Re: Degausser/Nature of Listserv

["Doty, Timothy T." <tdoty () MST EDU>]

This came up last not even two weeks ago. I've attached the "Gentle
Reminder" posting by Valerie Vogel that resulted as some people appear to
have missed it the first time around. If the cold call was from a vendor who
subscribes to the list, they perhaps need to be especially reminded.

 

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Valerie Vogel
Sent: Thursday, October 07, 2010 12:33 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Gentle Reminder: Posting to the list

 

It is a good time to remind everyone about list guidelines.

 

EDUCAUSE sponsors over 30 discussion groups. You can review the list at: <
<http://www.educause.edu/cg> http://www.educause.edu/cg>. Before posting;
there may be a focused list that will yield better response. Also, archives
of discussions are recorded there, and you may want to check to see if your
topic was recently discussed before you post to the list.

The constituent group program participation guidelines <
<http://www.educause.edu/892> http://www.educause.edu/892> on announcements,
endorsements, and promotions reads:

Announcements

Members may occasionally use Constituent and Discussion Groups for
announcements of noncommercial conferences, publications, and other
resources of general interest to other subscribers. The subject line should
clearly identify the topic of the message; the message body should be kept
short and should contain contact information for more details. The preferred
medium for announcements of conferences is the EDUCAUSE
<http://www.educause.edu/EventsCalendar/1011> Events Calendar.

Endorsements

Endorsements are acceptable if made in the context of a request for
information or sharing of an experience. When the endorsement comes from a
representative of a corporate member, any mention of company products or
services should be in the context of a reasonable answer to a question posed
by another subscriber and should not be blatantly commercial; such postings
should include the identifying signature of the person posting the message.

Promotional Messages and Advertising

EDUCAUSE Constituent and Discussion Groups are educational in nature and not
intended for promotional announcements, advertising, product-related press
releases, or other commercial use. Please note that unsolicited commercial
communications to constituent group participants as a result of postings to
a Constituent or Discussion list violate the promotional messages and
advertising provisions of these guidelines and may result in the loss of
access to the listserv in question.


More information about this Security Discussion list is available at <
<http://www.educause.edu/groups/security>
http://www.educause.edu/groups/security>. Please let me know if you have
ideas for making this list more responsive to your needs.

Thank you,

Valerie

_______________

Valerie M. Vogel

Program Associate

EDUCAUSE Cybersecurity Initiative

office: (202) 331-5374

e-mail:  <mailto:vvogel () educause edu> vvogel () educause edu 

 <http://www.educause.edu/cybersecurity>
http://www.educause.edu/cybersecurity

Follow HEISC on Twitter:  <http://twitter.com/HEISCouncil>
http://twitter.com/HEISCouncil

 

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Greg Schaffer
Sent: Friday, October 22, 2010 9:55 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Degausser/Nature of Listserv

 

My lack of appreciation had nothing to do with any assumed privacy (there
isn't).  I felt it just broke agreed on and mutually understood protocol.  I
don't believe a private list is necessary nor even a good idea.  Vendors who
serve higher ed (or desire to) should have the opportunity to be on this
list to provide feedback when requested and to listen to needs of higher ed.
But the primary target is the higher ed audience, and I believe I was pretty
clear that it was that audience I was soliciting input from.

 

I really don't believe anyone has any expectation of privacy on this list,
but just in case some do it's good to reiterate it again every now and then,
as you did.

 

Thanks,

Greg

 

Greg Schaffer, CISSP

Assistant Vice President

Network and Information Technology Security

Middle Tennessee State University

615 898-5753

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of David Escalante
Sent: Friday, October 22, 2010 9:38 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Degausser/Nature of Listserv

 

 

On Oct 21, 2010, at 5:05 PM, Greg Schaffer wrote:

 

On a side note, what wasn't appreciated was that a vendor apparently
monitoring this list cold called me about their degausser product, noticing
that I had mentioned a need "on line" (note this is the only place I have
inquired).  I thought there were list rules about such; I guess next time I
will need to clarify that I am looking for suggestions/recommendations from
higher ed peers, not vendors or resellers (sigh). 

 

 

Folks, everyone needs to be aware that anything sent to this list is
publicly archived on the Educause site.  That's right, all messages are
archived there by month with no credentials or list membership required to
access them.  Any vendor, hacker, etc. can scrape all our communications
with a little scripting work, or read them interactively online.

 

So regarding this list, anytime you write, "We are using vendor X," you are
providing the vendor with a searchable reference (or diss ;-) ).  Anytime
you post a job, outside recruiting companies can troll it.  Anytime you ask
for help on something like a product selection for a degausser, it is free
game for anyone on the Internet to read without breaking any rules that I'm
aware of.

 

If you don't like this, we need to let Educause know.  It's not clear to me
what role REN-ISAC might play as an alternative...I believe there was some
desire on that entity's part to push more general questions and material off
the non-public REN-ISAC lists and onto this open to the universe list.   I
understand that the Educause CIO list is similarly public, and the CIOs just
live with it.

 

My personal opinion is that a non-public list would be beneficial to the
higher ed security community.  But I am not the moderator, nor am I involved
in the maintenance of the list or the web site it's archived on in any way.
Just trying to get the facts out, since a number of subscribers don't seem
to be aware of the list's public archives.

--

David Escalante

Attachment: smime.p7s
Description: