SEARCH
  • [:en]Recent Posts[:af]Onlangse bydraes

  • [:en]Categories[:af]Kategorieë

  • [:en]Archives[:af]Argiewe

E-mail

[:en]Filesender – a secure service for sharing large files[:]

Tuesday, February 5th, 2019

[:en]

SANReN has implemented the latest version of Filesender, a web-based application that allows authenticated users to securely and easily send web-based large files to other users. 

Below are the guidelines for accessing the service and what values it adds to your day to day operations.

What problem does the service solve?

You need to send a file larger than a couple of megabytes to someone and the e-mail comes back: “attachment too big” or “mailbox too full”, that’s where FileSender comes in handy.

How do I use the service?

Upon logging in, you are presented with a user-friendly interface. You can set the file to be available for download for a certain period so that it automatically gets removed when the file reaches its expiry date. You have an option to drag and drop your file when uploading it to the application. You also have an option to get a link to the file after uploading it or send it to a recipient as an e-mail.

The service is integrated with the South African Identity Federation (https://safire.ac.za/), which provides a pool of institutions you can authenticate from to use the service. If your institution is not registered on SAFIRE as yet, you can log in with a social media account if you are from an eligible institution.

Where do I access the service?

You can access the service on https://filesender.sanren.ac.za

Drop us an e-mail on sysadmin@sanren.ac.za for any queries regarding the service.

[:]

[:en]Use of sun email for commercial purposes[:af]Gebruik van sun e-pos vir kommersiele aktiwiteite[:]

Tuesday, February 5th, 2019

[:en]

As staff and students of the University, we use our sun emails every day. But did you know that every year when you reactivate your account, you also agree to the Electronic Communication Policy? 

The ECP explains the acceptable and unacceptable use of the University’s electronic communication facilities, which include the internet and email. (read the full ECP policy here) According to the ECP, point 3.1.3: “The User shall be responsible for using the Facilities only for the purpose for which the User has been authorised.” 

IT facilities and resources are provided to advance the mission of the University. This includes learning, teaching, research, knowledge transfer, public outreach, the commercial activities of the University, or the administration necessary to support all of the above.

The email system is to be used for legitimate institutional purposes only, therefore the use of IT facilities for non-University commercial purposes, or for personal gain, is a violation of this policy.  You may not use the IT Facilities to advertise any trade, service or profession not endorsed by the University. 

Unfortunately, it’s come under our attention that some staff use their sun email address to distribute information regarding beauty products, Tupperware, etc. and acting as agent for the sale of these products. Any bulk unsolicited mail or commercial advertising of other businesses are not allowed on the University network.

If you need to send personal emails, rather consider getting a free email account, for example, Gmail. Separating your business and personal activities is also better security practice in the long run and will protect you and the University network. However, if you use your sun address for personal activities, keep in mind that the University owns any communication sent via email. If needed, University management has the right to access any material in your email or on your computer.  

[:af]

As personeel en studente van die Universiteit gebruik ons elke dag ons sun e-posadresse? Maar het jy geweet dat jy gevolglik ook onderhewig is aan die Elektroniese Kommunikasiebeleid? 

Die EKB verduidelik beide die aanvaarbare en onaanvaarbare gebruik van die Universiteit se elektroniese kommunikasiefasiliteite, insluitende internet en e-pos. (lees die volledige EKB hier) Volgens die EKB, punt 3.1.3: “Die Gebruiker word verantwoordelik gehou om die Fasiliteite slegs vir die doel waarvoor die Gebruiker gemagtig is, te gebruik.” 

IT-fasiliteite en bronne word verskaf met die doel om die Universiteit se missie te bevorder. Dit sluit leer, onderrig, navorsing, kennisoordrag, gemeenskapsinteraksie, die kommersiële aktiwiteite van die Universiteit en ook die administrasie wat benodig om hierdie missie te ondersteun. 

Die e-posstelsel moet slegs gebruik word vir wettige, institusionele doeleindes. Gevolglik is die gebruik van IT-fasiliteite vir nie-US kommersiële doeleindes of vir persoonlike gewin, ʼn oortreding van hierdie beleid. Jy mag nie IT-fasiliteite gebruik om enige handel te dryf of diens of beroep, wat nie deur die Universiteit ondersteun word nie, te adverteer nie.

Dit het egter onder ons aandag gebring dat enkele personeel hulle sun e-pos gebruik om inligting oor skoonheidsprodukte, Tupperware en ander items te versprei en ook optree as verkoopsagente vir hierdie produkte. Enige massa bemarking e-posse of kommersiële advertensies van ander besigheide word nie toegelaat op die Universiteit se netwerk nie.

Om jou persoonlike en besigheidsaktiwiteite te skei is op die lang duur ook ʼn beter sekuriteitspraktyk en sal jou en die Universiteit se netwerk beskerm. Ons stel dus voor dat jy eerder ʼn persoonlike e-posadres, byvoorbeeld Gmail, kry om jou persoonlike e-posse te stuur. Indien jy jou sun-adres steeds wil gebruik vir persoonlike doeleindes, hou in gedagte dat die Universiteit alle kommunikasie wat via e-pos gestuur word, besit. Indien nodig het die Universiteit se bestuur die reg om toegang te kry tot enige materiaal in jou e-pos of op jou rekenaar.

[:]

[:en]Phishing attempt: “SARS eFiling Letter notification”[:]

Thursday, January 31st, 2019

[:en]

An email with the subject “SARS eFiling Letter Notification” was sent from a staff email to staff and students on campus. The email asks you to click on a link to download your SARS documents (See example below)

This is not a legitimate SARS email, but a phishing attempt from a compromised sun email account.

SARS will never ask you to provide any personal information by means of email. By clicking on links and providing your information, you give criminals access to your personal information and your accounts.

If you clicked on the link in this phishing email, immediately change your password on www.sun.ac.za/password. For enquiries contact the IT Service Desk by logging a request or calling 808 4367. More information on phishing is available on our blog and Twitter.

Click for a larger version.

[:]

[:en]SARS phishing scam[:]

Wednesday, January 30th, 2019

[:en]

Please be on the lookout for the next phishing attack on the university network. This time (as occurred several times in 2018) it comes with a subject of “SARS eFiling Letter Notification”

This is an obvious phishing scam using a website to attempt to steal your login details.

  1. SARS will not send you an email with the salutation: “Dear Tax Payer”, they’ll address you personally.
  2. The sender is a compromised email address from an estate agent in Pretoria and not a SARS email address.
  3. The link takes you to a site that is not the SARS eFiling Server address.
  4. Apart from department admin who deals with SARS directly, university email addresses are not (and should not be) used for SARS communication.

Here is an example of the email that several of our observant colleagues and students have already reported:

Here is the phishing website that will attempt to steal your login details:

If you receive an email like this, please report it to IT Cyber Security as soon as possible.

Once you have reported the spam or phishing mail, you can delete it immediately. You can report this in two ways:

  1. By reporting it on the ICT Partner Portal. Go to https://servicedesk.sun.ac.za/jira/servicedesk/customer/portal/6/create/115. Fill in your information and add the email as an attachment. Your request will automatically be logged on the system.
  2. By sending an email. 
    1. Start up a new mail addressed to csirt@sun.ac.za.
    2. Use the Title “SPAM” (without quotes) in the Subject.
    3. With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the – New Mail.
    4. Send the mail.

[ARTICLE BY DAVID WILES]

[:]

[:en]Feedback on Office365 outage[:af]Terugvoer oor Microsoft-onderbreking[:]

Friday, January 25th, 2019

[:en]

On Thursday, 24 January, from 10:30 to 22:00 Outlook users across large parts of the world were left without email. A major outage affecting, among others, South Africa, South America and Europe was caused by a technical problem at one of Microsoft’s data centres in Europe. 

Subsequently, all Stellenbosch University staff could also not access their email. Connectivity to Microsoft Exchange was restored Thursday evening late and staff and students were able to access their emails again. For a full report from Microsoft on the incident, click here 

Keep in mind that cybercriminals could use incidents like these to launch attacks on email users. Neither Microsoft, not IT will ever ask you to reactivate your Microsoft account or divulge personal details.

Please take note that, in instances where email is unavailable, our Twitter feed will be used as the main communication channel and the latest updates will be posted on the feed. For any inquiries please contact the IT Service Desk at 021 808 4367 or log a request on the ICT Partner Portal.

[:af]

Weens ʼn onderbreking in die Microsoft Exchange diens Donderdag (24 Januarie) vanaf 10:30 tot 22:00 het personeel en studente geen toegang tot e-pos gehad nie. Die onderbreking is veroorsaak deur tegniese probleme by een van Microsoft se datasentrums in Europa en het, onder andere, Suid-Afrika, Europa en Suid-Amerika beïnvloed. Die verbinding tot Microsoft Exchange is Donderdagaand weer herstel en personeel en studente kon Vrydagoggend weer volledige toegang tot e-pos te hê. Vir `n volledige verslag oor die insident deur Microsoft, kliek hier

Hou in gedagte dat kuberkriminele hierdie tipe kan insidente misbruik om aanvalle loods teen e-posgebruikers. Nie IT of Microsoft sal jou ooit vra om jou Microsoft rekening per e-pos te heraktiveer of vra vir persoonlike inligting nie.

Neem asb. kennis dat Informasietegnologie in gevalle waar e-pos nie beskikbaar is nie ons Twitter-rekening sal gebruik as hoof-kommunikasiekanaal en dat die nuutste inligting op hierdie platform geplaas sal word.Vir enige navrae kontak asb. die IT Dienstoonbank by 021 808 4367 of meld ʼn versoek aan op die ICT Partner Portal.

[:]