untitled text 157 1 2 … 3 4 5 … … … … 6 7 8 9 … … … … 10 11 12 13 14 … 15 … … 16 … … … … 17 … … … … 18 … … 19 20 … 21 22 23 Page 1 of 1 ¬ On Thu, Jan 28, 2016 at 12:52 PM, Ethan Ligon wrote:¬ Colleagues-¬ ¬ I'm one of six faculty members who sit on the The Senate-Administration Joint Committee on Campus Information Technology (JCCIT). In recent weeks we've learned that UCOP installed hardware on the campus network designed to monitor and possibly record all network traffic coming or going to the campus.¬ ¬ This secret monitoring is on-going.¬ ¬ UCOP would like these facts to remain secret. However, the tenured faculty on the JCCIT are in agreement that continued silence on our part would make us complicit in what we view as a serious violation of shared governance and a serious threat to the academic freedoms that the Berkeley campus has long cherished. ¬ ¬ Some salient facts:¬ - The UCOP had this hardware installed last summer. ¬ - They did so over the objections of our campus IT and security experts. ¬ - For many months UCOP required that our IT staff keep these facts secret from faculty and others on the Berkeley campus.¬ - The intrusive hardware is not under the control of local IT staff--it sends data on network activity to UCOP and to the vendor. Of what these data consists we do not know.¬ - The intrusive device is capable of capturing and analyzing all network traffic to and from the Berkeley campus, and has enough local storage to save over 30 days of *all* this data ("full packet capture"). This can be presumed to include your email, all the websites you visit, all the data you receive from off campus or data you send off campus.¬ - UCOP defends their actions by relying on secret legal determinations and painting lurid pictures of "advanced persistent threat actors" from which we must be kept safe. They further promise not to invade our privacy unnecessarily, while the same time implementing systems designed to do exactly that. ¬ -- It is very far from clear that UCOP has a better plan or better qualified IT security people or infrastructure than does the Berkeley campus, and they've shut these qualified people out of the picture.¬ ¬ Today is "Data Privacy Day," and the university encourages us to celebrate it. Outrage is more appropriate than celebration.¬ ¬ -Ethan Ligon¬ ¬