Microsoft’s OneDrive file storage system has just been turned on for all staff, faculty, and students on the Middlebury campus and at MIIS. Now that our e-mail has successfully moved to the cloud, we turn next to Middfiles “home” folders. Don’t panic! You’re not in this alone — we’re here to help. To take advantage of the many benefits of cloud storage, you’ll want to begin by moving the contents of your “home” folder from Middfiles to OneDrive. (“Orgs” and “Classes” folders on Middfiles are staying put for now.) If you are already using cloud storage through Google, you may certainly use this service instead. Our goal is for all of you to complete the move of your Middfiles “home” folders to the cloud by the end of this year.
In the upcoming weeks ITS will be scheduling training for partners across the Midd community so we can work together to assist anyone who needs a hand with this exciting, new service. We will also provide documentation, online tutorials, and workshops designed to get you moving your files quickly and easily, using methods that work best for you. Watch your email for upcoming details.
Can’t wait to learn more – and perhaps give things a try? Take a look at http://go.middlebury.edu/onedrivehelp.
Follow the arrows, and find some time for yourself! Take a break from your studies for just one – quiet – moment. You’ll feel refreshed, we promise.
Just follow the arrow
The Unplug and Recharge Room will be available through November on the Upper Level of the Davis Family Library, but you may borrow meditation cushions all year long from the circulation desks at the Davis Family Library and the Armstrong Library.
Warning! Over the past couple of days Middlebury College has been the target of a well-crafted phishing campaign. Phishing messages are email messages designed to trick you into divulging your username and password. In this case, the phishing messages were written so that they looked like they were sent from Middlebury’s Department of Public Safety. An example of this phishing message is included below.
Middlebury’s email system was able to filter the vast majority of these phishing messages, delivering them into each recipient’s Spam Quarantines. Even with this protection, however, a few individuals released the messages from their quarantines, opened the messages, and clicked on the phishing links therein.
Always use caution with quarantined messages. The quarantine is specifically designed to protect you from phishing attacks crafted to trick you into divulging your Middlebury account username and password. If you have any questions about a quarantined message, contact the Help Desk or send a note to email@example.com. We would be glad to help.
Sample Phishing Message:
For more information on phishing please visit http://go.middlebury.edu/phish. For additional details about spam filtering and the spam quarantine, please review Spam Filtering at Middlebury.
Now available at the Davis Family Library for Middlebury students, faculty and staff! Make your own reservations for group studies and video viewing rooms. It’s easy to see pre-existing reservations, pick a time, and even cancel if necessary — all online.
View policies and make reservations at:
(The group studies on the upper level of the Davis Family Library remain available on a first-come, first-served basis.)
Self-service room scheduling is available as a pilot through January 2017. Please share your feedback: http://go.middlebury.edu/libsuggestions.
The libraries are pleased to support the Art and Science of Mindful Engagement during the Clifford Symposium and beyond. Dip into a few recommended books on display, let a podcast walk you through a guided meditation, and disconnect from daily stressors in the Unplug and Recharge Room. (Or, borrow meditation cushions from the Circulation Desk and use them anywhere in the library!)
All will be available during regular library hours now through mid-October.
Library Book Display (Davis Family Library): Recommendations from faculty, students, and staff for mindfulness and meditation readings. Browse and borrow whatever you like! Located on the main level of the Davis Family Library.
Guided Meditation Station (Davis Family Library): Pick a blue chair, put on the headphones, and hit “play.” A professional will walk you through a short guided meditation exercise. Try it and see how you feel afterward! Located on the main level of the Davis Family Library.
Unplug and Recharge Room (Davis Family Library): Take a break and disconnect from daily stressors. A secluded corner of the library will be screened off to create a temporary Unplug and Recharge Room with meditation cushions and soft lighting. Located on the upper level of the Davis Family Library.
Meditation Cushions (Davis Family Library and Armstrong Library): Thanks to the Scott Center for Spiritual and Religious Life, we are able to offer loaner meditation cushions for the whole school year. Check them out from the Circulation Desk, and use them anywhere in the library for 2 hours.
Library hours at http://go.middlebury.edu/hours.
It is important for each of us to be aware of the increasing security risks to our increasingly connected lives. From laptops and tablets to smartphones and wearable technology, and 24/7 access to our personal data, the risk of sensitive information being exposed is very real.
Travel with, save, or record ONLY the data that is necessary and essential. Always redact or remove unnecessary sensitive data. Always keep your data backed-up and encrypted, when possible.
Add a passcode to your cell phone, tablet, or laptop right now! iOS devices automatically encrypt your data once a passcode has been set. Android devices can encrypt your data with a few minor settings changes.
- Use Strong & Unique Passwords or Passphrases:
Especially for online banking and other important accounts.
- Use Multi-Factor Authentication when available:
Middlebury is introducing MFA for O365 and other services in 2016. Use MFA wherever possible.
- Check Your Social Media Settings:
Review your social media security and privacy settings frequently. Enable MFA whenever possible. Keep your social media accounts current or close them.
Stay informed about the latest technology trends and security issues such as malware and phishing. Visit http://go.middlebury.edu/infosec for more information. For targeted training visit: http://go.middlebury.edu/infoseced .
Contact ITS – Information Security at firstname.lastname@example.org to set up a training session for your department.
Did you know that most passwords are easily broken? A few “secrets” can help you make a stronger more memorable password.
- Longer is better – use at least 8 characters with upper and lower case, numbers and symbols.
- Create an easy-to-remember passphrase with four or more words substituting special characters for some of the letters.
- Use a unique password for each service or account.
- Change your password or passphrase regularly:
- Be sure you’re on the correct website before entering your password or passphrase
- Set a password for access to your mobile device
- Don’t include personal information such as usernames, account numbers, address or phone numbers in your password or passphrase.
- Don’t reuse the same password for multiple services
- Don’t use a single word, in any language
- Don’t use consecutive repeating characters or a number sequence
- Don’t share your password or passphrase – even with managers, co-workers or the Help Desk
- Don’t send your passwords through email
- Consider using a password safe or password manager such as LastPass, 1Password or Password Safe
- Visit http://go.middlebury.edu/password to reset your network password
- Configure passwords on all of your mobile devices
- Why never to provide your passwords through an email: http://www.phishing.org/
To help raise awareness about community efforts to prevent significant security issues, Middlebury Information Security has launched a ‘Security Scout of the Month’ award.
This month Information Security would like to recognize Amy Dale who promptly and accurately responded to potential malware activity by unplugging her computer and reaching out to the Help Desk for immediate assistance.
When asked, Amy shared this advice about computer security, “My previous work experience, particularly at AOL, helped prepare me to be more alert and aware of scams. A previous manager always said, “when in doubt, leave it out.” In other words, when you’re the least bit hesitant, then don’t open/click/download, etc. “
This astute awareness and keen insight is why Amy is this month’s ‘Security Scout of the Month’.
We are excited to celebrate the hard work and security conscious efforts of our community. Please watch for the next ‘Security Scout of the Month’ and help us recognize these efforts.
If you would like to recognize an individual for their information security contributions or would like to raise an information security concern, please contact email@example.com.
When you are reading e-mail or browsing online, be on the lookout for suspicious links and deceptive web pages, which are major sources of malware. Also be careful of downloadable files since they can introduce malware. And remember that additional browser plugins and unused applications require additional patching to remain secure. Here are some suggestions to make your day-to-day computing more productive, safe, and secure.
- Keep your software up-to-date. Be sure to install antivirus updates and regularly check for and install updates for any applications or browser plugins you may run on your computer. (e.g., Adobe Flash and Java)
- Be more secure! Don’t enter sensitive or personal information into a URL unless you have verified the address and you have ensured its security by checking that it includes HTTPS.
- When in doubt, ignore. Don’t click on pop-up windows or extraneous ads. And, don’t click on links in emails or web sites until you have verified their destinations by hovering your mouse over the link.
- Keep your private information safe. Use a strong, unique password or passphrase for each account, and avoid storing account information on a website. And consider using a digital password wallet such as 1Password or LastPass to secure your passwords.
- Segregate your browsing activities. Consider using separate browsers for sensitive logins and general web browsing.
- Use private networks for sensitive transactions. Avoid checking your bank account, making purchases, or logging in to other websites that include sensitive information when using public Wi-Fi.
Go stealth when browsing. Your browser can store quite a bit of information about your online activities, including cookies, cached pages, and history. To ensure the privacy of personal information online, limit access by going “incognito” and using the browser’s private mode.
With an increasing amount of storage space and institutional connectivity on personal devices, the value and mobility of smartphones, tablets, and laptops make them appealing and easy targets. These simple tips will help you protect against and prepare for the potential loss or theft of a laptop or mobile device.
- Don’t leave your device alone, even for a minute. If you’re not using it, lock your device in a cabinet or drawer, use a security cable, or take it with you. Middlebury has seen laptops stolen in the College library and from individual’s cars. Don’t assume your devices are safe because you feel at home with your surroundings.
- Report any lost or stolen device promptly. Both institutional and personal devices may contain Middlebury data. Even if you only lose a personal device, work with the College’s Information Security workgroup to ensure that institutional or sensitive data is accounted for. Information Security may also be able to help you recover the device. If a device is lost or stolen contact the helpdesk at x2200 immediately.
- Do not store extremely sensitive or internal data. Never store protected or sensitive data on your laptop. Refer to the Data Classification policy for clear definitions of data types. (http://go.middlebury.edu/dcp)
- Keep your master and working copy of all data on network storage. Keeping your master and working copies of all of your data on Middlebury Google Drive or other secure network file storage such as Middfiles. This ensures that your data is protected and backed-up if your laptop is stolen or lost. Photos, papers, research, and other files are irreplaceable, and losing them may be worse than losing your device.
- Record the serial number. Keep the serial number and asset tag of your device and store it in a safe place. This information can be useful for verifying your device if it’s found. This is especially important when you travel. Airport and police agencies may ask for this information when reporting lost or stolen devices.
- Enable device tracking and wiping services. Use tracking and recovery software included with most devices (e.g., the “Find iDevice” feature in iOS) Some software includes remote-wipe capabilities. This feature allows you to log on to an online account and delete all of the information on your laptop. Mobile resources can be found here:
- Apple iCloud: http://www.icloud.com
- Microsoft Account: http://account.Microsoft.com/devices
- Android Device Manager: https://support.google.com/accounts/topic/6160499?hl=e