On 2013-07-01 19:09, David Boyes wrote:
>>> A university would not.
>>
>> Why not?
> 
> Because: 
> 
> 1) Universities tend toward maximum freedom of usage, even if the "feature" 
> is actually hazardous. 

Not everywhere. Depending on the level of security you want. With the
new events of Prism and co being real and not more hidden, the chances
to lock some features down are really high.
We e.g. do propose to NOT upload any data to any internet service we
cannot control. Thats why we do run OpenAFS - we want a own cloud to be
reachable secure from everywhere.

> 2) If you disable something on a machine that you don't own, you're likely to 
> get all sorts of grief. Most machines in university environments are owned by 
> individuals. 

Hell, NO!
If foreign workstations to resist in our network, they are a BIG risk
for security. They do go into a seperate, closed down subnet. Really.

> 3) Somewhere in the process of getting a PhD, most faculty members seem to 
> have been given a golden God card that says they can do anything they want, 
> no matter how stupid. If you prevent them from using Skydrive, they will call 
> your manager, call the dean, and call everyone they can find to make your 
> life miserable. You won't like this. 

They get a own subnet without OpenAFS features. Really.

>>> An organization that is supporting Bring Your Own Device (BYOD) cannot.
>>
>> Is there a use case for roaming profiles in a BYOD environment?
> 
> Yes. Consider #2 above. How else would you handle it? Or devices with 
> no/minimal local storage. 

Blackberry setup?
Remote wipe, encrypted storage,... all fine builtinto android (and if
needed: Apple iOS).

> 
> Your last phrase encapsulates it neatly. "with an articulated security 
> stance" rarely = university. Universities block things they get sued about. 
> No further, unless you wish to experience #3 above. 


I do not know which university you do know and think about, but at least
in europe some do work different.


MfG,
Lars Schimmer
-- 
-------------------------------------------------------------
TU Graz, Institut für ComputerGraphik & WissensVisualisierung
Tel: +43 316 873-5405       E-Mail: [email protected]
Fax: +43 316 873-5402       PGP-Key-ID: 0x4A9B1723



Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to