Required to collect usernames for internet authenication

[strawberry]

We have a new piece of kit that connects directly to the internet. I have concerns that it doesn't have any form of logon but will likely capture usernames and passwords. Can anyone point me to the advice on unauthenticated internet access in a school?

[synaesthesia]

sorry how do you mean "capture usernames and passwords"? what's the kit, is that it's purpose, and if so why?

[strawberry]

Smart interactive display with a built in PC. No authentication onto the Pc so i'm guessing the staff will browse the internet and probably leave a few websites logged on.

[synaesthesia]

Ah I see, so not so much the wifi/filtering an issue but the browser and remembered credentials? Is it an android based "OPS"?

[Opendium_Steve]

I've never seen any specific advice on unauthenticated access. The UK Safer Internet Centre says you should identify users - obviously it isn't always possible to follow the guidance, so we usually recommend doing a risk assessment for situations where you are deviating from the guidance. So, your risk assessment should cover:

- How you're deviating from the recommendations (i.e. interactive displays will have internet access with no user identification).

- The reason why you're deviating from the recommendations.

- What risks are created by the deviation.

- What you're doing to mitigate the risks.

- What risks are remaining following the mitigation.

- Why you consider the remaining risks to be acceptable.

 

Your mitigations will probably include things like ensuring that the traffic has student-level filtering rather than staff-level, etc.

[mavhc]

What OS is the PC running?