Because of a publicly announced open meeting in Zoom, a UF student government meeting was zoom-bombed this week. UFIT quickly investigated and has provided a solution.
Zoom’s meeting options screen showing the new setting.
An additional feature that Zoom provides for restricting meeting participants to authenticated users has just gotten better. You can now choose to allow UFL Participants Only when creating a meeting invite. This change does not impact any defaults or current meeting settings. It simply enables the option, as displayed here, in your user profile.
You do have to shutdown your Zoom and Outlook clients and reopen them for these features to become available.
With the increased self-quarantines, social distancing, and stay-at-home directives that is necessary during this time, UF, like most of the world, has moved online to get work done. The tool of choice at UF, and for many other places, for most online meetings has become Zoom. The utilization of Zoom.us has exploded due to the COVID-19 pandemic. As with any platform that sees such rapid expansion, the hackers and social misfits have found ways to make Zoom uncomfortable, to downright unusable, if the host hasn’t taken proper precautions to start a safe meeting.
A new term, zoombombing, has been coined to define the unwanted intrusion of an individual in a video conference call. Many times, especially if screen sharing is enabled for all participants, the intruder shows pornography or other disturbing images to all participants. Articles about this are popping up everywhere. The FBI has even placed warnings that hijackers are taking over school and business video conferences.
https://www.techrepublic.com/article/fbi-warns-about-zoom-bombing-as-hijackers-take-over-school-and-business-video-conferences/ (link stopped working in 2026)
UFIT has created a Keep Zoom Secure website to provide best practices and setup guides for faculty, staff, and students using Zoom.us. The announcement of this new page has been included on the Keep Teaching page, https://ufl.zoom.us/, eLearning homepage and many other UF webpages… including a banner on Canvas itself:
In light of moving classes online, a number of students have expressed their concerns about HonorLock’s terms of service and privacy policy. Honorlock is a tool that UF has enabled that records an exam session while allowing students to test at their convenience.
My office understands and certainly appreciates the concerns you have expressed with regard to privacy and information security. Please be assured UF’s solution provider and partner in ensuring academic integrity – Honorlock – has passed a privacy and security evaluation by UF Risk Management and is held to all applicable FERPA (Family Educational Rights and Privacy Act) and GDPR (General Data Protection Regulation) requirements. I invite you to find these assurances detailed in the attached Honorlock Student Privacy and Honorlock GDPR documents and encourage you to share this information with anyone else who has similar concerns.
Additionally, here are some
common privacy-related questions we have received from UF students in the past,
along with responses from Honorlock:
Student concern: Honorlock does not stop monitoring your screen activity once your proctoring session is over and this makes me feel uneasy. Honorlock practice: As for recording/capturing, information after the exam is submitted, Honorlock is not capturing any data after the exam is submitted, only when the exam is in process. The student can also remove the extension right after the exam is submitted if they feel more comfortable.
Student concern: The extension also has the power to censor your search results and even your right click function, regardless of whether or not you are taking a test. Honorlock practice: We are not censoring the student’s search engine results; we are simply pushing back exam content by placing our websites on the first page of the search engines and by filing DMCA takedown requests to remove leaked exam content. These functions are not performed by the Chrome Extension and do not capture any data from the student.
Student concern: Online reviews also mention that the extension even has the power to control other devices on the same internet connection. Honorlock practice: Honorlock has no access to other devices in the network; it simply interacts with the student’s browser and the only page it interacts with is Canvas.
Again, I can assure you as a
function UF’s service agreement with Honorlock, they are beholden to
FERPA, 20 U.S.C. Section 1232g of Federal Code related to the kind of privacy
issues you have brought to our attention.
Please let me know if I may
provide any more clarification or if you have more questions. Feel free to
give me a phone call to discuss this, if you wish. We are here to support and
assist you while ensuring the academic integrity of the University is upheld.
Again, your concerns are
important to us and we appreciate your understanding in this matter.
Brian
See the description for the full text of this signature.
Adobe announced a week or two ago free licensing to students because of the impacts that COVID-19 is having on schools and universities. UFIT has been working to bring that to campus. On Friday, March 20th, it was enabled. Student’s are able to use UF’s federated identity (the GatorLink) for authentication to adobe.com. This allows adobe.com to verify eligibility.
This change is now also impacting UF people that are participating in the UF enterprise-wide licenses for Adobe Acrobat or Creative Cloud. When starting an Adobe application you may see a Time has run out! popup saying that your subscription has expired.
Emails by Adobe were sent Monday, March 23rd, about migrating content from a personal ID (the Adobe ID’s we were previously using that are associated with the UF Enterprise license) to a federated ID. Software Licensing Services is also sending emails to all individuals with a UF purchased license with instructions.
Login with your federated, single-sign-on ID (your Gatorlink@ufl.edu address).
Since most Enterprise users do not have data saved in the Adobe Cloud, migration of content from the ‘personal’ account to the ‘federated’ account as described in the email from Adobe is not really needed. However, if in doubt, choose to migrate your content.
To avoid issues, it is our recommendation to only do
this if you are having issues with your Adobe product’s registration. Adobe’s
internal processes do move slowly and it seems to be impacting users at
different times.
Some people are having issues trying to answer their multi-factor authentication check when signing into the UF VPN. This results in the signin timing out and not properly connecting. If that’s happening to you, we have the solution. Check the newest KB article:
As we have transitioned to working at home, one of the challenges that keeps getting reported is lack of Internet access (especially in rural areas). Here are two possibilities to help bridge the gap:
Cellular WiFi Hotspots.
Both AT&T and Verizon have cellular hotspot contracts with UF. The price is approximately $40/month (Verizon provides the necessary hardware for free and AT&T charges ~$150). Unfortunately, both providers are currently back-ordered.
Cellular tethering involves turning your existing smartphone into a WiFi hotspot. Currently many major carriers (AT&T, Sprint, T-Mobile, and Verizon) are already suspending data caps on cell phone usage for the next 60 days. You may be able to addon to your contract cellular tethering or hotspot capabilities. However, due to the large differences in cell phones and carriers you will need to work with your respective cellular provider to take advantage of this function.
In accordance with the guidance from the University President and our Dean, all Engineering IT Support Offices are transitioning to remote support. IT workers will begin work-at-home starting Thursday, March 19th. You can continue to receive support from your IT office by submitting tickets through your unit’s website or support email address as documented at https://www.it.eng.ufl.edu/contacts.
Support tickets are the preferred method to insure requests are properly tracked during this time.
If you don’t know where to submit a ticket you can use the
Engineering IT Support website’s “Enter a Ticket” page (https://www.it.eng.ufl.edu/support/enter-a-ticket/)
and we will route your request to the most appropriate location.
We have also increased documentation within the Engineering
IT Support’s knowledgebase and
have created our own “Working Remotely”
page to help inform the College about useful tools, information, and
tips/tricks for working remotely. If you have a question or see something
missing, please let us know and we can add it here to share across the Herbert
Wertheim College of Engineering. These pages will be updated continuously
through this period so check back periodically for new information.
Please bear with us during this incredibly disruptive and unprecedented time as we adjust to continue to help you accomplish the mission of the University. I thank you in advance for your patience and understanding and look forward to when we can get back to assisting you in our normal, day-to-day methods.
As of today, some of your email might look a little different. UFIT has implemented a banner to all emails originating from off-campus. The banner, which will be prepended to the body of the email, reminds people to be suspicious before following any link, or opening any attachment, they receive in email.
This is what the new banner will look like.
Although this banner will only be attached to emails originating from off-campus mail services, please remember that you should always use caution before opening any link or attachment you receive in email, no matter where it came from. The vast majority of phishing emails we receive at this time are from compromised UF accounts. As a result, they will not have this banner applied.
The banner serves as an extra layer of awareness for faculty, students, and staff to be vigilant when opening external emails and attachments. It will not be added to email originating from UF, Shands, and Shands-Jax email systems. UFIT is also preemptively whitelisting incoming email from organizations with established business relationships supporting the academic, research, and health/outreach mission of the university. Additional exemptions for official business email will be considered. Anyone with questions about the external email banner or the instructions for requesting an exemption may contact their unit IT or the UF Computing Help Desk.
