Print

Print


My guess is that the site will experience the /. effect once enough kids read the State News during morning lectures :)
-- 

Stephen Bogdanski           
Network Support
College of Veterinary Medicine
Michigan State University


>>> On 11/28/2007 at 10:29 AM, <[log in to unmask]> wrote:
> We have been in serious discussion about what practices are being used 
> on state-mail.com.  The site states that they do not store your 
> password, and we've had people check their cookies locally and found 
> nothing useful in them.
> 
> However, knowing that they make use of PHPSESSIONS would lead me to 
> believe that there could be session files laying around in the /tmp 
> directory on the state-mail.com server holding information in 
> plaintext.  Otherwise, how could all of this magic work.  Now, it is 
> likely that those sessions get torn down and the information properly 
> discarded (automatically, as it should).  But yes, the potential exists 
> for that server to get broken into leading to X, Y, and Z.  The 
> potential also exists that the sessions are done in memory, so there's 
> less worry there.
> 
> I don't see any huge problems with students wanting to use 
> state-mail.com, but I think its being touted about as this great 
> replacement when all it really is, is a web front-end to an IMAP client, 
> plus a few little extra bells and whistles.  Upon logging into 
> state-mail.com, it creates 3 IMAP connections.  Upon checking a message, 
> it creates another 3 IMAP connections.  And so on...
> 
> I went ahead and ran some "infoporn" since I know all of you on NAG love 
> that type of stuff.  I've compiled a list of unique logins for the past 
> month and they are as follows:
> 
> For the month of November (thus far) there have been approximately 1081 
> completely and totally unique NetIDs logging-in via state-mail.com
> 
> This is the breakdown of unique logins on a daily basis:
> 
> Wed, Nov 28th 2007  -  239 (as of 10:22am)
> Tue, Nov 27th 2007  -  523
> Mon, Nov 26th 2007  -  546
> Sun, Nov 25th 2007  -  86
> 
> Sat, Nov 24th 2007  -  66
> Fri, Nov 23rd 2007  -  57
> Thu, Nov 22nd 2007  -  60
> Wed, Nov 21st 2007  -  88
> Tue, Nov 20th 2007  -  111
> Mon, Nov 19th 2007  -  114
> Sun, Nov 18th 2007  -  89
> 
> Sat, Nov 17th 2007  -  72
> Fri, Nov 16th 2007  -  98
> Thu, Nov 15th 2007  -  101
> Wed, Nov 14th 2007  -  77
> Tue, Nov 13th 2007  -  94
> Mon, Nov 12th 2007  -  84
> Sun, Nov 11th 2007  -  58
> 
> Sat, Nov 10th 2007  -  40
> Fri, Nov  9th 2007  -  53
> Thu, Nov  8th 2007  -  74
> Wed, Nov  7th 2007  -  59
> Tue, Nov  6th 2007  -  41
> Mon, Nov  5th 2007  -  43
> Sun, Nov  4th 2007  -  27
> 
> Sat, Nov  3rd 2007  -  17
> Fri, Nov  2nd 2007  -  31
> Thu, Nov  1st 2007  -  29
> Wed, Oct 31st 2007  -  24
> Tue, Oct 30th 2007  -  15
> Mon, Oct 29th 2007  -  20
> Sun, Oct 28th 2007  -  12
> 
> These numbers, at this point are manageable by both our servers and 
> state-mail.com's server.  But with all newer connections onto 
> state-mail.com's server, it will be interesting to see how well it will 
> hold-up.  That's what everyone seems to be overlooking (well, everyone 
> who is publishing these articles at the State News).
> 
> Just some thoughts and info for now...
> 
> ../brm