{"id":1083,"date":"2019-11-01T13:10:35","date_gmt":"2019-11-01T13:10:35","guid":{"rendered":"http:\/\/wp.lancs.ac.uk\/subtext\/?p=1083"},"modified":"2019-12-16T18:48:24","modified_gmt":"2019-12-16T18:48:24","slug":"society-emails-get-nuked","status":"publish","type":"post","link":"http:\/\/wp.lancs.ac.uk\/subtext\/2019\/11\/01\/society-emails-get-nuked\/","title":{"rendered":"SOCIETY EMAILS GET ‘NUKED’"},"content":{"rendered":"
Everyone who uses Lancaster’s IT systems will have been briefed many times on the much-publicised phishing attack this summer that led to applicants’ data being stolen – for example, see:<\/span><\/div>\n
<\/div>\n
https:\/\/www.theregister.co.uk\/2019\/07\/23\/lancaster_university_data_breach\/<\/span><\/div>\n
<\/div>\n
For most local users, the changes to IT access since then have been a relatively minor inconvenience, though they’ve caused substantial increases in workload for staff who do still have access to relevant systems and data – basically we can’t all be as functional as we used to be, because we can’t stay secure that way. But for some student societies the problems are more significant – an anonymous correspondent submits the following (content redacted to remove all the swear words):<\/span><\/div>\n
<\/div>\n
*<\/span><\/div>\n
<\/div>\n
The uni decided, over the summer, that it’s too much of a data breach hazard for societies to have IT accounts. They decided this… because staff got phished. Clearly, staff getting phished and a data breach happening that way means society IT accounts are a problem. So what do they do? Do they make a sensible choice and enforce regular password changes for society accounts? Enforce more data protection training? Remind societies to be secure?<\/span><\/div>\n
<\/div>\n
No, they just decide to nuke society accounts. Nuke ’em entirely. Do they communicate this effectively? No they don’t.<\/span><\/div>\n
<\/div>\n
ISS were meant to get all this sorted before term started. Naturally, it wasn’t sorted in time, but for some reason they decided to not allow room bookings to be released to societies. LUSU front desk staff had to rescue societies by doing bookings for them. Any socs who wanted to have their meeting places on their freshers’ week advertising had only from the Monday of freshers’ week to go to LUSU and book rooms.<\/span><\/div>\n
<\/div>\n
Otherwise many many societies would have been handing out flyers that said ‘WE’RE THINGY SOC, WE LIKE THE THING… FIND US… SOMEWHERE. WE GUESS.’<\/span><\/div>\n
<\/div>\n
On top of this, the nuking of society accounts means that now, the only way to get any room bookings done is via the personal student accounts of any exec who’ve been verified as exec members. They now seemingly have to validate ALL student exec members EVERY YEAR… which will totally happen on time. And then de-validate them whenever execs change hands. Oh, that’ll be great, won’t it?<\/span><\/div>\n
<\/div>\n
On top of that, there’s zero policy in place for non-student exec. At all. Not one bit of thought about us. We are a thing. I’m doing an important activity-coordinating role and now I can’t access room bookings or the society’s email inbox at all – not even room bookings viewing access, so I can’t go ‘Hey, President, please book exactly these rooms at exactly these times’, unless I physically use one of them for access. Similarly, I can’t send emails as the society.<\/span><\/div>\n
<\/div>\n
Also, society web pages can be hosted on uni servers. Those are tied to the society account. Or were. We were told that ISS wouldn’t pull society accounts until they had a solution to this, and every time we ask anyone about it, they say ‘Oh, the unioncloud page?’ and we say ‘No, the society web page hosted on uni servers, this one’ and show them, and they say ‘Oh I dunno lol’.<\/span><\/div>\n
<\/div>\n
*<\/span><\/div>\n
<\/div>\n
This has happened, our correspondent suggests, because someone’s used ‘a sledgehammer to crack a walnut.’<\/span><\/div>\n
<\/div>\n

subtext sympathises with our correspondent but also sympathises with ISS, who found themselves all over the press this summer and facing external investigations left, right and centre. We trust that an amicable solution can be found.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Everyone who uses Lancaster’s IT systems will have been briefed many times on the much-publicised phishing attack this summer that led to applicants’ data being stolen – for example, see: https:\/\/www.theregister.co.uk\/2019\/07\/23\/lancaster_university_data_breach\/ For most local users, the changes to IT access … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":568,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[21],"tags":[30,528,247],"class_list":["post-1083","post","type-post","status-publish","format-standard","hentry","category-contributed-article","tag-iss","tag-issue-190","tag-societies"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p99sHo-ht","jetpack-related-posts":[{"id":1100,"url":"http:\/\/wp.lancs.ac.uk\/subtext\/2019\/11\/01\/subtext-190-get-subtext-done\/","url_meta":{"origin":1083,"position":0},"title":"subtext 190 – ‘get subtext done’","author":"Johnny Unger","date":"November 1 2019","format":false,"excerpt":"Every so often during term time. Letters, contributions, & comments: subtext-editors@lancaster.ac.uk Back issues & subscription details: http:\/\/wp.lancs.ac.uk\/subtext\/about\/ In this issue: editorial, sugar free, union council, apart-nope, sports, portrait, dundee, IP, emeritnews, ISS vs societies, pun corner, climate strike, letters. ***************************************************** EDITORIAL Anyone walking up the Spine on Monday at around\u2026","rel":"","context":"In "editorial"","block_context":{"text":"editorial","link":"http:\/\/wp.lancs.ac.uk\/subtext\/category\/editorial\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":528,"url":"http:\/\/wp.lancs.ac.uk\/subtext\/2018\/04\/26\/sufferin-succofash\/","url_meta":{"origin":1083,"position":1},"title":"SUFFERIN’ SUCCOFASH","author":"Johnny Unger","date":"April 26 2018","format":false,"excerpt":"In subtext 173, we reported on the activities of an unofficial far-right student society, which made its presence felt at a public lecture on the politics of fear by raising concerns about the ethnic makeup of Europe, advocating a white Christian Europe, alleging that Israel forcefully castrates immigrants and that\u2026","rel":"","context":"In "news"","block_context":{"text":"news","link":"http:\/\/wp.lancs.ac.uk\/subtext\/category\/news\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":542,"url":"http:\/\/wp.lancs.ac.uk\/subtext\/2018\/05\/10\/shart-attack-9\/","url_meta":{"origin":1083,"position":2},"title":"SHART ATTACK","author":"Johnny Unger","date":"May 10 2018","format":false,"excerpt":"FROM: Enoch Benito McAdolf, President, LuVE-U White Christian Preservation Society TO: Jacob Woolly, President, LuVE-U Student Experience Co-ordination Unit Dear Jacob, I would like to thank you for disregarding the absurd notion that I am trying to set up some kind of Nazi society. Advocating for the preservation of a\u2026","rel":"","context":"In "shart attack"","block_context":{"text":"shart attack","link":"http:\/\/wp.lancs.ac.uk\/subtext\/category\/shart-attack\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":405,"url":"http:\/\/wp.lancs.ac.uk\/subtext\/2018\/03\/01\/fascisnt\/","url_meta":{"origin":1083,"position":3},"title":"FASCISN\u2019T?","author":"Johnny Unger","date":"March 1 2018","format":false,"excerpt":"subtext's report on racist and antisemitic comments and questions at a public lecture (see subtext 173) seems to have hurt a few feelings (see letters, below). Isn't it amazing how quickly people who insist on their own right to express hateful opinions start throwing around words like 'libel' and 'slander'\u2026","rel":"","context":"In "news"","block_context":{"text":"news","link":"http:\/\/wp.lancs.ac.uk\/subtext\/category\/news\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":765,"url":"http:\/\/wp.lancs.ac.uk\/subtext\/2018\/10\/11\/oh-brother-where-art-thou\/","url_meta":{"origin":1083,"position":4},"title":"OH BROTHER WHERE ART THOU?","author":"Johnny Unger","date":"October 11 2018","format":false,"excerpt":"As usual, dozens of societies were out recruiting during Welcome Week. subtext's drone footage identified one group which, despite its long historic pedigree, we hadn't seen on campus before - not openly, anyway. Yes, if you're a 'man of good standing', you too can join the Freemasons! The City of\u2026","rel":"","context":"In "news"","block_context":{"text":"news","link":"http:\/\/wp.lancs.ac.uk\/subtext\/category\/news\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":358,"url":"http:\/\/wp.lancs.ac.uk\/subtext\/2018\/02\/15\/ten-minutes-to-discuss-your-own-enabling-act\/","url_meta":{"origin":1083,"position":5},"title":"TEN MINUTES TO DISCUSS YOUR OWN ENABLING ACT","author":"Johnny Unger","date":"February 15 2018","format":false,"excerpt":"While student wanna-be societies might be yearning for the return of an autocratic fascist state, the University\u2019s governance bodies seem to be doing a pretty good job of dismantling their own democratic structures. Next Wednesday's Senate papers suggest substantial changes to the University\u2019s statutes are on the agenda. These cover\u2026","rel":"","context":"In "news"","block_context":{"text":"news","link":"http:\/\/wp.lancs.ac.uk\/subtext\/category\/news\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_likes_enabled":true,"_links":{"self":[{"href":"http:\/\/wp.lancs.ac.uk\/subtext\/wp-json\/wp\/v2\/posts\/1083","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/wp.lancs.ac.uk\/subtext\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/wp.lancs.ac.uk\/subtext\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/wp.lancs.ac.uk\/subtext\/wp-json\/wp\/v2\/users\/568"}],"replies":[{"embeddable":true,"href":"http:\/\/wp.lancs.ac.uk\/subtext\/wp-json\/wp\/v2\/comments?post=1083"}],"version-history":[{"count":1,"href":"http:\/\/wp.lancs.ac.uk\/subtext\/wp-json\/wp\/v2\/posts\/1083\/revisions"}],"predecessor-version":[{"id":1085,"href":"http:\/\/wp.lancs.ac.uk\/subtext\/wp-json\/wp\/v2\/posts\/1083\/revisions\/1085"}],"wp:attachment":[{"href":"http:\/\/wp.lancs.ac.uk\/subtext\/wp-json\/wp\/v2\/media?parent=1083"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/wp.lancs.ac.uk\/subtext\/wp-json\/wp\/v2\/categories?post=1083"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/wp.lancs.ac.uk\/subtext\/wp-json\/wp\/v2\/tags?post=1083"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}