[tech] WebCT access now denied from wireless

[David Adam]

On Mon, 1 Oct 2007, Grahame Bowland wrote:
> Anyone using the proxy is also transmitting their password, likely
> their Pheme password, in the clear. The fact that there is one
> password that grants access to all student services without a
> thought-out plan to protect that password is a hard thing for UCC to
> fix. Is it really worth caring, other than to report the problems to
> ITS (or possibly higher up?)

I have no statistics to back this up, but I think this is less of an
issue. The SNAP configuration pages don't list the proxy (as you don't
need it when connected to the SNAP VPN), so I assumed that most people
will not be running their wireless laptops with the proxy set up.

Perhaps I should run some logging and see just how many people are using
the proxy.

UCC is never going to be able to totally protect users from password or
exposure. At some point, people take their own chances by accessing other
people's wireless, but if we can mitigate the big risks then I think we
should: WebCT is used regularly over our wireless (I do have evidence for
this).

David Adam
zanchey@