Coming Soon... Updates to JasperNet Signon Page

Changes are coming to the JasperNet Single Signon (SSO) page.  The first thing that users will notice is a more streamlined design that will now include a preview of featured campus events as well as important notifications.  In addition to the new design, a number of underlying security enhancements will be included to help prevent "phishing" attempts and provide a more secure experience.

Updates will be rolled out gradually throughout the week of 10/12.  As a result, you may see both the old and the new login page while we transition JasperNet services from the old page to the new page.

If you've accessed any of our TEST environments since August,  you've already been using the new page!

Be on the lookout for additional announcements in the coming days!!

SSLv3 POODLE Vulnerability

 

October 14th, 2014, Google security researchers have disclosed a new vulnerability regarding the SSL protocol. Fortunately, this vulnerability only impacts the 1996 version of SSL, SSLv3.

What's SSL?

It is the standard security technology for an encrypted link between a web server and a web browser.

Browsers display a lock icon if communication is encrypted.

What's the POODLE vulnerability?

An attacker could exploit a seemingly encrypted link between a web server and a web browser such that the attacker could read private data.  For example, when passing username and password credentials to a web server.

More information:

http://googleonlinesecurity.blogspot.fr/2014/10/this-poodle-bites-exploiting-ssl-30.html

How can we fix this?

ITS will be disabling SSLv3. Be aware that web servers that the College does not own (e.g., example.com, yahoo.com, etc.), might be vulnerable.

What uses SSLv3?

Microsoft Internet Explorer 6.0, which is an unsupported version of Internet Explorer.