Keeping Campus Information Secure
Humboldt State University's Information Security Team works with the campus community to secure system and network resources and to protect the confidentiality of student, faculty, and staff information.
The team collaborates with IT teams in the administration of account access control, establishment of policies, procedures and guidelines, and tracking, coordinating and mitigating responses to security incidents.
Heartbleed SSL Vulnerability
April 10, 2014
On Monday April 7th, the Internet community became aware of a security flaw in a very common technology used to secure communications between client computers and servers. The nature of this vulnerability means that, for many months, malicious attackers could have been capturing traffic that we all thought was well secured.
As soon as a patch was available (early Tuesday morning for most HSU systems), ITS staff patched all affected computers. We have requested replacement SSL certificates for all servers that handle usernames and passwords and expect to have those in place by the end of the day today. After this is done, we recommend all users of campus systems change their HSU password.
A spring cleaning password change for all your other online accounts this weekend would be a great idea - just keep in mind that you might get an email from one of your online services late next week urging you to change that password again because they just finished cleaning this up. This is likely to happen because many organizations are not publicly announcing their status in terms of addressing this vulnerability.
How to Protect Yourself
- Don't open files, click on links, or call phone numbers in unsolicited emails, text messages, IMs, Facebook postings, tweets, etc.
- Always verify the identity of anyone asking you for information, money, or access to your accounts, computer, etc.
- If you can't verify something is legitimate, mark it as spam, ignore it, delete it, or speak with the person who supposedly sent it.
- Never - ever - ever - reveal your password!!
Report crimes and criminal activity to the UPD at (707) 826-5555.
Report an Incident
By email (24/7): email@example.com
By phone (daytime): (707) 826-3815
By phone (after hours): (707) 826-5555 (University Police Department)
For non-urgent information security concerns, please click on the appropriate email address below to send a message to the information security team:
Physical safety issues, including cyberstalking and cyberbullying, should be reported to the HSU Police Department by calling 911 or 5555 from any campus phone.