Re: Communications about Heartbleed

[Peter Setlak <psetlak () COLGATE EDU>]

(disclaimer: not Canadian...)

We decided to stick true to our word and not send a mass email with a link
prompting users to change their passwords. Here is what we did.

1. Put a blog article out on April 8 signifying we patched our systems but
recommended users change their password if they had logged-in before 10PM
that evening...
2. Put second blog article and facebook post to the campus re-iterating
that we patched and recommending password changes for their personal
sites...
3. Campus email reiterating that we do not send emails asking to reset
passwords and pointed them to the blog article.



On Fri, Apr 11, 2014 at 2:57 PM, Christopher Jones <Christopher.Jones () ufv ca
> wrote:

>  I am curious to know how everyone is communicating the Heartbleed issue
> to their respective user communities.  I am particularly interested in what
> my fellow Canadian universities are saying.
>
>
>
> Christopher Jones
>
> IT Security Analyst
>
> University of the Fraser Valley
>
> Christopher.Jones () ufv ca



-- 
Thank you,

Peter J. Setlak
Network Security Analyst, GSEC, GLEG, GCPM
Colgate University
---
psetlak () colgate edu
(315) 228-7151
Case-Geyer 450

Colgate IT Security - http://colgate.edu/itsecurity

Think *Green!* Please consider the environment before printing this email.


*Engage with Colgate University: *
News blog <http://blogs.colgate.edu/>,
Twitter<https://twitter.com/#%21/colgateuniv>
, Facebook <https://www.facebook.com/colgateuniversity>,
Google+<https://plus.google.com/u/0/b/113333907606560373469/>
, Delicious <http://www.delicious.com/colgatenewsmakers>,
YouTube<http://www.youtube.com/cuatchannel13>
, Flickr <http://www.flickr.com/photos/colgateuniversity/>,
Pinterest<http://pinterest.com/colgateuniv/>
, LinkedIn <http://www.linkedin.com/company/colgate-university/>