【IT担当者向け】POODLE SSLv3 ウェブ暗号化通信脆弱性への対策メモ

2014/11/12

IT担当者向けに備忘録メモをつけておきます。そのため、細かい説明は割愛し端的に説明します。脆弱性診断テストは必ずしも正しいとは限らない https://www.poodletest.com などについては、ブラウザがSSL v3を有効にしているか無効にしているかの判断しかしません。そのためSSL v3を有効にしつつ、他の手法で回避策を講じている場合、脆弱性があると診断されてしまう場合があります。 Internet Explorerについてインターネットオプションの詳細設定より、TLSのみONにしておいてください。 WindowsXPのInternet Explorer 6では、デフォルトでTLSがOFFになっているので、SSL v3のOFFだけでなく、TLSのONも必要です。 Mozilla Firefoxについてアドオンを使ってうまくいかないようなら、手動で設定を変更してみてください。 URLに「about:config」と入れて、設定を出し、「securty.tls.version.min」の値を「1」にし、TLSしか使わないようにします。なお次期Firefox 34でSSL v3は削除されます。 Google Chromeについて Chrome 40（開発版）では、SSL v3は削除されています。現在38が最新であり6週間に1度メジャーバージョンアップを出すサイクルのため、数カ月先には対...

[Notice]: Noise due to the projector replacement in Tonantei

2014/11/12

Dear all, The Office informs you about the replacement to new projector. Keep in mind that the noise will be made due to the project replacement during the following period. Please cooperate with us. Date: Nobember 12, 2014 10:00 — 18:00 Place: Tonantei in Inamori Center Operation: Replacement of the projector 5th November, 2014 Chief of Information Processing Office: Kitani.

[Attention]: Please enable 2-step verification for Dropbox users!

2014/10/14

Users, According to some internet news (*1), the hacker put the criminal declaration which hacked more than 7,000,000 Dropbox accounts on the web. Dropbox accounted “Dropbox wasn’t haced” in Official blog. *1 [Update] Hundreds of Dropbox passwords leaked online but Dropbox denies it was hacked (TNW Blog) At least, please consider to enable 2 step verification system for Dropbox! By this system, the Dropbox account will be locked not only the password but also the device or software registration system. Thus, your account can prevent from sign in unknown device or software. About how to enable it, please see the following web site. Have you enabled two-step verification? There are 2-step...Read More

(Local) Announcement of temporary suspension of network services

2014/10/12

Users. The electric power supply will be tentatively suspended in the following time. [Date]: October 12, 2014 13:00 — 16:00 (Sunday) [Area]: Inamori Center and Library. [Summary]: The electric power supply in the buildings in the area will be suspended. [Influence]: CSEAS HP and CSEAS E-mail won’t be influenced. * ARIS database (http://aris.cseas.kyoto-u.ac.jp) will be suspended. * Of course, the Desktop PC and the network won’t be used because the power supply will be suspended. I recommend to plug off the electric adapters in your PC, HUB, and other electric devices. 9th October, 2014: Chief of Information Processing Office: Kitani.

[Notice]: Please update “bash” shell command!!

2014/10/03

Dear all, The critical vulnerability was found out on “bash” shell. This “bash” is installed in Linux, MacOSX, Windows (with only Linux emulator, such as Cygwin) and so on. By this vulnerability, any commands are carried out by the attacker. Kyoto University alerted the issue (Only Japanese), [京都大学の情報 [学内限定]] 【追加情報】UNIXベースOSの基幹ソフトウェア「GNU bash」に重大な脆弱性 If you manage the Linux or MacOSX server using “bash”, please update it immediately!! And if you use Linux, MacOSX, or Windows with Linux emulator, please update “bash” program. Especially, in case of MacOSX (including the PC), please download and install the bash update in the following url. MacOS 10.9 “OS X bash Update 1.0 – OS X Mavericks“ MacOS...Read More

[Announcement] Google Hangouts service was released in the Center.

2014/09/04

Dear all, On 4th September, 2014, the Information processing office began to provide the Google Hangouts service to the CSEAS Account. Moreover, the Office provides the Google+ service for using the full functions of Google Hangouts. Please see about the detail information. 4th September, 2014 Information Processing Office

[Announcement]: How to cope with the frequent disconnection of PPTP connection for Wi-Fi in case of Tablet or SmartPhone.

2014/09/04

Dear all, When you’d like to connect your device to the Wi-Fi service in Kyoto University, you need to use the PPTP connection after connected to “MIAKO” wi-fi access point. However, the PPTP connection may be frequently disconnected due to the sleep setting in a Tablet or a Smartphone. Please see the following information if you want to avoid this issue. Section 1. Wi-Fi “MIAKO” in (HP of Information Processing Office in CSEAS) 4th September, 2014 Chief of Information Processing Office: Kitani.

[Local Service] Google Classroom service trial released!

2014/08/21

We began to provide the new service “Google Classroom” on 21st August, 2014. This is the service for the education to a classroom, so the teacher and the students will be able to do the communication, to use the report submission system, and the file sharing in the limited area. CSEAS faculties can use for the test purpose, but please pay attention that each classroom’s administrator is only CSEAS faculty. Please contact the information processing office if you are interning this service. 21st August, 2014 Chief of Information Processing Office: Kitani.

Announcement of the Wi-fi trouble at the Tonantei (Fixed)

2014/07/31

Users, The Wi-fi service had been suspended around the Tonantei in Inamori Center due to the Wi-Fi hardware trouble. We apologize for your inconvenience. Now, you can use the Wi-fi service. 31st July, 2014 Chief of Information Processing Office: Kitani.

Introduction of Free Antivirus for Mac

2014/07/28

Basically, Please use the Antivirus product in case of the company or organization. Because not only the organization but also you assume a responsibility for the information risks, such as the information leak. When you use the PC in the company or organization, please contact IT staff or department because you should check the information security policy. In case of the Center’s staff, please contact the information processing office before you use your PC in the Center. We have to consider that the security protection is needed to the staff’s PCs for Home use because they sometimes share the data between the business PCs and the private PCs. Of course,...Read More