[liberationtech] Concerns with new Stanford University security mandate

[Andrés Leopoldo Pacheco Sanfuentes]

This is quite relevant now that "BYOD" (Bring Your Own Device) is
becoming very popular in the business world:

"These requirements apply to all University-owned laptops, desktops,
smartphones and tablets ("devices"), personally-owned devices used on
the Stanford Network, and personally-owned devices that could be used
to access Protected Health Information (PHI) or other Restricted or
Prohibited Data."

Best Regards | Cordiales Saludos | Grato,

Andrés L. Pacheco Sanfuentes
<alps at acm.org>
+1 (817) 271-9619


On Sun, Jan 26, 2014 at 3:20 AM, Tomer Altman <taltman1 at stanford.edu> wrote:
> To Liberation Tech:
>
> Stanford is implementing a new security policy detailed here:
>
> http://ucomm.stanford.edu/computersecurity/
>
> I am personally very concerned about steps #2 and #3. BigFix is basically a back door managed by IBM that gives them and Stanford control over your device. The IDF tool effectively means that the Stanford administration can continuously search your personal laptop for any objectionable material.
>
> While there are some technical cases where one may be exempt from these new requirements, the way that it is being pushed out at Stanford is making people believe that they cannot use their cell phones or laptops on campus (i.e., connecting to the Internet, checking Stanford email, calendars, etc.) without agreeing to all of these requirements.
>
> I fully support Stanford improving security on their own computers and networks, but installing a backdoor and surveillance systems on personal laptops seems to cross a line for me. Especially in an institution devoted to open inquiry. Especially in light of the mass surveillance revelations this past year.
>
> I tried reaching out to the EFF, but did not receive any reply.
>
> I expressed by concern to the Stanford administration. They replied to a few of my emails, but it left me with more questions than answers.
>
> I am asking for advice from the community on whether this kind of encroachment has any precedents.
>
> I'm also curious to hear people's thoughts on this matter.
>
> Thank you in advance,
>
> ~Tomer Altman
>
> Biomedical Informatics
> Stanford
> --
> Liberationtech is public & archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change to digest, or change password by emailing moderator at companys at stanford.edu.