Choosing a secure password

Posted on by Mike Nolan

IT Services will soon be deploying a new system for changing and resetting passwords which will be accompanied by updated guidelines for choosing secure passwords. This post outlines some of the thinking behind these new password guidelines and we welcome feedback.

Three steps to better passwords

  1. Size Matters – four random words is much better than 8 random characters
  2. Don’t use your Edge Hill password anywhere else
  3. Never share your password with anyone else or on a non-Edge Hill website

Let’s look at these recommendations in more detail.

Size Matters

When it comes to making passwords secure and hard to guess, the most important thing is that they are long. Historically, many websites and organisations have insisted on choosing a password containing a mixture of upper and lowercase letters, number and special characters but this just makes passwords that are hard to remember and hard to type.

It is much better to choose a longer password of four or more random words that someone wouldn’t be able to guess, even if they know you. This is better because there are more combinations of words to pick from in the English language (and you could choose a foreign or made up word!) than there are shorter passwords made up of letters, numbers and special characters.

This difference was summed up by the web comic xkcd several years ago:

There are many ways to pick some random words but one idea is to picture yourself sitting somewhere you know well – like your kitchen – and choose things you can visualise as you “look” from left to right… “toaster espresso saucepan stool”. Even if someone knew you’d based your password on things in your kitchen they’d still need to guess your combination of how you see things.

Don’t reuse passwords

After choosing really basic passwords like “password” or “letmein”, the most common cause of an account being broken into is reusing the same password in different places. This is because when a company is hacked and their list of passwords stolen, these will be used to break into other accounts either of the same person, or just trying them against any username.

For this reason you must never reuse your Edge Hill password for any other website or service. When you change your password you should also never reuse an old password, either directly or by changing it just a bit (don’t just add “1” to the end of the password!)

You can test your choice of password against lists of compromised passwords on the Have I Been Pwned website – this shows that “everton1!” has been seen over 30 times in breached websites.

Remembering a different (secure!) password for every website is very hard so you could make use of a password manager. This is a piece of software running on your computer and phone, or a web service, that will securely store all your passwords. You’ll only be able to access them after you’ve entered a master password.

Read more about password managers on the Which? website.

Never share your password

You are responsible for actions when logged in with your account so never share your password with anyone else.

It is against the University IT Acceptable Use Policy to share your password with anyone else. If you suspect someone else knows your password or you are issued with a temporary password by IT Services, you must change it straight away.

Staff in IT Services will never ask you for your current password so don’t tell anyone purporting to need it. If you need assistance, IT Services can either take remote control of your Edge Hill computer where you can enter passwords yourself or they will reset your password and issue a new temporary once they have finished.

You should only enter your username and password into websites you trust to belong to Edge Hill. Look in the address bar to ensure it’s a secure connection on an edgehill.ac.uk site. Be on the lookout for disguised phishing websites, for example:

https://login.edgehill.ac.uk.secure.phising-website.university/

Note the missing slash after edgehill.ac.uk which means it’s not our website. If you come across a phishing website or email do not enter your password and inform the IT Service Desk.

This is still very much work in progress so please leave any comments below.

[If this sounds familiar, it’s because this is basically what I’ve recommended for the last 7 years]

GOing… GOing…

Posted on by Mike Nolan

GO will be going this Summer, to be replaced by a new home for students and staff to access University systems and services and find information to support their studies or work. This series of blog posts will explain some of the changes that are coming…

Last time we looked at the history of GO as Edge Hill’s staff and student portal. While GO offered customisation, in the design of new student and staff homepages we are looking to offer a standard set of functionality to provide quick and easy access to the information and services that the majority of users need most frequently.

Our Google Analytics data shows that most users logging in go straight to key university systems and services like email, Learning Edge or access to files so these have the greatest visibility.

Some services are popular only at certain times of the year so it’s important to improve visibility of these links during those periods both to promote their use and to make them easier to find. Something like requesting a parking permit is going to have a flurry of activity this month, but quickly tail off and following the initial surge of requests, it’s okay for it to be discoverable through different routes.

Not everything can be a top level link and we need to provide access to the wide range of information and services used by staff and students less frequently.

We’re taking a few different approaches to this:

Navigation

We’ve categorised and grouped all the links to information and services we provide from these new homepages into a handful of broad headings like Living and Money Matters. These purposely don’t map directly to departments as often users don’t know (or care?) who provides a service, they just want to find something out or get something done. Each category might have its own top/popular/timely featured services which serves the purpose of highlighting the kind of information inside and providing quick access to commonly used systems.

Search

First up – “solving” website search is hard, like, really hard. I’ve been trying for the best part of ten years to make the best possible site search and it’s impossible to get it right for every search query from every user. There’s a reason Google have thousands of engineers working on the problem. We’re able to tap into some of that work and we currently use Google Site Search to power our website search engine. It works on a subset of their main search engine index meaning only public web pages can be included in the results making it useless for GO which was all behind a login but ideal for our new student and staff homepages where we link to public “gateway” pages rather than directly to the authenticated system. By using Plain English and adding metadata to pages we should be able to return relevant results (e.g. we need to return the page about Intercalation when a student has never heard that term types in take time off). It’s not going to be perfect and please let us know when you come across things you don’t expect!

Personalisation

Last time I talked about how the customisation features of GO have a very low adoption rate and introduce support challenges but with personalisation we’re taking a different approach. We’re looking at ways to supplement the default user experience with additional functionality tailored the users needs and usage patterns. For example if there is a particular service that a user accesses on a regular basis we might bump it up the list so it’s quicker to access. If a user is already logged in then we can provide students with links relevant to their course and staff links appropriate to their role and department. Unlike the customisation features in GO, this won’t require the user to do anything extra and it should supplement default content making support easier. We have a few technical challenges to overcome before we can push some of this functionality out, but it’s coming Real Soon Now.

 

GOing…

Posted on by Mike Nolan

GO will be going this Summer, to be replaced by a new home for students and staff to access University systems and services and find information to support their studies or work. This series of blog posts will explain some of the changes that are coming…

GO has been Edge Hill’s staff and student portal for a long time: the current version can trace its routes back 10 years. In that time it’s had over 100 million views and used for a total of 290 years.

The initial launch of GO was the first time we had a single point of access to a range of services for students such as the VLE, email and module re-enrolments, plus links to support and information.

The platform introduced single sign on for many services meaning you could log in once and be signed into a range of systems without having to reenter usernames and passwords. Before GO users would often have to remember different passwords for each system.

While GO has served us well, we perhaps haven’t given it as much TLC as we would have liked over the last couple of years and it hasn’t kept up to date with the latest technology and ways people access services online.

While the main Edge Hill website has a responsive design – it adapts to show well on mobile phones and tablets as well as desktop computers – GO’s main interface does not which means a non-optimal experience for the fifth of users accessing from a phone. The main site sees over a third of visitors from a mobile device so there is potential for growth if we improve the user experience.

When GO launched there was a trend towards providing users with the ability to customise their user experience. We followed the example of sites like iGoogle and Netvibes in pulling in widgets from both our own services and third party sites and presenting them in a single dashboard. These could be added and removed, and the whole page customised to suit the user.

There were two main problems with this approach. Firstly, it is difficult for staff supporting students to know where to find information as it’s not necessarily in the same place, or may have been removed entirely. Secondly the adoption rate of customisation features was very low, and while it was welcomed by a small proportion of users, it didn’t garner enough use to justify significant further development.

Ten years is a long time in IT and a number of the underlying systems that power GO are a little long in the tooth and approaching the end of their life, with better alternatives available.

Next time we’ll be looking at some of the thinking behind the development our new student and staff homepages.

How to request support?

Posted on by Steve Daniels

In Web Services we get a lot of support requests,  these range from bug reports, feature requests and job requests to our fans hounding us for signed autographs.  Your first point of contact with us is by emailing the IT Service Desk from Outlook or by calling #7444.  This is your time to shine!  Without clear succinct communication it makes it difficult to deliver efficient support and allocate resources.  Don’t forget, whilst you might have one issue, we’re currently dealing with tens of them, and have recently dealt with hundreds (out of tens of thousands that IT Services deal with), we can’t remember everything.

  • Report one issue at a time.  This allows the issues to be prioritised individually and multiple team members can work on them at once.  It also gives the best clarity in tracking the issue.
  • Writing a clear email subject.  This is crucial.
    Good: Image on homepage is broken
    Bad: broken
    Good: Multiple login failures on GO leads to white screen
    Bad: login not working
  • Begin with summary.  Open with a quick summary of the problem.
  • Include web links.  This one thing is almost the most important, and crucial component for us, yet is often left out leaving us to guess or have to wait chasing replies.  We’re a team dealing with thousands of web pages, we don’t always know what you’re talking about.
  • Username. Another very important detail when reporting an issue, regarding a user or users, is always to include their username(s).
  • Include screenshots.  A picture paints a thousand words, try and include full screenshots.   You can do this by pressing the “Print Screen” button next to “Scroll Lock” and then pasting (right click-> paste, or CTRL+V) into the email.
  • Full steps to reproduce the problem.  If we can’t reproduce the problem you are having, it’s very hard for us to fix it.  Help us to help you.
  • Case numbers.  If you are chasing up an issue (or a case as we often refer to them), then please, please, put that case number in the email subject.  This automagically links it with all the information about your case.  It makes our job a million times easier, no joke.  The easiest thing to do is find the email that the IT Service Desk gave you and reply to that.
    Referring to colleagues case?  Include the case number in your message!

If you work with a member of our team often, you might think it’d be better to email them directly with your request.  Don’t.  It interrupts our work in progress making it take many times longer, which prevents us from finishing it and helping you.  It also circumvents our tracking systems, so we can’t see if your issue is important and needs fixing quickly.  Having issues come in to a central place allows us to see trends and spot failures faster.  What if someone is too busy or off ill with no out of office on?  Well your issue might well remain unresolved for a very long time.

Keeping all support requests coming through the IT Service Desk allows us to work as a team, see big problems occurring and find the right information at the right time.

All this helps us to work more efficiently 🙂

Thank you for reading this far!!!

 

Steve

Hiring a Web Developer

Web developer skills word cloud on a tablet.
Posted on by Steve Daniels

We are hiring a Web Developer.

Deadline is Sunday 26 June 2016.

Do you know the Web and PHP?  Apply now!

Now with those details out of the way, I’m trusting you’ve taken a glance at the Edge Hill Web Services Web Developer Job Description, note how much of the technical requirements that we’ve listed as desirable rather than essential. This means whilst it’d be great if you have experience in these areas, it’s certainly not required. If anything, it’s a preview of what we hope to introduce you to and support your career in.

What is essential is an aptitude for learning, when we say we want you to manage things, we mean manage yourself. You won’t be thrown in at the deep end.

Edge Hill University’s Web Services team is a GREAT team to work in, it’s so great that I’ve left, had an 18 month elsewhere, and then come back!  It’s such a beautiful campus!  We go to conferences across the country to network with colleagues in other institutions and the industry.

I saw a photo on Reddit about a note from an employer to a new employee…

Here's a note from your employer for your brand new job
Here’s a note from your employer for your brand new job – Original credit GDS

I’d say we seem to be that accommodating here.  If you’re unfamiliar with Reddit, take the comments on that site with a pinch of salt 😉

Great at Googling answers to problems?  Apply now!

If you’ve got this far, thank you, apply now, did I say that already?  If you know anyone who you think should join our team pass along the links to this blog, or the job.

Steve Daniels
Senior Web Developer
Web Services

Featured image

Brand new Street View imagery

Posted on by Mike Nolan

A few years ago we had a visit from the Google Street View trike and a year later the imagery was published. Quite a lot has changed on campus since then: the Hub, under construction in Autumn 2010 is now a hive of activity; BioSciences has had a growth spurt and (more than!) a lick of paint; and the entire Eastern Campus including Creative Edge, brand new halls and a lake (with a beach!) have sprung up from nowhere! So last summer we figured our Beautiful Campus could do with another visit from Google and booked them in for Freshers Week last September. The new imagery is now live on Google Maps so take a look around.

Here’s a few of my highlights but leave a comment if you find something interesting!

Eastern Campus Beach

Crossing the bridge

This time the man from Google came with a Street View Trekker instead of the trike so was able to get to even more places!

The new and the old

Sculptures

How many can you find?!

Down the stairs

Ducks!

Wouldn’t be Edge Hill without a few ducks!

Rain forest or rock garden?

Old imagery

The 2010 imagery hasn’t been completely replaced so there’s a few places where they visited originally that haven’t changed including this shot from behind the swimming pool.

Tech Events in the North West

Posted on by Mike Nolan

A colleague just asked me about BarCamps in the North West and I got a bit carried away in the reply, covering a whole host of tech activity happening in Liverpool and beyond. Here’s an edited version of my email:

  • BarCamp Blackpool is typically early summer so it’ll probably be in June or July and the couple I’ve been to have been very good events. Manchester ran last November so I’m guessing they won’t be doing another until the Autumn; Liverpool have tended to run a touch less frequently.
  • Ignite Liverpool – Short Pecha Kucha style presentations showcasing things people are passionate about. There was one of these last Thursday but they are pretty regular in Liverpool and may be some in other cities.
  • GeekUp – much smaller events – usually just a single talk followed by drinks/chat. Liverpool events tend to happen at the DoES Liverpool co-working space
  • DoES Liverpool – all sorts of events happen at their rooms in the Gostins buildings. Maker Night takes place in their workshop and I think they even have a sewing club.
  • TEDxLiverpool – independently organised versions of the TED events and the Liverpool/Manchester/Newcastle ones are very good (organised by Herb Kim). 15 speakers for £10 for students is a bargain.
  • Social Media Café Liverpool – another good, friendly event with more of a focus on social media but many of the topics are broader than that. Next event seems to be 29 May.
  • SWIG – Liverpool WordPress group is on hiatus at the moment but I’m hoping it will make a reappearance at some point.
  • OggCamp – a bit like BarCamps but slightly more geeky, if that’s possible! A few of them have happened in Liverpool but I’m not sure if they move around.
  • PHPNW – first Tuesday of the month in Manchester – seems to be more detail on Twitter (@phpnw) than their website. They also run an annual conference which is very good.

Many of the events are listed at http://bit.ly/livedigital which is maintained by Neil Morrin.

Week(s) Notes: 4 April 2014

Posted on by Mike Nolan

Okay, so I lied and we’ve been awful at keeping on top of the week notes but here goes with an overview of what we’ve been up to since last time.

  • Dozens of updates to our digital signage across campus.
  • One of the screens in the GeoSciences building now has Department of Geography specific content to welcome visitors through the door.
  • The Creative Edge video wall has featured a tribute to Stuart Hall plus hosted content
  • Set up an environment to internally host a web service from the Department of Computing, complete with git hooks for easy deployment.
  • Supporting promotion of the National Student Survey – if you’re a final year student it’s not too late to have your say!
  • A few maintenance updates to our PC Availability service and looking at some of the reporting work done last summer.
  • Discussions about the English & History website and how it will fit into our new WordPress theme.
  • Student (and some staff profiles) are now hosted in WordPress. While not actively linked to you can explore them all on the profile wall.
  • Profiles are also available via oEmbed allowing really easy reuse of content across sites. See how they look on the Law and Criminology student profiles page.
  • Undergraduate and Postgraduate subject pages are now in WordPress incorporating embedded videos (as a slider for Teacher Training and Health) and a profiles slider.
  • Completed the upgrade to FontAwesome 4.0.3 – a painful process when most references to the old icon- classes are trapped in serialized WordPress tables. Only made possible by the fantastic Search-Replace-DB by Interconnect/IT.
  • Added a widget area to our content page templates. These will allow the easy creation of sub homepages comprising rows of 1-4 widgets at the top of any given page.
  • The above designs are a prerequisite for moving large sites such as the Faculties of Education and Health & Social Care over to the new theme. This work has now begun in earnest!
  • Website updates and migrations for Admission, External Examiners, Inclusive Services and probably others I’ve forgotten.
  • Spring cleaning some of our older sites with a purge of old code that’s no longer used and tracking down the cause of various 500 errors that trigger alerts each time their URL is hit.
  • Learning Services moved to new theme (it’s a big, high traffic site so deserves a mention on its own).
  • The annual cloning and publishing of new course “presentations” has been completed with colleagues from Corporate Comms. 2015 is now live!
  • The homepage now features full width slides allowing us to better highlight Edge Hill’s stunning campus.
  • Improved the print stylesheet for our site.

Finally the raw stats:

  • JIRA – Created: 199; Resolved: 192
  • RMS – Created: 154; Cleared: 159

That’s all for this week term- we’ll try to be back next Friday with a regular amount of updates.

Week Notes: 7 February 2014

Posted on by Mike Nolan

We’ve been slacking with the Week Notes during January but now we’re back! Here’s what we’ve been up to in the last week.

  • Following its launch before Christmas, the University Homepage is getting further updates to increase the impact of the feature stories and allow better discovery of content in the “cards”.
  • Over the last month we’ve been frantically upgrading departmental sites – a fairly straightforward job for those on our old “Child of Twenty Twelve” theme but requiring more work for sites moving from our older Twenty Ten based theme. Hold tight if we’ve not got around to your site yet!
  • Profiles are dangerously close to being served up from WordPress – demonstration to colleagues next week will finalise what more needs to be done.
  • The video wall in Creative Edge won an award for our supplier PureAV. We now have a number of video sources hooked up to the screen and will be working with colleagues across the university to push even great content out through it.
  • JIRA – Created: 18; Resolved: 23
  • RMS – Created: 27; Cleared: 36

I’ll leave you with the latest game from UsVsTh3m: Which 8-bit computer are you?

I grew up in a BBC Model B house and the quiz got close saying I was a BBC Master – I think it was my Dad “organising Scout jumble sales” which gave it away!

Bonus Week Notes: 23 December

Posted on by Mike Nolan

It might be the last working day of the year for Web Services but we’ve pushed a few things live:

  • New mega menu navigation now contains a “social media” link.
  • Scroll indicator on the homepage to encourage discovery of all our great content.
  • The Study homepage is now powered by WordPress as is every page linked directly from it – we’ll be rolling out across Undergraduate and Postgraduate sites over the coming months ahead of a full review of our online prospectus.
  • We’ve made some minor improvements to the responsive site navigation. This is the main prerequisite for us switching other sites into the new theme which we’ll be doing early in the new year.

We’re now going to step away from the svn commit to avoid breaking anything else!

Have a great Christmas and a fantastic New Year!