University of E. Anglia Data Breach

[dhicks]

I'm disappointed at the general usage of the data anyway. Why is it sat in a spreadsheet like that, not individual files?

 

Do any MIS systems (for schools, universities, or any other similar institutions) directly integrate sharing files via Google Drive / Office 365 / Dropbox / etc? So the end user has a nice simple press-this-button-to-share-with-Class-5B style of interface rather than having to rely on emailing files around?

[vikpaw]

Do any MIS systems (for schools, universities, or any other similar institutions) directly integrate sharing files via Google Drive / Office 365 / Dropbox / etc? So the end user has a nice simple press-this-button-to-share-with-Class-5B style of interface rather than having to rely on emailing files around?

FROG LMS does, but it's not quite the same thing, useful for pulling data in from the 3rd party drive.

Most MIS have a Document Storage Facility and they should be locked down to only those who need access, plus it's behind a password.

The tools are available, this was just really poor practice.

[matt40k]

The passwords are stored in the Data Protection folder on the Staff Shared area on the network. We haven't had anyone writing them down or sharing with other people. The two shortest passwords are used the most commonly so most people know these off the top of their head. We use 5 'Common' passwords and change these anually and they are announced at the first INSET day at the start of term.

 

Best password is the one you don't know. Use a password manager like LastPass then paste the password, helps stop password reuse as well... just don't forget the master password to the password manager

[Arthur]

The passwords are stored in the Data Protection folder on the Staff Shared area on the network.

The Sony method of password management.

 

www.buzzfeed.com/charliewarzel/it-gets-worse-the-newest-sony-data-breach-exposes-thousands

 

... the hackers behind the massive Sony corporate data hack released a new trove of documents, and it appears that things are only going to get worse for the victim of the most embarrassing and all-encompassing hack of internal corporate data ever made public.

 

Included in the newest data dump is a file directory titled "Password," which includes 139 Word documents, Excel spreadsheets, zip files, and PDFs containing thousands of passwords to Sony Pictures' internal computers, social media accounts, and web services accounts. Most of the files are plainly labeled with titles like "password list.xls" or "YouTube login passwords.xlsx."

Edited June 21, 2017 by Arthur