Information Computing and Technology Services
Tertiary Page Banner
ITCS Announcements

Announcements
Ensuring the security of your Internet sessions and sensitive information
Posted 10-17-2014

Please use the following directions to disable SSL on your Windows computers that are not installed by ITCS. This is the only way to ensure the security of your encrypted Internet sessions and the sensitive information they contain.

The SSL (Secure Sockets Layer) encryption protocol has been used for many years to establish secure connections between computers (e.g., for credit card transactions on the Internet). However, the SSL protocol no longer provides adequate protection for encrypted Internet sessions.

On the ECU campus, ITCS will disable SSL in Microsoft Internet Explorer on university-owned faculty and staff Windows computers connecting to the campus data network. However, ITCS cannot fix this condition in other browsers installed on university computers or on any browser on your home computer.

 

 WINDOWS:

Turning off SSL3 in Internet Explorer:

  • Open Internet Explorer.
  • Go to “Tools” in the menu at top of the Internet Explorer window.
  • Select “Internet Options” from drop-down menu.
  • Select “Advanced” tab in Internet Options window.
  • Scroll down to the end of the Settings menu.
  • Deselect the check box in front of SSL 3.0 (SSL 2.0 should already be deselected).
  • Ensure that all versions of TLS are enabled.
  • Select the “OK” button at the bottom of the Internet Options window.
  • Close Internet Explorer; new settings will take effect when IE starts again.

Turning off SSL 3.0 in Firefox:

  1. Open Firefox.
  2. Go to the top of your screen and click on Tools > Add-ons.
  3. In the Search field (Search all add-ons), type in ssl.
  4. Look for SSL Version Control 0.2.
  5. Click on the Install button to the right of that add-on.
  6. No adjustments to the add-on are required. By default it will turn off SSL 3.0.


APPLE:

Turning off SSL 3.0 in Safari:

  1. Mavericks (X.9.5) - Install the update from here: http://support.apple.com/kb/DL1772
  2. Mountain Lion (X.8.5) - Install the update from here: http://support.apple.com/kb/DL1771
  3. Lion (X.7.5) - there is no update. Please put in a service request to have your system upgraded to OS X.9.5. Detailed directions on how to do this are at http://www.ecu.edu/itcs/mac
  4. More info on the update can be found here -  http://support.apple.com/kb/HT6531


ECU ITCS Security Alert - Phishing Scheme - YOUR MAILBOX IS ALMOST FULL
Posted 10-16-2014

Date: Thursday, October 16, 2014

WARNING!  The campus is seeing a “YOUR MAILBOX IS ALMOST FULL” phishing scheme telling users:  “The following evaluations have been assigned to you. Please log in to complete these evaluations.  CLICK HERE TO EVALUATE USING SECURE ENCRYPTION.  NOTE: Your log in will time out after 60 minutes. Your responses will be lost if you do not click on the "secure" button before 60 minutes lapses. There is no prompt when your 60 minute session has expired. Please save extensive comments periodically and check your time.”

If you receive one of these emails, please ignore and delete it.  If you clicked on the link in the email you should change your passphrase immediately.

Reminder:  ITCS reminds the campus to avoid e-mail scams, hoaxes and Phishing schemes circulating on the Internet and to not provide their password in response to such emails.  Scams purporting to be from East Carolina University, Service Helpdesk, ECU IT, ECU Helpdesk, the Web Master, Webmail, the IRS, Your Financial Institution, etc. are bombarding e-mail mailboxes.  Although IronPort blocks the majority of such e-mails, some scams successfully reach your e-mail mailbox.

NEVER provide personal or sensitive information in response to any unsolicited e-mail.  Don’t open unsolicited e-mail attachments.  No matter how realistic or enticing the e-mail message, you must remain vigilant in not responding to an e-mail hoax or scam.  Just delete it!  You can always contact the IT Help Desk to verify the authenticity of an e-mail.  ITCS will post our announcements at www.help.ecu.edu, users can go there to verify the authenticity of an IT related announcement.

If you have provided personal or sensitive information in response to an e-mail scam and don’t know what to do, please contact ECU’s IT Help Desk at 328-9866 or www.help.ecu.edu.

Visit the IT Security website, www.ecu.edu/itsecurity for examples of e-mail scams and additional information on avoiding them.



Need Help?