MMM Minutes 06/19/03

Minutes of Smathers
Middle Manager's Meeting
June 19, 2003

Present: Shelley Arlen, Robena Cornwell, Lori Driscoll, Carol Drum, John Ingram, Tom Minton, Betsy Simpson, Jan Swanbeck, Carol Turner, Carl Van Ness
Privacy Statement
  1. USA Patriot Act – Carol Turner will be sending the procedure out to all staff.
  2. It will be placed as a pop-up on all public computers. It will basically state that we will do as much as possible to protect your privacy, but we do have to comply with the law.
  3. The notification will pop up after the patron types in their UF ID. It will be set up so that you have to look at it.
  4. UF lawyers may want to add that the computers are only for authorized university use and must be in compliant with copyright laws.
Security Problem
  1. Someone hacked in and changed the homepage settings on public workstations to a porn site.
  2. The technique used is demonstrating vulnerability in Windows that has never before been reported.
  3. It has occurred on multiple workstations in West and AFA. We suspect it is the same person, as it always defaults to the same porn site.
  4. It is suspicious because this has never been written up. We think we have the vulnerability plugged, but the mechanism used to achieve this act could be applied to further mischievous endeavors.
  5. This problem has been ongoing for several days.
  6. Robena asks if this could be why none of her public Gateways will sign on. Neither IE nor Win2K will open on the desktop. It started Friday with one Gateway and now it is affecting all of the Gateways. Bill says this would not be caused by this attack and advises Robena to submit the problem to SYSHELP.
  1. SysRequest is up and running – it is an online application designed to replace the paper forms of hardware, software and programming requests.
  2. Each entry will be assigned a number and have a date stamp. Anyone can use it, but will require departmental chair approval.
  3. This will provide people with a way to track their request through the ordering process.
  4. Bill sent the URL for the application – all it takes to access is a Web browser and your user ID and password. It is not available to the general public.
  5. What about email notification to alert you when you have an order in the queue waiting to be approved? We are still working on the coding to make that happen and we’ll see if it is really necessary.
  6. In general, replacement equipment orders go through. New items have to be approved by the Directors (Barbara Oliver).
  7. Chairs might want to think about designating multiple approvers in case someone is out.
  8. Right now, only the requestor and approver can see the status of the request. If everyone agrees, we will open it up so everyone can see everything.

Back to the Systems Homepage

Last updated June 20, 2003
by Debra Fetzer