Initial commit

1 files changed, 15 insertions, 0 deletions

diff --git a/content/post/siue-cyberstalking-feature.md b/content/post/siue-cyberstalking-feature.md
new file mode 100644
index 0000000..bad5cfb
--- /dev/null
+++ b/content/post/siue-cyberstalking-feature.md
@@ -0,0 +1,15 @@
+---
+title: "SIUe Cyberstalking Feature"
+date: 2020-06-06T00:00:00
+draft: false
+---
+https://www.siue.edu/search/people.shtml[1]
+
+This lesser-known feature has existed for at least 2 years and probably much longer than that. I emailed their helpdesk[2] several times pointing out the search feature could be abused by cyberstalkers and data mined. I pointed out that it should require authentication and not be open to the public internet. It's a huge risk for student privacy and safety. Anyone can find any student's full name, area of study, rank, home address, phone number and university email. A week later, I still have no response.
+
+A quick search reveals that other university's student directories generally don't include the student's rank, home address, or phone number. SIUe should at least remove the home address and phone number fields from public view.
+
+
+Link(s):
+[1: https://www.siue.edu/search/people.shtml](https://www.siue.edu/search/people.shtml)
+[2: mailto:help@siue.edu](mailto:help@siue.edu)