8/21 My supervisor asked that everyone in the office release their
e-mail password to her. I don't feel comfortable doing that, and
was wondering if there is some sort of UCB e-mail policy about
not releasing passwords that I can quote in response to her request.
\_ Your boss has no right to require that you give them your
password. root has the right to have full access to your
account but that's a different story. Don't do it. Tell him
shoove it up his ass if he forces you to.
\_ root has the ability, but not necessarily the right, to
full access to your account. (If at a UC or ISP, root
is prohibited from reading your e-mail for instance.)
\_ Just say "NO WAY IN HELL"
\_ You are F..I..R..E..D!!!! (do I smell million dallar law
suit?)
\_ Is it your personal email account or work account? Either one,
you have to right to not to. You should ask her her reason for
knowing password.
\_ It is my csua account which I also use for work. What
I am looking for is some sort of csua or ucop rule that
says I am not obligated to give her my password.
\_ CSUA policy forbids you from allowing anyone
else to have your password or use your account.
If she wants a password to your work e-mail,
make her give you a work e-mail account. --root
\_ in fact CSUA root will turn your account off
should we find that this is the case. --jon
\_ Employers have a legal right to access to your office workstation
and business related accounts. That does not extend outside the
office. Forward your mail outside and tell her to shove it.
If they forbid you from forwarding your mail outside the company,
be very careful what email you do with your business address. BIG
UC Policies. --jon
BOSS is WAtching YOU. -ERic
\_ But the UC/UCB e-mail policy protects the privacy of
UC employee e-mail - see
http://socrates.berkeley.edu:7015/policy
\_ Your *e-mail* is protected, but your *password* is
not. In fact there is a campus policy that
your supervisor *must* have all the passwords you
use for business purposes (if you're UC staff).
They just can't look at it except under the
situations outlined in the e-mail and other
policies. -tom
\_ No, root never knows what your passwords
are. Having passwords stored anywhere on a
computer comprimises security. Passwords on
/etc/passwd or /etc/shadow are one way
encrypted so there's no way to derive
the original passwords without a password
cracker and a high performance computer.
\_ A 386 is powerful enough
to crack many passwords.
\_ I didn't say root, I said "your
supervisor". -tom
\_ Boy imagine that, UC managers who do not understand
or are not aware of UC Policies. --jon
btw, if you want a wider discussion, there is also
http://ucb.net.discussion. I am sure some of the more
security minded denizens of that newsgroup will have
some interesting opinions on this topic.
\_ Well its nie the the UC at least grants some expectation
of privacy to employee email. I'm just pointing out that
in the 'real world' of employment, it can be very
different. -ERic
\_ I think she likes you!
\_ I think so too!!
\_ She's married and I'm a girl. Hence, I don't think so.
\_ She could be bisexual.
\_ How about giving me your password. I am not married
and I am a guy and not gay.
\_ which company is this? |