared *completely* from the session at browser close, and I've confirmed this using a fair few other sites like google mail, youtube accounts, Edugeek even. Yet EMBC's filter level remains, and apparently this is the case for 30 minutes.

So is that an EMBC specific setting, i.e. saving login details at their end? The staff member who's raised this with me is a little upset that it should be the case with user security being paramount, especially with youtube and more importantly some of the comments on it but I really could do with knowing if it's something that can be solved short of raising the filter level, or if it really is just trying to re-educate users.

[Edu-IT]

I'll try this tomorrow. I'm sure it's not the case on our system though.

To confirm, login to EMBC portal, try YouTube, log off.
Log in, try to accesss EMBC portal, don't login, try YouTube.

That the process?

[synaesthesia]

Pretty much yeah.
But don't actually log out of EMBC - just close the browser window.
Horribly lazy as above but when cookies are being cleared by the system it's still slightly worrying.

[Edu-IT]

It does happen here, yes. I'll also log it with EMBC as that isn't right.

[Edu-IT]

Considor it logged. They're investigating.

[synaesthesia]

Cheers fella. I wanted to check with a few other places before speaking to them as I wasn't convinced that it wasn't a CC3/CC4 issue. Keep us posted.

[Edu-IT]

I've spoken to a guy at EMBC today and the solution is to clear temporary files when the browser closes. It seems a temporary file is placed on the machine which needs to be cleared in order for YouTube to then be blocked when the staff member logs out.

Internet options, Advanced, Security, Empty temporary files

I hope this helps?

[synaesthesia]

Yes, this is what one of my schools was told, and I had already made those changes to try and rule out a client-side cookie or similar. Didn't have any effect.

Now wondering if it's a CC3 specific problem - will have a play later on a standalone machine.

Cheers fella.

[Edu-IT]

Oh really? Hmm. It worked for the person I spoke to.

Let me know what you find on CC3. I'll try it when I get a few moments on CC4.

[synaesthesia]

Appears to work on one CC3 network and not on the next. Therefore wondering if there's anything like the global filter having any effect on it on a per-site basis.
Will keep playing next week and report back. That makes it more likely a CC3 issue but worth investigation either way