Educause Security Discussion mailing list archives
Re: Dropbox Sales/Legal messages
From: "Menne, Michael S" <michael.menne () MNSU EDU>
Date: Wed, 12 Aug 2020 20:55:48 +0000
They quit calling us a while ago. They wanted to sell us a bunch of licenses. Since all of our students use the same .edu domain for mail addresses, we asked them for a list of users. They refused citing intellectual property. We told them we wouldn’t license anything unless they provided us that list. Michael Menne, CISSP Chief Information Security Officer IT Solutions Information Security Minnesota State University, Mankato Phone: (507) 389-5705 www.mnsu.edu/its/security<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.mnsu.edu%2Fits%2Fsecurity&data=02%7C01%7Cmichael.menne%40mnsu.edu%7C00f2f1afdcf544ac511508d758826763%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637075189428878307&sdata=%2FUAwDG0vB%2BVztf92DOtb6gMc78WzZhdfsjAyBSKlbHU%3D&reserved=0> minnstate.zoom.us/j/5073895705<https://minnstate.zoom.us/j/8364614046> [signature_2008603909] Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Ronald Loneker <rloneker () STEU EDU> Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> Date: Wednesday, August 12, 2020 at 3:52 PM To: "SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU> Subject: Re: [SECURITY] Dropbox Sales/Legal messages Good Afternoon - I received one of these myself and emailed them about it asking how many free accounts they had from my institution. Never did get a reply to that one. We have other ways to share larger files, which I explained to them, again receiving no answer. Definitely a bad way to market or to make friends in the IT Department. Ron Loneker, Jr. Director, IT Special Projects Saint Elizabeth University Mahoney Library 2 Convent Road Morristown, NJ 07960 Phone: 973-290-4229<tel:973-290-4229> e-mail: rloneker () steu edu<mailto:rloneker () steu edu> On Wed, Aug 12, 2020 at 12:40 PM Theodore J. August <Theodore.August () salve edu<mailto:Theodore.August () salve edu>> wrote: Hi everyone: Have you, or someone else in your organization getting messages like these from Dropbox? Hi X, I'm hoping you can provide some clarity around X's unmanaged Dropbox deployment. Recent levels of activity across the X.edu domain are congruent with those of our education customers, but there is no existing contract between X and Dropbox at this time. Given that so many X users have workflows embedded in Dropbox (over 1000 as a matter of fact!), I wanted to put some time down to talk about your options for user/data consolidation. Do you have 15 minutes to discuss how our education platform can provide value and security in your current environment? Thanks so much and I look forward to hearing from you! And… Following up one last time since I hadn't heard from you. I know this is often an ideal time to purchase potential tools for your environment with the year coming to an end. Please let me know which most applies to you: 1. I am not the correct person to discuss this with. Please contact ____. 2. I am authorized to provide consent on behalf of X for the non-IT managed use of Dropbox. I am aware that people in my organization are using Dropbox without the presence of a formal Dropbox Business agreement and I have confirmed internally that this adoption aligns with our IT policies and data governance posture. 3. I would like more information before making a formal evaluation. Please set up a 15 minute call. We know people use Dropbox with their institutional e-mail addresses, despite the University’s lack of support for that product. Our response to the first one is that we have no interest in any services, and that Dropbox can contact end-users directly if they are violating any terms of service. We have no interest in purchasing services from Dropbox regardless of the number of accounts being used in our domain. I feel like #2. is some sort of informal legal indemnification for Dropbox for users on our domain, and I’m not willing to provide them one on behalf of our University. If Dropbox has some sort of issue with our users using free accounts, they can reach out to them directly and tell them so. We see these as a “legal” leaning sales pitch… they did come from someone who is working in enterprise sales… Thoughts? -- Ted August Assistant Director of Cybersecurity and Compliance Office of Information Technology Salve Regina University ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmichael.menne%40MNSU.EDU%7C5aa280068b9b4ab7ed4d08d83f0198ec%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637328623387466062&sdata=1Gaecfi2BHW1ldHftM%2FN03RV1KtpBt0vG%2B3FHblgdrg%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmichael.menne%40MNSU.EDU%7C5aa280068b9b4ab7ed4d08d83f0198ec%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637328623387466062&sdata=1Gaecfi2BHW1ldHftM%2FN03RV1KtpBt0vG%2B3FHblgdrg%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- Dropbox Sales/Legal messages Theodore J. August (Aug 12)
- Re: Dropbox Sales/Legal messages Dan Oachs (Aug 12)
- Re: Dropbox Sales/Legal messages Hagan, Sean (Aug 12)
- Re: Dropbox Sales/Legal messages Barton, Robert W. (Aug 12)
- Re: Dropbox Sales/Legal messages Jason Edelstein (Aug 12)
- Re: [EXTERNAL] Re: [SECURITY] Dropbox Sales/Legal messages Theodore J. August (Aug 12)
- Re: Dropbox Sales/Legal messages Barton, Robert W. (Aug 12)
- Re: Dropbox Sales/Legal messages Ronald Loneker (Aug 12)
- Re: Dropbox Sales/Legal messages Menne, Michael S (Aug 12)
- Re: Dropbox Sales/Legal messages Tanner, Andrea (Aug 13)
- Re: Dropbox Sales/Legal messages King, Ronald A. (Aug 13)
- Re: Dropbox Sales/Legal messages Madl, Michael (Aug 17)