Keeping Campus Information Secure
Humboldt State University's Information Security Team works with the campus community to secure system and network resources and to protect the confidentiality of student, faculty, and staff information.
The team collaborates with IT teams in the administration of account access control, establishment of policies, procedures and guidelines, and tracking, coordinating and mitigating responses to security incidents.
Heartbleed SSL Vulnerability
April 10, 2014
On Monday, April 7th the Internet community became aware of a security flaw in a very common technology used to secure communication between clients and servers. The nature of this bug means that for many months malicious attackers could have been capturing traffic that we all thought was well secured.
As soon as a patch was available (early Tuesday morning for most HSU systems) ITS staff patched all affected systems. We have requested replacement SSL certificates for all servers that handle usernames and passwords and expect to have those in place by the end of Thursday, April 10th. After this is done we suggest all users of campus systems change their HSU Username passwords.
For off campus accounts, we recommend that you change passwords you use as well. It's difficult to recommend timing, because a lot of organizations are not publicly announcing their status in terms of addressing this vulnerability. A spring cleaning password change this weekend would be a great idea, just keep in mind that you might get an email from one of your online service late next week urging you to change that password again because they just finished cleaning this up.
How to Protect Yourself
Don't open files, click on links, or call numbers in unsolicited emails, text messages, IMs, Facebook postings, tweets, etc.
Always verify the identity of anyone asking you for information, money, or access to your accounts, computer, etc.
If you can't verify something is legitimate, mark it as spam, ignore it, delete it, or speak with the person who supposedly sent it.
Never - ever - ever - reveal your password!!
Report crimes and criminal activity to the UPD at (707) 826-5555.
Report an Incident
By email (24/7): firstname.lastname@example.org
By phone (daytime): (707) 826-3815
By phone (after hours): (707) 826-5555 (University Police Department)
For non-urgent information security concerns, please click on the appropriate email address below to send a message to the information security team:
Physical safety issues, including cyberstalking and cyberbullying, should be reported to the HSU Police Department by calling 911 or 5555 from any campus phone.