Category Archives: Middlebury Community Interest

@MiddInfoSec Phishing Alert: don’t fall for “Payroll Benefits.” scam email

Be on the alert for a suspicious email purportedly sent with the subject line “Payroll Benefits.”. This is a confirmed phishing message, designed to trick you into divulging your username and password. Do not click on the links in the message or reply to the message. If you find a copy of the message in your inbox, please delete it. If you find a copy of this message in your spam quarantine, please ignore it and do not release it. The message will be deleted from your quarantine automatically in the next few days.

For more information about phishing attacks, please visit http://go.middlebury.edu/phishing. For more information about the spam quarantine, please visit http://go.middlebury.edu/spam.

Multi-Factor Authentication

What does Multi-Factor Authentication mean for me?

Perhaps, after reading ITS’ recent announcement about “Multi-Factor Authentication”, you might be wondering, just what does this have to do with me?

Multi-Factor Authentication is one of the simplest and most effective steps that you can take to protect your Middlebury account and we’ve taken every possible step to make Multi-Factor Authentication simple and convenient.

ITS is introducing Multi-Factor Authentication because it has become increasingly obvious that passwords alone are not enough to protect your Middlebury account from being compromised. Multi-Factor Authentication is a tool that you can use to protect your Middlebury account. Using Multi-Factor Authentication protects you and, by extension, helps to safeguard the entire Middlebury College community.

Multi-Factor Authentication introduces one additional step during the login process to help ensure that it is really you and not someone else who has your password. It works by requiring a verification by phone in addition to your password. Any phone will work, including your office phone, your home phone, a regular cell phone, or a smartphone (like an iPhone or Android phone). You can even substitute a tablet, like an iPad, for the phone.

Multi-Factor Authentication image from http://it.miami.edu/

This extra verification step is only required if you are off-campus, and you have the option to only be prompted for the extra challenge once every 30 days (per device). The extra verification currently protects your email and Office 365 services, though ITS plans to expand Multi-Factor Authentication to additional services in the future.

Remember: you will only be prompted for the extra verification step if you are off-campus.

So, if you are off-campus, and trying to access email or Office 365, you will have to enter your username and password, just like normal, and then you will have to respond to an extra security challenge, by either answering your phone, typing in a verification code sent to your phone via text message, tapping “verify” on a mobile app notification, or typing in a verification code sent to you via the mobile app.

This extra step means that, even if someone has your password, they can’t access your account. They would still need to have access to your phone, to answer that extra security challenge, before they could get in.

If you are ready to get started with Multi-Factor Authentication, here’s what to do next:

  1. If you run the Microsoft Office suite (Outlook, Word, Excel, etc..), then the first thing you need to do is upgrade to Office 2016. Multi-Factor Authentication does not work with Office 2010. Visit http://go.middlebury.edu/office2016 for details.
  2. Before you start the Multi-Factor Authentication enrollment process, you should decide how you want to be verified: Office phone, home phone, or mobile phone.
    • Phone call, text, or mobile app. If you are using a mobile phone, you can choose between receiving a phone call, a text message, or using the mobile app.
    • Mobile app with a notification or verification code. If you opt to use the mobile app, choose between receiving a notification that you respond to, or a verification code.
  3. Submit a request to have Multi-Factor Authentication enabled on your account at http://go.middlebury.edu/getmfa.
  4. Complete the Multi-Factor Authentication setup process.

Note that you will be asked to set up a primary and a backup contact method during the setup process, and you can choose between all of the options that you have configured.

The enrollment process only takes a couple of minutes to complete, but we do have to enable your account for Multi-Factor Authentication before you can get started. To request multi-factor authentication, please visit http://go.middlebury.edu/getmfa, and submit a help desk ticket.

For more information on Multi-Factor Authentication, including tips to help ensure a quick and easy enrollment and setup, please review the Multi-Factor Authentication wiki at http://go.middlebury.edu/mfa.

Please note: This post is inspired by an article written by Kelly Gremban, at Microsoft, entitled, “What does Azure Multi-Factor Authentication mean for me?” A link to the original article can be found below.

References:

What does Azure Multi-Factor Authentication mean for me?
Kelly Gremban, Microsoft, August 22nd, 2016
https://azure.microsoft.com/en-us/documentation/articles/multi-factor-authentication-end-user/ 

Multi-Factor Authentication image from http://it.miami.edu/

@MiddInfoSec – Phishing Alert: don’t fall for “EMPLOYEE PAYROLL.” scam email

Be on the alert for a suspicious email purportedly sent from “SENDER” with the subject line ” EMPLOYEE PAYROLL.”. This is a confirmed phishing message, designed to trick you into divulging your username and password. If you find a copy of this message in your spam quarantine, please ignore it. If you find a copy of the message in your inbox, please delete it. If you find this message in your spam quarantine, do not release it. It will be deleted automatically in the next few days. Do not click on the links in the message or reply to the message.

 

For more information about phishing attacks, please visit http://go.middlebury.edu/phishing.  For more information about the spam quarantine, please visit http://go.middlebury.edu/spam.

11012016-phish1

@MiddInfoSec – Phishing Alert: don’t fall for “RE: ALERT” scam email

Be on the alert for a suspicious email purportedly sent from “DSchlegel@nazarethasd.org” with the subject line “RE: ALERT”. This is a confirmed phishing message, designed to trick you into divulging your username and password. If you find a copy of this message in your spam quarantine, please ignore it. If you find a copy of the message in your inbox, please delete it. If you find this message in your spam quarantine, do not release it. It will be deleted automatically in the next few days. Do not click on the links in the message or reply to the message.

For more information about phishing attacks, please visit http://go.middlebury.edu/phishing.

For more information about the spam quarantine, please visit http://go.middlebury.edu/spam.

screenshot-2016-10-31-08-25-19

Notes for Extended Team Meeting: Panopto Training

Presenter: Rebecca Lessem, Director of Training

Training & support resources under training tab of homepage

    • Webinars (basic and advanced) plus Friday Q+A with Rebecca at noon eastern time

Overview of how recordings move through the Panopto system

  • All videos are “deeply searchable” via automatic speech recognition + OCR software
    • Special plugin to powerpoint makes slide text searchable, too!
    • Title, keywords, metadata
    • Searchability is only English language-based? (Petar)
      • Yes
      • For other languages, uploading captions is recommended for searchability.
  • Recording
    • You can record from any device (downloadable app)
    • Remote recorder functionality – start and stop times can be pre-set (not available for Macs, PC only)
    • You can also record outside of Panopto and upload to the platform
      • Will be processed and searchable the same as other videos
    • Quality of OCR? (Shel)
      • it depends – usually works well for printed text and/or stuff that’s on-screen for a while; handwriting is obviously trickier
    • Creators can add PDFs to their recordings as well as slides
  • Viewing Panopto content
    • Interactive web viewer
    • Accessible via any browser
    • Android and iOS apps
    • Display is automatically optimized for the device you are viewing from
    • Mp4, mp3, tablet, android, and iOS viewing formats are available for every recording made or uploaded to Panopto
    • Admins have brand customization options
    • Are there multiple quality versions for adaptive streaming, or just one encoding per device type? (Zach)
      • Panopto should adjust automatically as long as you are accessing via the web viewer; mobile apps have just one encoding each, but creators can specify

Roles in Panopto and their permissions (creator, viewer, administrator)

Folders

  • Course folder – shared with instructor and students
  • My folder – personal to every user
  • Assignment folder – allow for student recording
    • Everyone who is a viewer in the course would be able to record via this folder without technically being a creator
    • Can students easily download any videos they make for portfolio reasons? (Zach)
      • Yes – multiple output options can be selected and processed into a single mp4
  • Shared with me
    • Any content you’ve been added to
  • Bookmarked
  • Browse
  • Each folder has its own permissions which can be adjusted
    • Share – Google-esque options (specific people, organization wide, groups, public on the web, etc.)
      • Groups are not auto-synced from AD (too many); course groups synced on demand from the Hub, others must be (re-)created manually.
    • When you share a folder, you can assign read only, edit, or publish permissions
      • If enabled, “publisher” would have to give approval for content to become visible to viewers
  • Our folders are set up by Program -> Year -> Semester -> Course (Joe)
    • We could structure our Panopto folders to reflect this
  • Parent folder settings can be set to to apply to subfolders, or not
  • Is there a master file? (Petar)
    • Each file is a master file
      • A copy of a file would be it’s own master file and would have to be deleted/adjusted separately from the original

Panopto from the viewer perspective

  • Can adjust video speed
    • Fastforward
    • Slow motion
  • Can annotate videos
  • Can take notes
    • Private by default, can be adjusted
    • Notes can be taken in a group channel so everyone in the group can see/search each other’s notes
    • Saved as metadata so student can see/search later
    • Creator can delete notes
  • Can participate in discussion
    • Like a group chat, more public than notes
    • Saved as metadata so student can see/search later
    • Creator can delete discussions (if content is problematic or creator uses same video from semester to semester)
    • Cannot be exported, we can submit feature request

Canvas Integration

  • We don’t have it, but maybe we want it
  • When enabled, Panopto shows up as a tab in the course menu
    • Embedded, searchable Panopto iframe within Canvas
  • Instructor can make new recordings, adjust video settings, edit videos, share videos within Canvas via the integration
  • Panopto button will show up in Canvas rich text editor
    • Content can be directly embedded into discussions, assignments, etc
    • Recordings will live in Panopto
  • Permissions for Panopto files would carry over from semester to semester without having to copy the video. This can currently be done using the Course Hub.

Statistics

  • Counts live stream watching? (Petar)
    • Yes

Can a live webcast be embedded? (Mack)

  • When you prepare the link in advance, you can embed it, but it won’t show anything until the session begins.
    • Does it embed the live webcast or just the recording? Didn’t seem to work when we tested. (Mack)
      • Rebecca will follow up

ACTT Meetings ACTT In-progress Project Presentation for Web Conferencing Service

Tuesday, November 8, from 3-4pm
LIB 105A or Zoom room https://middpilot.zoom.us/j/846802386

The new ACT Team process includes in-progress project presentations. These presentations are meant to inform the community about how things are going, what has been done and what still needs to be done, what is going well and what are the challenges.

In this meeting we will talk about the Web Conferencing Service project.

  • Share what has been done, so far.
    • The results of the round-robin, what services were removed from consideration as a result
    • Current use of services under consideration.
  • Discuss what still needs to be done.

In-progress project presentations are open meetings, anyone may attend.

ACTT In-progress Project Presentation for Panopto Pilot

Tuesday, November 1, from 3-4pm
LIB 105A or Zoom room https://middpilot.zoom.us/j/846802386

The new ACT Team process includes in-progress project presentations. These presentations are meant to inform the community about how things are going, what has been done and what still needs to be done, what is going well and what are the challenges.

In this meeting we will talk about the video streaming service and the Panopto Pilot.

  • Review the training that occurred on 10/25
  • Share what has been done, so far.
  • Discuss what still needs to be done.

In-progress project presentations are open meetings, anyone may attend.