Re: myedu.com abuse

["Jacobson, Dick" <dick.jacobson () NDUS EDU>]

Right.  After saying they can share you info with advertisers, vendors, business partners and third party  providers, 
they say "We may also disclose Personally Identifiable Information when we believe release is appropriate to comply 
with the law or a court order; enforce or apply this Privacy Policy, our Site's Terms of Use or other agreements; or 
protect the rights, property or safety of the Site, its Users or others."  In other words, if it is not to their 
financial advantage, they require a court order. ;-)

Good luck.

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Roger A 
Safian
Sent: Thursday, August 04, 2011 2:06 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] myedu.com abuse

My assumption is they would say exactly what everyone says,  "Give us a court order and we'll be happy to comply with 
it".

> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv 
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Chet Langin
> Sent: Thursday, August 04, 2011 2:03 PM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: [SECURITY] myedu.com abuse
>
>
> All,
>
> One of our professors has received an abusive e-mail via myedu.com, 
> which is apparently a web site that allows students to rate professors 
> and classes.  It apparently works like this:  a student creates an 
> account on myedu.com and rates the professor/class.
> However, apparently the student can also use this myedu.com account to 
> write an e-mail which is then anonymously sent to the professor.  We 
> have the headers and traced the e-mail back to myedu.com from the 
> headers.  Before, I try to contact myedu.com, I was wondering if 
> anyone else has already done this and could give me an idea as to what 
> to expect.
>
>
> --
> Chet Langin, GCIA, GSEC
> SIUC Information Security Officer