Re: a question about having College ID number as part of directory information

[Roger A Safian <r-safian () NORTHWESTERN EDU>]

It doesn't sound to me like there is any great risk if it were exposed, but, as a matter of principal I think I would 
be inclined to restrict it's access to only those service where it was needed.

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Roy 
Galang
Sent: Thursday, November 7, 2013 8:27 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] a question about having College ID number as part of directory information

The concern that was associated with the query was that people use the physical ID to store "College Bucks" for dinning 
use and that somehow that could be compromised. It is also the username credial for many college system but so it your 
name. You can't access or change information with just your College ID number.

Roy

On Thu, Nov 7, 2013 at 9:17 AM, Roger A Safian <r-safian () northwestern edu<mailto:r-safian () northwestern edu>> 
wrote:
Does the ID number allow you to do anything?  For example, can I call the help desk and get my password reset by using 
the ID number?

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () 
LISTSERV EDUCAUSE EDU>] On Behalf Of Roy Galang
Sent: Thursday, November 7, 2013 7:58 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] a question about having College ID number as part of directory information

HI All,

This may have been addressed before but I am being asked if providing a college ID number on our LDAP and other 
directory services is a security risk.

I'm feeling that it isn't but I'm press to put a statement behind it that will put people at ease.

Thanks,

Roy Galang
________________________________
Roy Galang
Director Technology Infrastructure
Library and Information Systems
Wheaton College
26 E. Main Street
Norton, MA 02766

Galang_Roy () WheatonCollege edu<mailto:Galang_Roy () WheatonCollege edu>




--
________________________________
Roy Galang
Director Technology Infrastructure
Library and Information Systems
Wheaton College
26 E. Main Street
Norton, MA 02766

Galang_Roy () WheatonCollege edu<mailto:Galang_Roy () WheatonCollege edu>

from google