Re: Web reports site "Security" issues

Yishay Mor <y.mor-xaKI+XbQf9Vaa/[email protected]> Thu, 22 Jan 2004 17:09:14 +0000
Newsgroups gmane.education.weblabs.webreports.uedesign
Message-ID <[email protected]>
Very good point.

Maybe it can be set up so that you cannot register without choosing a 
school, and then a designated person from that school gets notified. 
Better yet - that school rep has to authorize the new member.

Also, we had a chat (with Richard, Celia, etc.) about concealing 
personal details. The conclusion is that all personal info, i.e., home 
page and image, should be exposed to members only. Actually, maybe only 
published reports should be publicly visible.

Jesper, I think we need to deal with the security issue ASAP, or else we 
might find ourselves in a very unpleasant situation.

best,

- Yishay

Ken Kahn wrote:

>I just had a conversation with the teacher I'm collaborating with and it
>seems the mother of one of the kid's I'm working with asked the school
>if they are sure that our web site is "secure". As I understand it the
>issue is that the kids are messaging other WebLabs kids but are we sure
>some non-kid and non-project member couldn't be communicating with them.
>
>I said how we monitor things but did say it would be better if they
>system automatically notified us when a new user is created.
>Alternatively us researchers could have a password that is needed to
>access the register new user page.
>
>The teacher was worried and I think we are being a bit sloppy given the
>extent to which parents are worried about such things.
>
>Best,
>
>-ken
>
>
>
>
>-------------------------------------------------------
>The SF.Net email is sponsored by EclipseCon 2004
>Premiere Conference on Open Tools Development and Integration
>See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
>http://www.eclipsecon.org/osdn
>_______________________________________________
>Webreports-uedesign mailing list
>Webreports-uedesign-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
>https://lists.sourceforge.net/lists/listinfo/webreports-uedesign
>
>  
>

-- 
**********************************************************************
Yishay Mor
	   http://ioewebserver.ioe.ac.uk/ioe/cms/get.asp?cid=4381&4381_0=7303
	   y.mor-xaKI+XbQf9Vaa/[email protected]  Ph +44(0)20 7612 6963 F +44(0)20 7612 6964 
	   AIM,Yahoo: yishaym; Jabber: yishaym-/[email protected]; ICQ: 179772099
	   
	   If this helped you, please take the time to rate the value of this post:
	   http://svcs.affero.net/rm.php?r=yishaym
**********************************************************************
celebrating 100 years of excellence in education 
		www.ioe.ac.uk/centenary




-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn