Re: [cisco-voip] Your Associated Webex Sites

[Anthony Holloway]

PSIRT contacted/raised.  I linked them to this thread.

On Mon, Sep 9, 2019 at 5:15 PM Brian Meade  wrote:

> Technically you can still be associated to multiple sites even with
> Control Hub such as having a Meeting Center and Event Center license.
>
> Most of it seems to be accounting for Site Administration use cases where
> your email address could exist across multiple organizations.
>
> This is an interesting thing along with how you found that each site you
> are Partner Admin for allows you to have a PMR on their site.  It's mainly
> just applicable to us Cisco partners.  I'd reach out to PSIRT about it and
> see what they think.
>
> I did test with Fiddler and that API request doesn't seem to be documented
> anywhere which is interesting.
>
> On Mon, Sep 9, 2019 at 1:21 PM Lelio Fulgenzi  wrote:
>
>> I think this is because in old site admin days, which still exist, your
>> userID / password combo is (can be) stored with the site itself. So, in
>> reality, you can have multiple (different) passwords.
>>
>> *-sent from mobile device-*
>>
>>
>> *Lelio Fulgenzi, B.A.* | Senior Analyst
>>
>> Computing and Communications Services | University of Guelph
>>
>> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
>> N1G 2W1
>>
>> 519-824-4120 Ext. 56354 <519-824-4120;56354> | le...@uoguelph.ca
>>
>>
>>
>> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>>
>>
>>
>> [image: University of Guelph Cornerstone with Improve Life tagline]
>>
>> On Sep 9, 2019, at 1:03 PM, Anthony Holloway <
>> avholloway+cisco-v...@gmail.com> wrote:
>>
>> I don't know Brian.  My work email is only associated to a single
>> password, not multiple.  Ask me for my password, and then show me my list
>> of sites.  Makes sense in my head.
>>
>> On Mon, Sep 9, 2019 at 9:59 AM Brian Meade  wrote:
>>
>>> This would be a big change most likely on the Webex side.  They can't
>>> authenticate until they know which site and manually entering site URL's is
>>> probably a no-go for end users.  A bit similar to Zoom's issue trying to
>>> focus more on faster join times/easier experience over security.
>>>
>>> On Mon, Sep 9, 2019 at 10:01 AM Anthony Holloway <
>>> avholloway+cisco-v...@gmail.com> wrote:
>>>
>>>> Exactly!  Ok, so now you are seeing what I am seeing.  Just imagine if
>>>> one were so inclined to use Fiddler to see what call the app was making to
>>>> the cloud, and then use that knowledge in a python script to automate the
>>>> scraping of this data.  Not that I did that.  Laughs in PSIRT.
>>>>
>>>> On Mon, Sep 9, 2019 at 8:56 AM Brian Meade  wrote:
>>>>
>>>>> I just did some testing here.  I'm also seeing some Control Hub-only
>>>>> customers in my list.  I'm set as a partner admin only for those accounts.
>>>>>
>>>>> On Mon, Sep 9, 2019 at 9:32 AM Matthew Loraditch <
>>>>> mloradi...@heliontechnologies.com> wrote:
>>>>>
>>>>>> Oh, Interesting. Everyone we have is on CI and Control Hub, so I
>>>>>> don’t see other sites.
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Matthew Loraditch​
>>>>>> Sr. Network Engineer
>>>>>> p: *443.541.1518* <443.541.1518>
>>>>>> w: *www.heliontechnologies.com* <http://www.heliontechnologies.com/>
>>>>>>  |  e: *mloradi...@heliontechnologies.com*
>>>>>> 
>>>>>> [image: Helion Technologies] <http://www.heliontechnologies.com/>
>>>>>> [image: Facebook] <https://facebook.com/heliontech>
>>>>>>  <https://twitter.com/heliontech>
>>>>>> 
>>>>>> <https://www.linkedin.com/company/helion-technologies>
>>>>>> *From:* Brian Meade 
>>>>>> *Sent:* Monday, September 9, 2019 9:25 AM
>>>>>> *To:* Matthew Loraditch 
>>>>>> *Cc:* Anthony Holloway ; Charles
>>>>>> Goldsmith ; Cisco VoIP Group 
>>>>>> *Subject:* Re: [cisco-voip] Your Associated Webex Sites
>>>>>>
>>>>>>
>>>>>>
>>>>>> I think the issue he's talking about is when logging in to something
>>>>>> such as the Webex Meetings App.  After entering your email address, you 
>>

Re: [cisco-voip] Your Associated Webex Sites

[Brian Meade]

Technically you can still be associated to multiple sites even with Control
Hub such as having a Meeting Center and Event Center license.

Most of it seems to be accounting for Site Administration use cases where
your email address could exist across multiple organizations.

This is an interesting thing along with how you found that each site you
are Partner Admin for allows you to have a PMR on their site.  It's mainly
just applicable to us Cisco partners.  I'd reach out to PSIRT about it and
see what they think.

I did test with Fiddler and that API request doesn't seem to be documented
anywhere which is interesting.

On Mon, Sep 9, 2019 at 1:21 PM Lelio Fulgenzi  wrote:

> I think this is because in old site admin days, which still exist, your
> userID / password combo is (can be) stored with the site itself. So, in
> reality, you can have multiple (different) passwords.
>
> *-sent from mobile device-*
>
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 <519-824-4120;56354> | le...@uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> [image: University of Guelph Cornerstone with Improve Life tagline]
>
> On Sep 9, 2019, at 1:03 PM, Anthony Holloway <
> avholloway+cisco-v...@gmail.com> wrote:
>
> I don't know Brian.  My work email is only associated to a single
> password, not multiple.  Ask me for my password, and then show me my list
> of sites.  Makes sense in my head.
>
> On Mon, Sep 9, 2019 at 9:59 AM Brian Meade  wrote:
>
>> This would be a big change most likely on the Webex side.  They can't
>> authenticate until they know which site and manually entering site URL's is
>> probably a no-go for end users.  A bit similar to Zoom's issue trying to
>> focus more on faster join times/easier experience over security.
>>
>> On Mon, Sep 9, 2019 at 10:01 AM Anthony Holloway <
>> avholloway+cisco-v...@gmail.com> wrote:
>>
>>> Exactly!  Ok, so now you are seeing what I am seeing.  Just imagine if
>>> one were so inclined to use Fiddler to see what call the app was making to
>>> the cloud, and then use that knowledge in a python script to automate the
>>> scraping of this data.  Not that I did that.  Laughs in PSIRT.
>>>
>>> On Mon, Sep 9, 2019 at 8:56 AM Brian Meade  wrote:
>>>
>>>> I just did some testing here.  I'm also seeing some Control Hub-only
>>>> customers in my list.  I'm set as a partner admin only for those accounts.
>>>>
>>>> On Mon, Sep 9, 2019 at 9:32 AM Matthew Loraditch <
>>>> mloradi...@heliontechnologies.com> wrote:
>>>>
>>>>> Oh, Interesting. Everyone we have is on CI and Control Hub, so I
>>>>> don’t see other sites.
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Matthew Loraditch​
>>>>> Sr. Network Engineer
>>>>> p: *443.541.1518* <443.541.1518>
>>>>> w: *www.heliontechnologies.com* <http://www.heliontechnologies.com/>
>>>>>  |  e: *mloradi...@heliontechnologies.com*
>>>>> 
>>>>> [image: Helion Technologies] <http://www.heliontechnologies.com/>
>>>>> [image: Facebook] <https://facebook.com/heliontech>
>>>>>  <https://twitter.com/heliontech>
>>>>> 
>>>>> <https://www.linkedin.com/company/helion-technologies>
>>>>> *From:* Brian Meade 
>>>>> *Sent:* Monday, September 9, 2019 9:25 AM
>>>>> *To:* Matthew Loraditch 
>>>>> *Cc:* Anthony Holloway ; Charles
>>>>> Goldsmith ; Cisco VoIP Group 
>>>>> *Subject:* Re: [cisco-voip] Your Associated Webex Sites
>>>>>
>>>>>
>>>>>
>>>>> I think the issue he's talking about is when logging in to something
>>>>> such as the Webex Meetings App.  After entering your email address, you 
>>>>> get
>>>>> a list of sites to choose from.  Technically you could enter anyone's 
>>>>> email
>>>>> address and see what Webex sites they have an account on.
>>>>>
>>>>>
>>>>>
>>>>> This mostly seems to be Site Admin sites since you can't have the same
>>>>> email in 2 different control hub organizations.
>>>>>
>>>>>
>>>>>
>>&

Re: [cisco-voip] Your Associated Webex Sites

[Lelio Fulgenzi]

FYI - Default SCCM (msiexec) install behaviour for desktop app _is_ to ask for 
URL.

This is different from default stand alone install, where it asks for your 
email address.

You need to use the hidden/unpublished switch with SCCM installs:EMAILSIGNIN=1

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Sep 9, 2019, at 11:00 AM, Brian Meade 
mailto:bmead...@vt.edu>> wrote:

This would be a big change most likely on the Webex side.  They can't 
authenticate until they know which site and manually entering site URL's is 
probably a no-go for end users.  A bit similar to Zoom's issue trying to focus 
more on faster join times/easier experience over security.

On Mon, Sep 9, 2019 at 10:01 AM Anthony Holloway 
mailto:avholloway%2bcisco-v...@gmail.com>> 
wrote:
Exactly!  Ok, so now you are seeing what I am seeing.  Just imagine if one were 
so inclined to use Fiddler to see what call the app was making to the cloud, 
and then use that knowledge in a python script to automate the scraping of this 
data.  Not that I did that.  Laughs in PSIRT.

On Mon, Sep 9, 2019 at 8:56 AM Brian Meade 
mailto:bmead...@vt.edu>> wrote:
I just did some testing here.  I'm also seeing some Control Hub-only customers 
in my list.  I'm set as a partner admin only for those accounts.

On Mon, Sep 9, 2019 at 9:32 AM Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>> 
wrote:
Oh, Interesting. Everyone we have is on CI and Control Hub, so I don’t see 
other sites.


Matthew Loraditch​
Sr. Network Engineer
p: 443.541.1518
w: www.heliontechnologies.com<http://www.heliontechnologies.com/>|  
e: mloradi...@heliontechnologies.com<mailto:mloradi...@heliontechnologies.com>
[Helion Technologies]<http://www.heliontechnologies.com/>
<https://facebook.com/heliontech>
[Twitter]<https://twitter.com/heliontech>
[LinkedIn]<https://www.linkedin.com/company/helion-technologies>
From: Brian Meade mailto:bmead...@vt.edu>>
Sent: Monday, September 9, 2019 9:25 AM
To: Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>>
Cc: Anthony Holloway 
mailto:avholloway%2bcisco-v...@gmail.com>>; 
Charles Goldsmith mailto:w...@woka.us>>; Cisco VoIP Group 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] Your Associated Webex Sites

I think the issue he's talking about is when logging in to something such as 
the Webex Meetings App.  After entering your email address, you get a list of 
sites to choose from.  Technically you could enter anyone's email address and 
see what Webex sites they have an account on.

This mostly seems to be Site Admin sites since you can't have the same email in 
2 different control hub organizations.

On Mon, Sep 9, 2019 at 8:15 AM Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>> 
wrote:
The only list I can think of is behind the sign in screen for webex admin and 
it only lists the accounts you have been given access to so I’m not sure how or 
why this would ever be a problem? It’s no different than looking at my deal 
list in CCW or say your accounting departments list of accounts? Unless I’m 
missing what you are thinking about?


Matthew Loraditch​
Sr. Network Engineer
p: 443.541.1518
w: www.heliontechnologies.com<http://www.heliontechnologies.com/>
 |
e: mloradi...@heliontechnologies.com<mailto:mloradi...@heliontechnologies.com>
[Helion Technologies]<http://www.heliontechnologies.com/>
[Facebook]<https://facebook.com/heliontech>
[Twitter]<https://twitter.com/heliontech>
[LinkedIn]<https://www.linkedin.com/company/helion-technologies>
From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Anthony Holloway
Sent: Monday, September 9, 2019 8:11 AM
To: Charles Goldsmith mailto:w...@woka.us>>
Cc: Cisco VoIP Group 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] Your Associated Webex Sites

Correct, mostly for Partners, since:

A) We have a higher quantity than end customers
B) The list of sites acts like a list of customers we do business with (past, 
current and future)
C) Lists off all end customer sites too (which, depending on how the site names 
are being used, could give insight into the business; E.g., divisions, project 
names, future name changes indicating: splits, mergers, re-branding, etc.

However, I would think it would apply to end customers themselves too.  Not 
only for option C above, but I can also see a situation where if two customer 
names were put side-by-side on the same list, t

Re: [cisco-voip] Your Associated Webex Sites

[Lelio Fulgenzi]

I think this is because in old site admin days, which still exist, your userID 
/ password combo is (can be) stored with the site itself. So, in reality, you 
can have multiple (different) passwords.

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Sep 9, 2019, at 1:03 PM, Anthony Holloway 
mailto:avholloway+cisco-v...@gmail.com>> wrote:

I don't know Brian.  My work email is only associated to a single password, not 
multiple.  Ask me for my password, and then show me my list of sites.  Makes 
sense in my head.

On Mon, Sep 9, 2019 at 9:59 AM Brian Meade 
mailto:bmead...@vt.edu>> wrote:
This would be a big change most likely on the Webex side.  They can't 
authenticate until they know which site and manually entering site URL's is 
probably a no-go for end users.  A bit similar to Zoom's issue trying to focus 
more on faster join times/easier experience over security.

On Mon, Sep 9, 2019 at 10:01 AM Anthony Holloway 
mailto:avholloway%2bcisco-v...@gmail.com>> 
wrote:
Exactly!  Ok, so now you are seeing what I am seeing.  Just imagine if one were 
so inclined to use Fiddler to see what call the app was making to the cloud, 
and then use that knowledge in a python script to automate the scraping of this 
data.  Not that I did that.  Laughs in PSIRT.

On Mon, Sep 9, 2019 at 8:56 AM Brian Meade 
mailto:bmead...@vt.edu>> wrote:
I just did some testing here.  I'm also seeing some Control Hub-only customers 
in my list.  I'm set as a partner admin only for those accounts.

On Mon, Sep 9, 2019 at 9:32 AM Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>> 
wrote:
Oh, Interesting. Everyone we have is on CI and Control Hub, so I don’t see 
other sites.


Matthew Loraditch​
Sr. Network Engineer
p: 443.541.1518
w: www.heliontechnologies.com<http://www.heliontechnologies.com/>|  
e: mloradi...@heliontechnologies.com<mailto:mloradi...@heliontechnologies.com>
[Helion Technologies]<http://www.heliontechnologies.com/>
[Facebook]<https://facebook.com/heliontech>
<https://twitter.com/heliontech>
<https://www.linkedin.com/company/helion-technologies>
From: Brian Meade mailto:bmead...@vt.edu>>
Sent: Monday, September 9, 2019 9:25 AM
To: Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>>
Cc: Anthony Holloway 
mailto:avholloway%2bcisco-v...@gmail.com>>; 
Charles Goldsmith mailto:w...@woka.us>>; Cisco VoIP Group 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] Your Associated Webex Sites

I think the issue he's talking about is when logging in to something such as 
the Webex Meetings App.  After entering your email address, you get a list of 
sites to choose from.  Technically you could enter anyone's email address and 
see what Webex sites they have an account on.

This mostly seems to be Site Admin sites since you can't have the same email in 
2 different control hub organizations.

On Mon, Sep 9, 2019 at 8:15 AM Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>> 
wrote:
The only list I can think of is behind the sign in screen for webex admin and 
it only lists the accounts you have been given access to so I’m not sure how or 
why this would ever be a problem? It’s no different than looking at my deal 
list in CCW or say your accounting departments list of accounts? Unless I’m 
missing what you are thinking about?


Matthew Loraditch​
Sr. Network Engineer
p: 443.541.1518
w: www.heliontechnologies.com<http://www.heliontechnologies.com/>
 |
e: mloradi...@heliontechnologies.com<mailto:mloradi...@heliontechnologies.com>
<http://www.heliontechnologies.com/>
[Facebook]<https://facebook.com/heliontech>
[Twitter]<https://twitter.com/heliontech>
<https://www.linkedin.com/company/helion-technologies>
From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Anthony Holloway
Sent: Monday, September 9, 2019 8:11 AM
To: Charles Goldsmith mailto:w...@woka.us>>
Cc: Cisco VoIP Group 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] Your Associated Webex Sites

Correct, mostly for Partners, since:

A) We have a higher quantity than end customers
B) The list of sites acts like a list of customers we do business with (past, 
current and future)
C) Lists off all end customer sites too (which, depending on how the site names 
are being used, could give insight into the business; E.g., divisions, project 
names, future name changes indicating: splits, mergers, re-branding, etc.

However, I 

Re: [cisco-voip] Your Associated Webex Sites

[Anthony Holloway]

I don't know Brian.  My work email is only associated to a single password,
not multiple.  Ask me for my password, and then show me my list of sites.
Makes sense in my head.

On Mon, Sep 9, 2019 at 9:59 AM Brian Meade  wrote:

> This would be a big change most likely on the Webex side.  They can't
> authenticate until they know which site and manually entering site URL's is
> probably a no-go for end users.  A bit similar to Zoom's issue trying to
> focus more on faster join times/easier experience over security.
>
> On Mon, Sep 9, 2019 at 10:01 AM Anthony Holloway <
> avholloway+cisco-v...@gmail.com> wrote:
>
>> Exactly!  Ok, so now you are seeing what I am seeing.  Just imagine if
>> one were so inclined to use Fiddler to see what call the app was making to
>> the cloud, and then use that knowledge in a python script to automate the
>> scraping of this data.  Not that I did that.  Laughs in PSIRT.
>>
>> On Mon, Sep 9, 2019 at 8:56 AM Brian Meade  wrote:
>>
>>> I just did some testing here.  I'm also seeing some Control Hub-only
>>> customers in my list.  I'm set as a partner admin only for those accounts.
>>>
>>> On Mon, Sep 9, 2019 at 9:32 AM Matthew Loraditch <
>>> mloradi...@heliontechnologies.com> wrote:
>>>
>>>> Oh, Interesting. Everyone we have is on CI and Control Hub, so I
>>>> don’t see other sites.
>>>>
>>>>
>>>>
>>>>
>>>> Matthew Loraditch​
>>>> Sr. Network Engineer
>>>> p: *443.541.1518* <443.541.1518>
>>>> w: *www.heliontechnologies.com* <http://www.heliontechnologies.com/>
>>>>  |  e: *mloradi...@heliontechnologies.com*
>>>> 
>>>> [image: Helion Technologies] <http://www.heliontechnologies.com/>
>>>> [image: Facebook] <https://facebook.com/heliontech>
>>>> [image: Twitter] <https://twitter.com/heliontech>
>>>> [image: LinkedIn]
>>>> <https://www.linkedin.com/company/helion-technologies>
>>>> *From:* Brian Meade 
>>>> *Sent:* Monday, September 9, 2019 9:25 AM
>>>> *To:* Matthew Loraditch 
>>>> *Cc:* Anthony Holloway ; Charles
>>>> Goldsmith ; Cisco VoIP Group 
>>>> *Subject:* Re: [cisco-voip] Your Associated Webex Sites
>>>>
>>>>
>>>>
>>>> I think the issue he's talking about is when logging in to something
>>>> such as the Webex Meetings App.  After entering your email address, you get
>>>> a list of sites to choose from.  Technically you could enter anyone's email
>>>> address and see what Webex sites they have an account on.
>>>>
>>>>
>>>>
>>>> This mostly seems to be Site Admin sites since you can't have the same
>>>> email in 2 different control hub organizations.
>>>>
>>>>
>>>>
>>>> On Mon, Sep 9, 2019 at 8:15 AM Matthew Loraditch <
>>>> mloradi...@heliontechnologies.com> wrote:
>>>>
>>>> The only list I can think of is behind the sign in screen for webex
>>>> admin and it only lists the accounts you have been given access to so I’m
>>>> not sure how or why this would ever be a problem? It’s no different than
>>>> looking at my deal list in CCW or say your accounting departments list of
>>>> accounts? Unless I’m missing what you are thinking about?
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> *Matthew Loraditch**​*
>>>>
>>>> *Sr. Network Engineer*
>>>>
>>>> p: *443.541.1518* <443.541.1518>
>>>>
>>>> w: *www.heliontechnologies.com* <http://www.heliontechnologies.com/>
>>>>
>>>>  |
>>>>
>>>> e: *mloradi...@heliontechnologies.com*
>>>> 
>>>>
>>>> [image: Helion Technologies] <http://www.heliontechnologies.com/>
>>>>
>>>> [image: Facebook] <https://facebook.com/heliontech>
>>>>
>>>> [image: Twitter] <https://twitter.com/heliontech>
>>>>
>>>> [image: LinkedIn]
>>>> <https://www.linkedin.com/company/helion-technologies>
>>>>
>>>> *From:* cisco-voip  *On Behalf Of 
>>>> *Anthony
>>>> Holloway
>>>> *Sent:* Monday, September 9, 2019 8:11 AM
>>>> *To:* Charles Goldsmith 
>>>> *Cc:* Cisco VoIP Group 
>>>> *Subject:* Re: [cisco-voip] Your Associated Webex Site

Re: [cisco-voip] Your Associated Webex Sites

[Brian Meade]

This would be a big change most likely on the Webex side.  They can't
authenticate until they know which site and manually entering site URL's is
probably a no-go for end users.  A bit similar to Zoom's issue trying to
focus more on faster join times/easier experience over security.

On Mon, Sep 9, 2019 at 10:01 AM Anthony Holloway <
avholloway+cisco-v...@gmail.com> wrote:

> Exactly!  Ok, so now you are seeing what I am seeing.  Just imagine if one
> were so inclined to use Fiddler to see what call the app was making to the
> cloud, and then use that knowledge in a python script to automate the
> scraping of this data.  Not that I did that.  Laughs in PSIRT.
>
> On Mon, Sep 9, 2019 at 8:56 AM Brian Meade  wrote:
>
>> I just did some testing here.  I'm also seeing some Control Hub-only
>> customers in my list.  I'm set as a partner admin only for those accounts.
>>
>> On Mon, Sep 9, 2019 at 9:32 AM Matthew Loraditch <
>> mloradi...@heliontechnologies.com> wrote:
>>
>>> Oh, Interesting. Everyone we have is on CI and Control Hub, so I
>>> don’t see other sites.
>>>
>>>
>>>
>>>
>>> Matthew Loraditch​
>>> Sr. Network Engineer
>>> p: *443.541.1518* <443.541.1518>
>>> w: *www.heliontechnologies.com* <http://www.heliontechnologies.com/>  |
>>> e: *mloradi...@heliontechnologies.com*
>>> 
>>> [image: Helion Technologies] <http://www.heliontechnologies.com/>
>>> [image: Facebook] <https://facebook.com/heliontech>
>>> [image: Twitter] <https://twitter.com/heliontech>
>>> [image: LinkedIn] <https://www.linkedin.com/company/helion-technologies>
>>> *From:* Brian Meade 
>>> *Sent:* Monday, September 9, 2019 9:25 AM
>>> *To:* Matthew Loraditch 
>>> *Cc:* Anthony Holloway ; Charles
>>> Goldsmith ; Cisco VoIP Group 
>>> *Subject:* Re: [cisco-voip] Your Associated Webex Sites
>>>
>>>
>>>
>>> I think the issue he's talking about is when logging in to something
>>> such as the Webex Meetings App.  After entering your email address, you get
>>> a list of sites to choose from.  Technically you could enter anyone's email
>>> address and see what Webex sites they have an account on.
>>>
>>>
>>>
>>> This mostly seems to be Site Admin sites since you can't have the same
>>> email in 2 different control hub organizations.
>>>
>>>
>>>
>>> On Mon, Sep 9, 2019 at 8:15 AM Matthew Loraditch <
>>> mloradi...@heliontechnologies.com> wrote:
>>>
>>> The only list I can think of is behind the sign in screen for webex
>>> admin and it only lists the accounts you have been given access to so I’m
>>> not sure how or why this would ever be a problem? It’s no different than
>>> looking at my deal list in CCW or say your accounting departments list of
>>> accounts? Unless I’m missing what you are thinking about?
>>>
>>>
>>>
>>>
>>>
>>> *Matthew Loraditch**​*
>>>
>>> *Sr. Network Engineer*
>>>
>>> p: *443.541.1518* <443.541.1518>
>>>
>>> w: *www.heliontechnologies.com* <http://www.heliontechnologies.com/>
>>>
>>>  |
>>>
>>> e: *mloradi...@heliontechnologies.com*
>>> 
>>>
>>> [image: Helion Technologies] <http://www.heliontechnologies.com/>
>>>
>>> [image: Facebook] <https://facebook.com/heliontech>
>>>
>>> [image: Twitter] <https://twitter.com/heliontech>
>>>
>>> [image: LinkedIn] <https://www.linkedin.com/company/helion-technologies>
>>>
>>> *From:* cisco-voip  *On Behalf Of 
>>> *Anthony
>>> Holloway
>>> *Sent:* Monday, September 9, 2019 8:11 AM
>>> *To:* Charles Goldsmith 
>>> *Cc:* Cisco VoIP Group 
>>> *Subject:* Re: [cisco-voip] Your Associated Webex Sites
>>>
>>>
>>>
>>> Correct, mostly for Partners, since:
>>>
>>>
>>>
>>> A) We have a higher quantity than end customers
>>>
>>> B) The list of sites acts like a list of customers we do business with
>>> (past, current and future)
>>>
>>> C) Lists off all end customer sites too (which, depending on how the
>>> site names are being used, could give insight into the business; E.g.,
>>> divisions, project names, future name changes indicating: splits, mergers,
>>> re-branding, etc.
>>>
>>>
>>&g

Re: [cisco-voip] Your Associated Webex Sites

[Anthony Holloway]

Exactly!  Ok, so now you are seeing what I am seeing.  Just imagine if one
were so inclined to use Fiddler to see what call the app was making to the
cloud, and then use that knowledge in a python script to automate the
scraping of this data.  Not that I did that.  Laughs in PSIRT.

On Mon, Sep 9, 2019 at 8:56 AM Brian Meade  wrote:

> I just did some testing here.  I'm also seeing some Control Hub-only
> customers in my list.  I'm set as a partner admin only for those accounts.
>
> On Mon, Sep 9, 2019 at 9:32 AM Matthew Loraditch <
> mloradi...@heliontechnologies.com> wrote:
>
>> Oh, Interesting. Everyone we have is on CI and Control Hub, so I
>> don’t see other sites.
>>
>>
>>
>>
>> Matthew Loraditch​
>> Sr. Network Engineer
>> p: *443.541.1518* <443.541.1518>
>> w: *www.heliontechnologies.com* <http://www.heliontechnologies.com/>  |
>> e: *mloradi...@heliontechnologies.com*
>> 
>> [image: Helion Technologies] <http://www.heliontechnologies.com/>
>> [image: Facebook] <https://facebook.com/heliontech>
>> [image: Twitter] <https://twitter.com/heliontech>
>> [image: LinkedIn] <https://www.linkedin.com/company/helion-technologies>
>> *From:* Brian Meade 
>> *Sent:* Monday, September 9, 2019 9:25 AM
>> *To:* Matthew Loraditch 
>> *Cc:* Anthony Holloway ; Charles
>> Goldsmith ; Cisco VoIP Group 
>> *Subject:* Re: [cisco-voip] Your Associated Webex Sites
>>
>>
>>
>> I think the issue he's talking about is when logging in to something such
>> as the Webex Meetings App.  After entering your email address, you get a
>> list of sites to choose from.  Technically you could enter anyone's email
>> address and see what Webex sites they have an account on.
>>
>>
>>
>> This mostly seems to be Site Admin sites since you can't have the same
>> email in 2 different control hub organizations.
>>
>>
>>
>> On Mon, Sep 9, 2019 at 8:15 AM Matthew Loraditch <
>> mloradi...@heliontechnologies.com> wrote:
>>
>> The only list I can think of is behind the sign in screen for webex admin
>> and it only lists the accounts you have been given access to so I’m not
>> sure how or why this would ever be a problem? It’s no different than
>> looking at my deal list in CCW or say your accounting departments list of
>> accounts? Unless I’m missing what you are thinking about?
>>
>>
>>
>>
>>
>> *Matthew Loraditch**​*
>>
>> *Sr. Network Engineer*
>>
>> p: *443.541.1518* <443.541.1518>
>>
>> w: *www.heliontechnologies.com* <http://www.heliontechnologies.com/>
>>
>>  |
>>
>> e: *mloradi...@heliontechnologies.com*
>> 
>>
>> [image: Helion Technologies] <http://www.heliontechnologies.com/>
>>
>> [image: Facebook] <https://facebook.com/heliontech>
>>
>> [image: Twitter] <https://twitter.com/heliontech>
>>
>> [image: LinkedIn] <https://www.linkedin.com/company/helion-technologies>
>>
>> *From:* cisco-voip  *On Behalf Of 
>> *Anthony
>> Holloway
>> *Sent:* Monday, September 9, 2019 8:11 AM
>> *To:* Charles Goldsmith 
>> *Cc:* Cisco VoIP Group 
>> *Subject:* Re: [cisco-voip] Your Associated Webex Sites
>>
>>
>>
>> Correct, mostly for Partners, since:
>>
>>
>>
>> A) We have a higher quantity than end customers
>>
>> B) The list of sites acts like a list of customers we do business with
>> (past, current and future)
>>
>> C) Lists off all end customer sites too (which, depending on how the site
>> names are being used, could give insight into the business; E.g.,
>> divisions, project names, future name changes indicating: splits, mergers,
>> re-branding, etc.
>>
>>
>>
>> However, I would think it would apply to end customers themselves too.
>> Not only for option C above, but I can also see a situation where if two
>> customer names were put side-by-side on the same list, that could cause an
>> issue.
>>
>>
>>
>> On Mon, Sep 9, 2019 at 1:04 AM Charles Goldsmith  wrote:
>>
>> Lelio, I think this mainly applies to partners, since we can see our
>> customer sites.
>>
>>
>>
>> Anthony, I don't think there is a public listing of your sites, not that
>> I've seen anyway.
>>
>>
>>
>> On Mon, Sep 9, 2019 at 12:07 AM Lelio Fulgenzi  wrote:
>>
>>
>>
>> I’m not quite sure I understand the question.
>>
>>
>>
>> Are

Re: [cisco-voip] Your Associated Webex Sites

[Anthony Holloway]

Well not exactly.  I can see all of my Control Hub/Common Identity sites
when I supply my email address to the App.

But yes, this is the the means by which I found out this problem exists,
and the catalyst for my question.  I didn't want to mention it right away,
just in case I was spreading malicious information about the internet.

On Mon, Sep 9, 2019 at 8:24 AM Brian Meade  wrote:

> I think the issue he's talking about is when logging in to something such
> as the Webex Meetings App.  After entering your email address, you get a
> list of sites to choose from.  Technically you could enter anyone's email
> address and see what Webex sites they have an account on.
>
> This mostly seems to be Site Admin sites since you can't have the same
> email in 2 different control hub organizations.
>
> On Mon, Sep 9, 2019 at 8:15 AM Matthew Loraditch <
> mloradi...@heliontechnologies.com> wrote:
>
>> The only list I can think of is behind the sign in screen for webex admin
>> and it only lists the accounts you have been given access to so I’m not
>> sure how or why this would ever be a problem? It’s no different than
>> looking at my deal list in CCW or say your accounting departments list of
>> accounts? Unless I’m missing what you are thinking about?
>>
>>
>>
>>
>> Matthew Loraditch​
>> Sr. Network Engineer
>> p: *443.541.1518* <443.541.1518>
>> w: *www.heliontechnologies.com* <http://www.heliontechnologies.com/>  |
>> e: *mloradi...@heliontechnologies.com*
>> 
>> [image: Helion Technologies] <http://www.heliontechnologies.com/>
>> [image: Facebook] <https://facebook.com/heliontech>
>> [image: Twitter] <https://twitter.com/heliontech>
>> [image: LinkedIn] <https://www.linkedin.com/company/helion-technologies>
>> *From:* cisco-voip  *On Behalf Of 
>> *Anthony
>> Holloway
>> *Sent:* Monday, September 9, 2019 8:11 AM
>> *To:* Charles Goldsmith 
>> *Cc:* Cisco VoIP Group 
>> *Subject:* Re: [cisco-voip] Your Associated Webex Sites
>>
>>
>>
>> Correct, mostly for Partners, since:
>>
>>
>>
>> A) We have a higher quantity than end customers
>>
>> B) The list of sites acts like a list of customers we do business with
>> (past, current and future)
>>
>> C) Lists off all end customer sites too (which, depending on how the site
>> names are being used, could give insight into the business; E.g.,
>> divisions, project names, future name changes indicating: splits, mergers,
>> re-branding, etc.
>>
>>
>>
>> However, I would think it would apply to end customers themselves too.
>> Not only for option C above, but I can also see a situation where if two
>> customer names were put side-by-side on the same list, that could cause an
>> issue.
>>
>>
>>
>> On Mon, Sep 9, 2019 at 1:04 AM Charles Goldsmith  wrote:
>>
>> Lelio, I think this mainly applies to partners, since we can see our
>> customer sites.
>>
>>
>>
>> Anthony, I don't think there is a public listing of your sites, not that
>> I've seen anyway.
>>
>>
>>
>> On Mon, Sep 9, 2019 at 12:07 AM Lelio Fulgenzi  wrote:
>>
>>
>>
>> I’m not quite sure I understand the question.
>>
>>
>>
>> Are you asking about a public index of sites?
>>
>>
>>
>> I know that configuration-wise, you can choose to list meetings on a
>> site. We’ve chosen to not do that. So the worst that can happen is some
>> gets to our WebEx landing page.
>>
>>
>>
>> I’m not sure what hiding a site helps with. Or helps deter.
>>
>>
>>
>> I mean, I’ve got our site listed on our service pages. They’re not
>> restricted, so anyone can find it.
>>
>>
>>
>> Logins are protected by SSO, so we’ve got that going too.
>> Protection-wise, I mean.
>>
>>
>>
>> Is there something I’m missing?
>>
>>
>>
>> Are you gonna make me loose sleep now!??? :)
>>
>>
>>
>> *-sent from mobile device-*
>>
>>
>>
>> *Lelio Fulgenzi, B.A.* | Senior Analyst
>>
>> Computing and Communications Services | University of Guelph
>>
>> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
>> N1G 2W1
>>
>> 519-824-4120 Ext. 56354 <519-824-4120;56354> | le...@uoguelph.ca
>>
>>
>>
>> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>>
>>
>>
>>
>> On Sep 8, 2019, at 2:45 PM, Anthony Holloway

Re: [cisco-voip] Your Associated Webex Sites

[Brian Meade]

I just did some testing here.  I'm also seeing some Control Hub-only
customers in my list.  I'm set as a partner admin only for those accounts.

On Mon, Sep 9, 2019 at 9:32 AM Matthew Loraditch <
mloradi...@heliontechnologies.com> wrote:

> Oh, Interesting. Everyone we have is on CI and Control Hub, so I don’t
> see other sites.
>
>
>
>
> Matthew Loraditch​
> Sr. Network Engineer
> p: *443.541.1518* <443.541.1518>
> w: *www.heliontechnologies.com* <http://www.heliontechnologies.com/>  |
> e: *mloradi...@heliontechnologies.com* 
> [image: Helion Technologies] <http://www.heliontechnologies.com/>
> [image: Facebook] <https://facebook.com/heliontech>
> [image: Twitter] <https://twitter.com/heliontech>
> [image: LinkedIn] <https://www.linkedin.com/company/helion-technologies>
> *From:* Brian Meade 
> *Sent:* Monday, September 9, 2019 9:25 AM
> *To:* Matthew Loraditch 
> *Cc:* Anthony Holloway ; Charles
> Goldsmith ; Cisco VoIP Group 
> *Subject:* Re: [cisco-voip] Your Associated Webex Sites
>
>
>
> I think the issue he's talking about is when logging in to something such
> as the Webex Meetings App.  After entering your email address, you get a
> list of sites to choose from.  Technically you could enter anyone's email
> address and see what Webex sites they have an account on.
>
>
>
> This mostly seems to be Site Admin sites since you can't have the same
> email in 2 different control hub organizations.
>
>
>
> On Mon, Sep 9, 2019 at 8:15 AM Matthew Loraditch <
> mloradi...@heliontechnologies.com> wrote:
>
> The only list I can think of is behind the sign in screen for webex admin
> and it only lists the accounts you have been given access to so I’m not
> sure how or why this would ever be a problem? It’s no different than
> looking at my deal list in CCW or say your accounting departments list of
> accounts? Unless I’m missing what you are thinking about?
>
>
>
>
>
> *Matthew Loraditch**​*
>
> *Sr. Network Engineer*
>
> p: *443.541.1518* <443.541.1518>
>
> w: *www.heliontechnologies.com* <http://www.heliontechnologies.com/>
>
>  |
>
> e: *mloradi...@heliontechnologies.com* 
>
> [image: Helion Technologies] <http://www.heliontechnologies.com/>
>
> [image: Facebook] <https://facebook.com/heliontech>
>
> [image: Twitter] <https://twitter.com/heliontech>
>
> [image: LinkedIn] <https://www.linkedin.com/company/helion-technologies>
>
> *From:* cisco-voip  *On Behalf Of *Anthony
> Holloway
> *Sent:* Monday, September 9, 2019 8:11 AM
> *To:* Charles Goldsmith 
> *Cc:* Cisco VoIP Group 
> *Subject:* Re: [cisco-voip] Your Associated Webex Sites
>
>
>
> Correct, mostly for Partners, since:
>
>
>
> A) We have a higher quantity than end customers
>
> B) The list of sites acts like a list of customers we do business with
> (past, current and future)
>
> C) Lists off all end customer sites too (which, depending on how the site
> names are being used, could give insight into the business; E.g.,
> divisions, project names, future name changes indicating: splits, mergers,
> re-branding, etc.
>
>
>
> However, I would think it would apply to end customers themselves too.
> Not only for option C above, but I can also see a situation where if two
> customer names were put side-by-side on the same list, that could cause an
> issue.
>
>
>
> On Mon, Sep 9, 2019 at 1:04 AM Charles Goldsmith  wrote:
>
> Lelio, I think this mainly applies to partners, since we can see our
> customer sites.
>
>
>
> Anthony, I don't think there is a public listing of your sites, not that
> I've seen anyway.
>
>
>
> On Mon, Sep 9, 2019 at 12:07 AM Lelio Fulgenzi  wrote:
>
>
>
> I’m not quite sure I understand the question.
>
>
>
> Are you asking about a public index of sites?
>
>
>
> I know that configuration-wise, you can choose to list meetings on a site.
> We’ve chosen to not do that. So the worst that can happen is some gets to
> our WebEx landing page.
>
>
>
> I’m not sure what hiding a site helps with. Or helps deter.
>
>
>
> I mean, I’ve got our site listed on our service pages. They’re not
> restricted, so anyone can find it.
>
>
>
> Logins are protected by SSO, so we’ve got that going too. Protection-wise,
> I mean.
>
>
>
> Is there something I’m missing?
>
>
>
> Are you gonna make me loose sleep now!??? :)
>
>
>
> *-sent from mobile device-*
>
>
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Sc

Re: [cisco-voip] Your Associated Webex Sites

[Matthew Loraditch]

Oh, Interesting. Everyone we have is on CI and Control Hub, so I don’t see 
other sites.


Matthew Loraditch
Sr. Network Engineer
p: 443.541.1518
w: www.heliontechnologies.com | e: mloradi...@heliontechnologies.com
From: Brian Meade 
Sent: Monday, September 9, 2019 9:25 AM
To: Matthew Loraditch 
Cc: Anthony Holloway ; Charles Goldsmith 
; Cisco VoIP Group 
Subject: Re: [cisco-voip] Your Associated Webex Sites

I think the issue he's talking about is when logging in to something such as 
the Webex Meetings App.  After entering your email address, you get a list of 
sites to choose from.  Technically you could enter anyone's email address and 
see what Webex sites they have an account on.

This mostly seems to be Site Admin sites since you can't have the same email in 
2 different control hub organizations.

On Mon, Sep 9, 2019 at 8:15 AM Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>> 
wrote:
The only list I can think of is behind the sign in screen for webex admin and 
it only lists the accounts you have been given access to so I’m not sure how or 
why this would ever be a problem? It’s no different than looking at my deal 
list in CCW or say your accounting departments list of accounts? Unless I’m 
missing what you are thinking about?


Matthew Loraditch​
Sr. Network Engineer
p: 443.541.1518
w: www.heliontechnologies.com<http://www.heliontechnologies.com/>
 |
e: mloradi...@heliontechnologies.com<mailto:mloradi...@heliontechnologies.com>
[Helion Technologies]<http://www.heliontechnologies.com/>
[Facebook]<https://facebook.com/heliontech>
[Twitter]<https://twitter.com/heliontech>
[LinkedIn]<https://www.linkedin.com/company/helion-technologies>
From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Anthony Holloway
Sent: Monday, September 9, 2019 8:11 AM
To: Charles Goldsmith mailto:w...@woka.us>>
Cc: Cisco VoIP Group 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] Your Associated Webex Sites

Correct, mostly for Partners, since:

A) We have a higher quantity than end customers
B) The list of sites acts like a list of customers we do business with (past, 
current and future)
C) Lists off all end customer sites too (which, depending on how the site names 
are being used, could give insight into the business; E.g., divisions, project 
names, future name changes indicating: splits, mergers, re-branding, etc.

However, I would think it would apply to end customers themselves too.  Not 
only for option C above, but I can also see a situation where if two customer 
names were put side-by-side on the same list, that could cause an issue.

On Mon, Sep 9, 2019 at 1:04 AM Charles Goldsmith 
mailto:w...@woka.us>> wrote:
Lelio, I think this mainly applies to partners, since we can see our customer 
sites.

Anthony, I don't think there is a public listing of your sites, not that I've 
seen anyway.

On Mon, Sep 9, 2019 at 12:07 AM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

I’m not quite sure I understand the question.

Are you asking about a public index of sites?

I know that configuration-wise, you can choose to list meetings on a site. 
We’ve chosen to not do that. So the worst that can happen is some gets to our 
WebEx landing page.

I’m not sure what hiding a site helps with. Or helps deter.

I mean, I’ve got our site listed on our service pages. They’re not restricted, 
so anyone can find it.

Logins are protected by SSO, so we’ve got that going too. Protection-wise, I 
mean.

Is there something I’m missing?

Are you gonna make me loose sleep now!??? :)

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook


On Sep 8, 2019, at 2:45 PM, Anthony Holloway 
mailto:avholloway+cisco-v...@gmail.com>> wrote:
All,

I want to take the pulse on a topic here, relating to your list of associated 
Webex sites, and whether or not they are private to you, or if they should be 
public information.

I was talking with a colleague about this ever growing list of customers we 
work with being cataloged by Webex in the fact that we keep getting associated 
to more and more customers, and what potential issue this may cause if the site 
list were to be viewed by just anyone on the internet.

Would you want your site list (whether end customer or partner admin) protected 
from view of others, or is it not that big of a deal?

And I guess as a follow up, is this list protected today, or is there a means 
by which my list can be exposed to the public relatively easily?
___
cisco-voip mailing list
cisco-voip@puck.net

Re: [cisco-voip] Your Associated Webex Sites

[Matthew Loraditch]

Well how would you get access??? That’s the part I don’t understand. You aren’t 
getting access unless I give it to you or you work for Cisco in the appropriate 
areas


Matthew Loraditch
Sr. Network Engineer
p: 443.541.1518
w: www.heliontechnologies.com | e: mloradi...@heliontechnologies.com
From: Anthony Holloway 
Sent: Monday, September 9, 2019 9:24 AM
To: Matthew Loraditch 
Cc: Charles Goldsmith ; Cisco VoIP Group 

Subject: Re: [cisco-voip] Your Associated Webex Sites

But what if I did have access to your list?  Of Webex sites, deals in CCW or 
accounting dept accounts?  Would that be a problem for you?  It kind of sounds 
like you're saying it wouldn't.

On Mon, Sep 9, 2019 at 7:14 AM Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>> 
wrote:
The only list I can think of is behind the sign in screen for webex admin and 
it only lists the accounts you have been given access to so I’m not sure how or 
why this would ever be a problem? It’s no different than looking at my deal 
list in CCW or say your accounting departments list of accounts? Unless I’m 
missing what you are thinking about?


Matthew Loraditch​
Sr. Network Engineer
p: 443.541.1518
w: www.heliontechnologies.com<http://www.heliontechnologies.com/>
 |
e: mloradi...@heliontechnologies.com<mailto:mloradi...@heliontechnologies.com>
[Helion Technologies]<http://www.heliontechnologies.com/>
[Facebook]<https://facebook.com/heliontech>
[Twitter]<https://twitter.com/heliontech>
[LinkedIn]<https://www.linkedin.com/company/helion-technologies>
From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Anthony Holloway
Sent: Monday, September 9, 2019 8:11 AM
To: Charles Goldsmith mailto:w...@woka.us>>
Cc: Cisco VoIP Group 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] Your Associated Webex Sites

Correct, mostly for Partners, since:

A) We have a higher quantity than end customers
B) The list of sites acts like a list of customers we do business with (past, 
current and future)
C) Lists off all end customer sites too (which, depending on how the site names 
are being used, could give insight into the business; E.g., divisions, project 
names, future name changes indicating: splits, mergers, re-branding, etc.

However, I would think it would apply to end customers themselves too.  Not 
only for option C above, but I can also see a situation where if two customer 
names were put side-by-side on the same list, that could cause an issue.

On Mon, Sep 9, 2019 at 1:04 AM Charles Goldsmith 
mailto:w...@woka.us>> wrote:
Lelio, I think this mainly applies to partners, since we can see our customer 
sites.

Anthony, I don't think there is a public listing of your sites, not that I've 
seen anyway.

On Mon, Sep 9, 2019 at 12:07 AM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

I’m not quite sure I understand the question.

Are you asking about a public index of sites?

I know that configuration-wise, you can choose to list meetings on a site. 
We’ve chosen to not do that. So the worst that can happen is some gets to our 
WebEx landing page.

I’m not sure what hiding a site helps with. Or helps deter.

I mean, I’ve got our site listed on our service pages. They’re not restricted, 
so anyone can find it.

Logins are protected by SSO, so we’ve got that going too. Protection-wise, I 
mean.

Is there something I’m missing?

Are you gonna make me loose sleep now!??? :)

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook


On Sep 8, 2019, at 2:45 PM, Anthony Holloway 
mailto:avholloway+cisco-v...@gmail.com>> wrote:
All,

I want to take the pulse on a topic here, relating to your list of associated 
Webex sites, and whether or not they are private to you, or if they should be 
public information.

I was talking with a colleague about this ever growing list of customers we 
work with being cataloged by Webex in the fact that we keep getting associated 
to more and more customers, and what potential issue this may cause if the site 
list were to be viewed by just anyone on the internet.

Would you want your site list (whether end customer or partner admin) protected 
from view of others, or is it not that big of a deal?

And I guess as a follow up, is this list protected today, or is there a means 
by which my list can be exposed to the public relatively easily?
___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailin

Re: [cisco-voip] Your Associated Webex Sites

[Brian Meade]

I think the issue he's talking about is when logging in to something such
as the Webex Meetings App.  After entering your email address, you get a
list of sites to choose from.  Technically you could enter anyone's email
address and see what Webex sites they have an account on.

This mostly seems to be Site Admin sites since you can't have the same
email in 2 different control hub organizations.

On Mon, Sep 9, 2019 at 8:15 AM Matthew Loraditch <
mloradi...@heliontechnologies.com> wrote:

> The only list I can think of is behind the sign in screen for webex admin
> and it only lists the accounts you have been given access to so I’m not
> sure how or why this would ever be a problem? It’s no different than
> looking at my deal list in CCW or say your accounting departments list of
> accounts? Unless I’m missing what you are thinking about?
>
>
>
>
> Matthew Loraditch​
> Sr. Network Engineer
> p: *443.541.1518* <443.541.1518>
> w: *www.heliontechnologies.com* <http://www.heliontechnologies.com/>  |
> e: *mloradi...@heliontechnologies.com* 
> [image: Helion Technologies] <http://www.heliontechnologies.com/>
> [image: Facebook] <https://facebook.com/heliontech>
> [image: Twitter] <https://twitter.com/heliontech>
> [image: LinkedIn] <https://www.linkedin.com/company/helion-technologies>
> *From:* cisco-voip  *On Behalf Of *Anthony
> Holloway
> *Sent:* Monday, September 9, 2019 8:11 AM
> *To:* Charles Goldsmith 
> *Cc:* Cisco VoIP Group 
> *Subject:* Re: [cisco-voip] Your Associated Webex Sites
>
>
>
> Correct, mostly for Partners, since:
>
>
>
> A) We have a higher quantity than end customers
>
> B) The list of sites acts like a list of customers we do business with
> (past, current and future)
>
> C) Lists off all end customer sites too (which, depending on how the site
> names are being used, could give insight into the business; E.g.,
> divisions, project names, future name changes indicating: splits, mergers,
> re-branding, etc.
>
>
>
> However, I would think it would apply to end customers themselves too.
> Not only for option C above, but I can also see a situation where if two
> customer names were put side-by-side on the same list, that could cause an
> issue.
>
>
>
> On Mon, Sep 9, 2019 at 1:04 AM Charles Goldsmith  wrote:
>
> Lelio, I think this mainly applies to partners, since we can see our
> customer sites.
>
>
>
> Anthony, I don't think there is a public listing of your sites, not that
> I've seen anyway.
>
>
>
> On Mon, Sep 9, 2019 at 12:07 AM Lelio Fulgenzi  wrote:
>
>
>
> I’m not quite sure I understand the question.
>
>
>
> Are you asking about a public index of sites?
>
>
>
> I know that configuration-wise, you can choose to list meetings on a site.
> We’ve chosen to not do that. So the worst that can happen is some gets to
> our WebEx landing page.
>
>
>
> I’m not sure what hiding a site helps with. Or helps deter.
>
>
>
> I mean, I’ve got our site listed on our service pages. They’re not
> restricted, so anyone can find it.
>
>
>
> Logins are protected by SSO, so we’ve got that going too. Protection-wise,
> I mean.
>
>
>
> Is there something I’m missing?
>
>
>
> Are you gonna make me loose sleep now!??? :)
>
>
>
> *-sent from mobile device-*
>
>
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 <519-824-4120;56354> | le...@uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
>
> On Sep 8, 2019, at 2:45 PM, Anthony Holloway <
> avholloway+cisco-v...@gmail.com> wrote:
>
> All,
>
>
>
> I want to take the pulse on a topic here, relating to your list of
> associated Webex sites, and whether or not they are private to you, or if
> they should be public information.
>
>
>
> I was talking with a colleague about this ever growing list of customers
> we work with being cataloged by Webex in the fact that we keep getting
> associated to more and more customers, and what potential issue this may
> cause if the site list were to be viewed by just anyone on the internet.
>
>
>
> Would you want your site list (whether end customer or partner admin)
> protected from view of others, or is it not that big of a deal?
>
>
>
> And I guess as a follow up, is this list protected today, or is there a
> means by which my list can be exposed to the public relatively easily?
>
> ___

Re: [cisco-voip] Your Associated Webex Sites

[Anthony Holloway]

But what if I did have access to your list?  Of Webex sites, deals in CCW
or accounting dept accounts?  Would that be a problem for you?  It kind of
sounds like you're saying it wouldn't.

On Mon, Sep 9, 2019 at 7:14 AM Matthew Loraditch <
mloradi...@heliontechnologies.com> wrote:

> The only list I can think of is behind the sign in screen for webex admin
> and it only lists the accounts you have been given access to so I’m not
> sure how or why this would ever be a problem? It’s no different than
> looking at my deal list in CCW or say your accounting departments list of
> accounts? Unless I’m missing what you are thinking about?
>
>
>
>
> Matthew Loraditch​
> Sr. Network Engineer
> p: *443.541.1518* <443.541.1518>
> w: *www.heliontechnologies.com* <http://www.heliontechnologies.com/>  |
> e: *mloradi...@heliontechnologies.com* 
> [image: Helion Technologies] <http://www.heliontechnologies.com/>
> [image: Facebook] <https://facebook.com/heliontech>
> [image: Twitter] <https://twitter.com/heliontech>
> [image: LinkedIn] <https://www.linkedin.com/company/helion-technologies>
> *From:* cisco-voip  *On Behalf Of *Anthony
> Holloway
> *Sent:* Monday, September 9, 2019 8:11 AM
> *To:* Charles Goldsmith 
> *Cc:* Cisco VoIP Group 
> *Subject:* Re: [cisco-voip] Your Associated Webex Sites
>
>
>
> Correct, mostly for Partners, since:
>
>
>
> A) We have a higher quantity than end customers
>
> B) The list of sites acts like a list of customers we do business with
> (past, current and future)
>
> C) Lists off all end customer sites too (which, depending on how the site
> names are being used, could give insight into the business; E.g.,
> divisions, project names, future name changes indicating: splits, mergers,
> re-branding, etc.
>
>
>
> However, I would think it would apply to end customers themselves too.
> Not only for option C above, but I can also see a situation where if two
> customer names were put side-by-side on the same list, that could cause an
> issue.
>
>
>
> On Mon, Sep 9, 2019 at 1:04 AM Charles Goldsmith  wrote:
>
> Lelio, I think this mainly applies to partners, since we can see our
> customer sites.
>
>
>
> Anthony, I don't think there is a public listing of your sites, not that
> I've seen anyway.
>
>
>
> On Mon, Sep 9, 2019 at 12:07 AM Lelio Fulgenzi  wrote:
>
>
>
> I’m not quite sure I understand the question.
>
>
>
> Are you asking about a public index of sites?
>
>
>
> I know that configuration-wise, you can choose to list meetings on a site.
> We’ve chosen to not do that. So the worst that can happen is some gets to
> our WebEx landing page.
>
>
>
> I’m not sure what hiding a site helps with. Or helps deter.
>
>
>
> I mean, I’ve got our site listed on our service pages. They’re not
> restricted, so anyone can find it.
>
>
>
> Logins are protected by SSO, so we’ve got that going too. Protection-wise,
> I mean.
>
>
>
> Is there something I’m missing?
>
>
>
> Are you gonna make me loose sleep now!??? :)
>
>
>
> *-sent from mobile device-*
>
>
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 <519-824-4120;56354> | le...@uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
>
> On Sep 8, 2019, at 2:45 PM, Anthony Holloway <
> avholloway+cisco-v...@gmail.com> wrote:
>
> All,
>
>
>
> I want to take the pulse on a topic here, relating to your list of
> associated Webex sites, and whether or not they are private to you, or if
> they should be public information.
>
>
>
> I was talking with a colleague about this ever growing list of customers
> we work with being cataloged by Webex in the fact that we keep getting
> associated to more and more customers, and what potential issue this may
> cause if the site list were to be viewed by just anyone on the internet.
>
>
>
> Would you want your site list (whether end customer or partner admin)
> protected from view of others, or is it not that big of a deal?
>
>
>
> And I guess as a follow up, is this list protected today, or is there a
> means by which my list can be exposed to the public relatively easily?
>
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Your Associated Webex Sites

[Matthew Loraditch]

The only list I can think of is behind the sign in screen for webex admin and 
it only lists the accounts you have been given access to so I’m not sure how or 
why this would ever be a problem? It’s no different than looking at my deal 
list in CCW or say your accounting departments list of accounts? Unless I’m 
missing what you are thinking about?


Matthew Loraditch
Sr. Network Engineer
p: 443.541.1518
w: www.heliontechnologies.com | e: mloradi...@heliontechnologies.com
From: cisco-voip  On Behalf Of Anthony 
Holloway
Sent: Monday, September 9, 2019 8:11 AM
To: Charles Goldsmith 
Cc: Cisco VoIP Group 
Subject: Re: [cisco-voip] Your Associated Webex Sites

Correct, mostly for Partners, since:

A) We have a higher quantity than end customers
B) The list of sites acts like a list of customers we do business with (past, 
current and future)
C) Lists off all end customer sites too (which, depending on how the site names 
are being used, could give insight into the business; E.g., divisions, project 
names, future name changes indicating: splits, mergers, re-branding, etc.

However, I would think it would apply to end customers themselves too.  Not 
only for option C above, but I can also see a situation where if two customer 
names were put side-by-side on the same list, that could cause an issue.

On Mon, Sep 9, 2019 at 1:04 AM Charles Goldsmith 
mailto:w...@woka.us>> wrote:
Lelio, I think this mainly applies to partners, since we can see our customer 
sites.

Anthony, I don't think there is a public listing of your sites, not that I've 
seen anyway.

On Mon, Sep 9, 2019 at 12:07 AM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

I’m not quite sure I understand the question.

Are you asking about a public index of sites?

I know that configuration-wise, you can choose to list meetings on a site. 
We’ve chosen to not do that. So the worst that can happen is some gets to our 
WebEx landing page.

I’m not sure what hiding a site helps with. Or helps deter.

I mean, I’ve got our site listed on our service pages. They’re not restricted, 
so anyone can find it.

Logins are protected by SSO, so we’ve got that going too. Protection-wise, I 
mean.

Is there something I’m missing?

Are you gonna make me loose sleep now!??? :)

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook


On Sep 8, 2019, at 2:45 PM, Anthony Holloway 
mailto:avholloway+cisco-v...@gmail.com>> wrote:
All,

I want to take the pulse on a topic here, relating to your list of associated 
Webex sites, and whether or not they are private to you, or if they should be 
public information.

I was talking with a colleague about this ever growing list of customers we 
work with being cataloged by Webex in the fact that we keep getting associated 
to more and more customers, and what potential issue this may cause if the site 
list were to be viewed by just anyone on the internet.

Would you want your site list (whether end customer or partner admin) protected 
from view of others, or is it not that big of a deal?

And I guess as a follow up, is this list protected today, or is there a means 
by which my list can be exposed to the public relatively easily?
___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Your Associated Webex Sites

[Anthony Holloway]

Correct, mostly for Partners, since:

A) We have a higher quantity than end customers
B) The list of sites acts like a list of customers we do business with
(past, current and future)
C) Lists off all end customer sites too (which, depending on how the site
names are being used, could give insight into the business; E.g.,
divisions, project names, future name changes indicating: splits, mergers,
re-branding, etc.

However, I would think it would apply to end customers themselves too.  Not
only for option C above, but I can also see a situation where if two
customer names were put side-by-side on the same list, that could cause an
issue.

On Mon, Sep 9, 2019 at 1:04 AM Charles Goldsmith  wrote:

> Lelio, I think this mainly applies to partners, since we can see our
> customer sites.
>
> Anthony, I don't think there is a public listing of your sites, not that
> I've seen anyway.
>
> On Mon, Sep 9, 2019 at 12:07 AM Lelio Fulgenzi  wrote:
>
>>
>> I’m not quite sure I understand the question.
>>
>> Are you asking about a public index of sites?
>>
>> I know that configuration-wise, you can choose to list meetings on a
>> site. We’ve chosen to not do that. So the worst that can happen is some
>> gets to our WebEx landing page.
>>
>> I’m not sure what hiding a site helps with. Or helps deter.
>>
>> I mean, I’ve got our site listed on our service pages. They’re not
>> restricted, so anyone can find it.
>>
>> Logins are protected by SSO, so we’ve got that going too.
>> Protection-wise, I mean.
>>
>> Is there something I’m missing?
>>
>> Are you gonna make me loose sleep now!??? :)
>>
>> *-sent from mobile device-*
>>
>>
>> *Lelio Fulgenzi, B.A.* | Senior Analyst
>>
>> Computing and Communications Services | University of Guelph
>>
>> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
>> N1G 2W1
>>
>> 519-824-4120 Ext. 56354 <519-824-4120;56354> | le...@uoguelph.ca
>>
>>
>>
>> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>>
>>
>>
>> [image: University of Guelph Cornerstone with Improve Life tagline]
>>
>> On Sep 8, 2019, at 2:45 PM, Anthony Holloway <
>> avholloway+cisco-v...@gmail.com> wrote:
>>
>> All,
>>
>> I want to take the pulse on a topic here, relating to your list of
>> associated Webex sites, and whether or not they are private to you, or if
>> they should be public information.
>>
>> I was talking with a colleague about this ever growing list of customers
>> we work with being cataloged by Webex in the fact that we keep getting
>> associated to more and more customers, and what potential issue this may
>> cause if the site list were to be viewed by just anyone on the internet.
>>
>> Would you want your site list (whether end customer or partner admin)
>> protected from view of others, or is it not that big of a deal?
>>
>> And I guess as a follow up, is this list protected today, or is there a
>> means by which my list can be exposed to the public relatively easily?
>>
>> ___
>> cisco-voip mailing list
>> cisco-voip@puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>
>> ___
>> cisco-voip mailing list
>> cisco-voip@puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Your Associated Webex Sites

[Charles Goldsmith]

Lelio, I think this mainly applies to partners, since we can see our
customer sites.

Anthony, I don't think there is a public listing of your sites, not that
I've seen anyway.

On Mon, Sep 9, 2019 at 12:07 AM Lelio Fulgenzi  wrote:

>
> I’m not quite sure I understand the question.
>
> Are you asking about a public index of sites?
>
> I know that configuration-wise, you can choose to list meetings on a site.
> We’ve chosen to not do that. So the worst that can happen is some gets to
> our WebEx landing page.
>
> I’m not sure what hiding a site helps with. Or helps deter.
>
> I mean, I’ve got our site listed on our service pages. They’re not
> restricted, so anyone can find it.
>
> Logins are protected by SSO, so we’ve got that going too. Protection-wise,
> I mean.
>
> Is there something I’m missing?
>
> Are you gonna make me loose sleep now!??? :)
>
> *-sent from mobile device-*
>
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 <519-824-4120;56354> | le...@uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> [image: University of Guelph Cornerstone with Improve Life tagline]
>
> On Sep 8, 2019, at 2:45 PM, Anthony Holloway <
> avholloway+cisco-v...@gmail.com> wrote:
>
> All,
>
> I want to take the pulse on a topic here, relating to your list of
> associated Webex sites, and whether or not they are private to you, or if
> they should be public information.
>
> I was talking with a colleague about this ever growing list of customers
> we work with being cataloged by Webex in the fact that we keep getting
> associated to more and more customers, and what potential issue this may
> cause if the site list were to be viewed by just anyone on the internet.
>
> Would you want your site list (whether end customer or partner admin)
> protected from view of others, or is it not that big of a deal?
>
> And I guess as a follow up, is this list protected today, or is there a
> means by which my list can be exposed to the public relatively easily?
>
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Your Associated Webex Sites

[Lelio Fulgenzi]

I’m not quite sure I understand the question.

Are you asking about a public index of sites?

I know that configuration-wise, you can choose to list meetings on a site. 
We’ve chosen to not do that. So the worst that can happen is some gets to our 
WebEx landing page.

I’m not sure what hiding a site helps with. Or helps deter.

I mean, I’ve got our site listed on our service pages. They’re not restricted, 
so anyone can find it.

Logins are protected by SSO, so we’ve got that going too. Protection-wise, I 
mean.

Is there something I’m missing?

Are you gonna make me loose sleep now!??? :)

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Sep 8, 2019, at 2:45 PM, Anthony Holloway 
mailto:avholloway+cisco-v...@gmail.com>> wrote:

All,

I want to take the pulse on a topic here, relating to your list of associated 
Webex sites, and whether or not they are private to you, or if they should be 
public information.

I was talking with a colleague about this ever growing list of customers we 
work with being cataloged by Webex in the fact that we keep getting associated 
to more and more customers, and what potential issue this may cause if the site 
list were to be viewed by just anyone on the internet.

Would you want your site list (whether end customer or partner admin) protected 
from view of others, or is it not that big of a deal?

And I guess as a follow up, is this list protected today, or is there a means 
by which my list can be exposed to the public relatively easily?
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

[cisco-voip] Your Associated Webex Sites

[Anthony Holloway]

All,

I want to take the pulse on a topic here, relating to your list of
associated Webex sites, and whether or not they are private to you, or if
they should be public information.

I was talking with a colleague about this ever growing list of customers we
work with being cataloged by Webex in the fact that we keep getting
associated to more and more customers, and what potential issue this may
cause if the site list were to be viewed by just anyone on the internet.

Would you want your site list (whether end customer or partner admin)
protected from view of others, or is it not that big of a deal?

And I guess as a follow up, is this list protected today, or is there a
means by which my list can be exposed to the public relatively easily?
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip