Information Technology News Archive

1996 - 2017

Autorun is a Security Risk

by

autorun

There is a feature in the Windows operating system, autorun, which on the face of it seems sensible and useful.  When you attach removable media (CD, DVD, USB key, etc.), Windows will look for a file with instructions on what to do with it, such as which program on the device to run.  This makes installation of software simple (insert the DVD, a screen comes up giving you a variety of options including “install”) and autorun can be used for other handy actions.

However, today autorun is being exploited by the makers of malware to put harmful software on your computer.  It is now considered prudent to disable this feature of Windows.  Microsoft has released security updates to all recent versions of Windows to enable end-users to turn it off, and has published a knowledgebase article with instructions how to install the security update and then disable autorun.  If the technical details get in the way, there is a one-button “Fixit” in the knowledgebase article which will download and run a wizard to turn autorun on or off for you.

 

iTunes U for UCI

by

Digital sign

UC Irvine uses Apple’s iTunes U to make podcasts readily available to faculty, staff, and students. Using iTunes U, you can access course content and university information from within iTunes.

To access UCI on iTunes U, you will need to have the latest version of iTunes installed on your Mac or PC computer. You can find UCI’s content in iTunes U by searching for “UC Irvine”, browsing Universities & Colleges, or using the direct link below.

If you have podcasts that you would like to include in UCI’s iTunes U site, you can apply to become a contributor. There are some technical requirements including needing an Apple ID and the Safari web browser (4.0.3 or later). In most cases, your school’s IT support team is available to assist you in using iTunes U.  OIT is also available to those who need advice or expertise beyond the experience of your local support staff. Detailed information is available at OIT’s page for iTunes U content providers.  More general information can be found on OIT’s iTunes U FAQ.

 

EEE Use for Winter 2011

by

Have you ever been curious to know how much EEE is being used across campus? Ever wondered just how many hits the website gets or how much data is transferred?

We’ve prepared a report summarizing EEE use for Winter 2011.

Here are a few highlights:

  • Over 3,000 evaluations were conducted
  • Nearly 30,000 class mail messages were sent
  • Up to 4.7 million hits were received in a single day
  • About 7.37 terabytes of data was transferred

Download the full EEE usage report for Winter 2011:

Download (pdf, 254KB)

For comparison, take a look at EEE usage over the full Fall 2009 – Summer 2010 Academic Year:

Download (pdf, 283KB)

For more info about EEE use, see About EEE — Reports & Statistics

Computer and Network Security Testing

by

Digital sign

Vulnerability Assessment is a valuable portion of an overall process to ensure the security of hosts on a network.   OIT provides software and services to the campus to assist with the vulnerability assessment process.

Usually done hand-in-hand with risk assessment (i.e., the potential loss to the University in the event of unauthorized access), vulnerability assessment at UCI can be applied to a single system or a group of related computers.  Items to check in such a vulnerability assessment include directory and file permissions, user account and password policies, and current operating system patches.

Some tools are available at no cost to interested individuals to download and employ such as Microsoft’s Baseline Security Analyzer.  Other tools require specialized expertise, such as McAfee Foundstone which OIT licenses.

In addition to scanning a computer internally for vulnerability, OIT can assess the security of a computer’s configuration from the point of view of the network and remote users. Items to check in a network based vulnerability assessment include installed and running services, and local firewall settings.

More information is available at the OIT Security Team’s Vulnerability Assessment page.

Digital Signage System

by

Digital sign

The Visix digital signage system was introduced with 5 displays in the Student Center  when it re-opened after the new construction in the Fall of 2007.  The displays were used to list event times and locations, advertise special events such as Wayzgoose and sales in the Bookstore, campus trivia, weather, and more.

Over the past 4 years, the system has grown to comprise 23 displays managed by a wide range of departments from across the campus, including the Visitor’s Center, Environmental Health and Safety, the Cross Cultural Center, Financial Aid, two Bus Shuttle stops, Social Ecology, Medical Education, Engineering, and the UCI Libraries.

All displays are coordinated by a centralized server located in the Student Affairs data center and managed by Student Affairs IT (SAIT), now part of OIT.  Departments create their content on SAIT’s server using a web-based system.  Content can be configured to launch at any desired date or time.  A “player” system owned by the department communicates with SAIT’s server to get content and timing information, and controls its local display.

The content creator determines how long each slide is shown, the order that slides will run, and its transition to the next slide.  The look and feel of the layout is also completely customized.   It is very easy to upload, configure, and manage content.  Technical staff typically does not need to be involved after the initial setup.

The Student Center is planning an expansion of the system to support small LCD displays located at each conference room with up-to-date details of meetings and events that are taking place at that time.   Our hope is that the digital signage system will continue to grow and provide current information in a visually appealing format to an ever-broader campus audience.

Interested departments are invited to consult with SAIT regarding the equipment, set-up, and licensing costs.