Expose:
SJSU Mass Email Failure
August 21, 2009 by Kyle BradyTags: Breach, Email, Privacy, Security, SJSU
As required by the FTC, a Full Disclosure is available - this piece adheres to the Code of Ethics
Alternative title: "How to Publicize 17,000 Private Email Addresses"
Earlier today, I received an email from "Tameka N. Harris" regarding parking permits at San Jose State University for the upcoming semester. It wouldn't have been an interesting email except for a minor detail:
There were 400 email addresses in the "To:" field, including mine.
Note that it was an actual email, instead of an anonymized message through the PeopleSoft-based system that hides any and all email addresses, usually used for such mass-communication.
After speaking with a friend, who had 700 separate and unique email addresses on his receipt, I discovered it's likely this was a mass email to the entire student body - over 17,000 people, all with email addresses exposed to each other.
I responded to the original, 400-person email in "Reply All" fashion, saying:
I would just like to point out to everyone on this list that Tameka N. Harris, the Almighty Beloved of SJSU Parking Services, has exposed your email address to the world, along with hundreds others, all because she couldn't figure out how to use the "BCC:" email property instead of "TO:".
That's how I'm able to email all of you.
Way to go, Tameka.
I intended, and tried, to email those on my friend's list, but Google prevented me from doing so, and accused me of spamming. Fair enough.
It's important to note just how unacceptable such a huge breach of student privacy this is, not to mention the gross administrative ignorance by both Tameka and SJSU - has she never used email before? "Irresponsible, outrageous, and unintelligent" only begins to describe the situation.
Her original email, which wasn't worth such a mass-mailing, is unedited as follows:
(note: the email has more color and formatting than Wordpress allowed me to copy-and-paste)
Please conserve: Think before you print this e-mail.
IMPORTANT PARKING NOTICE
BEWARE: Limited Parking and Heavy Traffic
During the first few weeks of instruction, traffic is unusually heavy and finding parking is difficult! Please plan accordingly and consider using SJSU Park & Ride or your VTA EcoPass for public transportation. Throughout the semester, the parking garages usually fill to capacity prior to 9:00 am and remain full past noon. UPD Officers provide traffic control during the beginning of each semester. It is important for the safety of everyone that you follow their directions!
THERE IS NO GRACE PERIOD
A valid parking permit is required at all times, including the first day of classes. Parking rules are enforced 24 hours a day/7 days a week. Possession of a permit does not guarantee a space in the main campus garages. Space is always available at the “Park & Ride Lot”. There is NO free parking on the Main Campus.
Avoid traffic and parking frustration…
Use SJSU PARK & RIDE LOT!
Only the “Park & Ride Lot” offers free parking the beginning of each semester (August 24- Sept 3, 2009).
Free parking is only available at the “Park & Ride Lot” August 24 – September 3, 2009. The “Park & Ride Lot” is located 8 blocks south of the main campus on South 7th Street at Humboldt Street across from Spartan Stadium. The parking rate is $4.00 per day (or $96.00 for a semester Park &
Ride Permit). ALL SJSU permits are valid in the “Park & Ride Lot”.
Free Park & Ride Shuttle service is available to campus Monday through Thursday. Free Shuttle Service begins at 6:30 am and runs every 10 minutes (depending on traffic) until 4:00 pm with stops at Park & Ride, Duncan Hall, MLK Library, Engineering Building and Business Tower. After 4:00 pm, Free Shuttle Service runs every 20 minutes until 10:20 pm with stops at Duncan Hall and Park & Ride only. Shuttle Service is not available Friday through Sunday.
All Park & Ride Permits are valid in all student areas on the main campus Friday through Sunday only.
.. No Additional Fees
.. No Lines – No Waiting
.. Print a temporary permit valid for 10 days
.. Fast delivery to your home without shipping and handling fees
A limited supply of Student Semester permits are available at the Student Services Center – Bursar’s Office located on the ground level of the North Garage(South 9th and East San Fernando Streets) (Cash or check ONLY). Please expect long waiting times during the first few weeks of school.
Student 1-day–a–week, 2-day-a-week and Park & Ride permits are available ONLY at the Parking Services’ Office located in the University Police Department (UPD) building at the South Garage (S. 7th and E. San Salvador Sts.) (Cash or Check ONLY)
Daily Permits: Pay stations are available on the 3rd floor and above in the North and South Garages and the 1st to 4th floors of the West Garage (E. San Salvador and S. 4th Streets).
Daily Rates:
Each ½ hour $1
Maximum Daily Rate $8
Maximum after 5:30 pm $5
Overnight parking $10 (Expires 8am next day)
THERE IS NO GRACE PERIOD
A permit is required at all times including the first day of classes. Parking rules are enforced 24 hours a day/7 days a week. Possession of a permit does not guarantee a space in the main campus garages. Space is always available at the Park & Ride Lot.
For more information or to review the Parking Rules and Regulations, visit our website: www.sjsu.edu/parking
(408) 924–6556
The latest SJSU Safety 101 Uniform Campus Crime and Security Report is available on–line at www.sjsu.edu/safetyreport. A pamphlet can be obtained at the University Police Department (call 408 924–2172 or visit the UPD web site at www.sjsu.edu/police for more information.
This issue follows on the heels of the "Beeson Debacle" from two and a half months ago (also at SJSU), which is about to be revived in the first issue of the Spartan Daily on Monday - 8/24/2009 - the first day of the Fall Semester.
Good timing, Tameka.
Kyle can be found on Twitter and MySpace, or reached via email.
