Educause Security Discussion mailing list archives
Photos with Instant Messaging/E-Mail
From: "Webb, Justin" <justin.webb () MARQUETTE EDU>
Date: Wed, 19 Jan 2011 19:55:49 +0000
Hi Everyone, I am curious to hear community thoughts on what would essentially amount to a photo directory of all Faculty/Staff at a University. Microsoft Lync allows the import of photos which are attached to an Active Directory account. So when that user IMs another person, or sends an email, their photo as well as name are attached. Additionally, your photo shows up in your list of contacts in Lync, which is essentially like AOL Instant Messenger. Type anyone's name in, and you see their current status, photo, and name/title (etc, etc). I see some potential security issues if this was University-wide. A disgruntled employee or student would more easily be able to target a particular person they were unhappy with, because their identity/likeness would be discoverable. Additionally, a system like this provides presence information - so, not only do you know what someone looks like, but you can tell if they are still at work, on the phone, busy, etc...This goes back to the Facebook type scenario, where you are updating your page constantly, and tipping off a robber that you are out of town for the weekend. How much information is too much? Would you only allow other Faculty/Staff to see employee photos, or would you be OK with students seeing them as well? Additional Thoughts? (and, obviously to avoid FERPA issues, photos would not be associated with student AD accounts) Thanks! Sincerely, Justin P. Webb, GCIH Security Analyst IT Services, Marquette University 414-288-4196 justin.webb () marquette edu<mailto:justin.webb () marquette edu>
Current thread:
- Photos with Instant Messaging/E-Mail Webb, Justin (Jan 19)