<div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">Is your issue with APS (as in your subject line) or ACS (as in your first sentence)? It makes a difference because ACS, in the form of SciFinder, has an unusual dual authentication system that has caused us much confusion when they report breaches to us. Apparently a hacker can use a SciFinder account created at one institution but through the hacked credentials of a different SciFinder institution's proxy server.</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">More generally, our systems librarian has found at least one instance of one of our own patrons (don't know if student or faculty) who apparently quite deliberately shared their login credentials on an open site as a political act, presumably of protest about paywalls. We're having an internal discussion right now as to whether we should handle such a situation differently from the ones where we have no reason to suspect the breached-account user wasn't just a victim, maybe one who chose too weak a password. In the latter case, we force a password reset and let them have access again right after that.</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">Melissa</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Dec 16, 2016 at 12:04 PM, Alice Daugherty <span dir="ltr"><<a href="mailto:adaugher@lsu.edu" target="_blank">adaugher@lsu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="m_387671366913891765WordSection1">
<p class="MsoNormal">Hello all, <u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">In the past we have had the occasional IP block from ACS with the IP unfortunately being our EZProxy IP. Lately, this has been a recurring issue, and not always the same user.
<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Recently, one person brought their computer to our IT people and no viruses were found. We were thinking that a keystroke virus might have been the culprit. Currently, a different user is causing our IP block and has caused the last 3
blocks.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">This year, it seems that the excessive downloads block has occurred more frequently and with other vendors as well.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I wondered how other campuses are handing this issue? How many attempts at password changes do you provide users before you consider taking away their access? Do you ever consider restricting their access? Are there other technologies
that can be put in place to prevent these types of breaches?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thank you, <u></u><u></u></p>
<p class="MsoNormal">Alice<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal" style="margin-bottom:7.5pt;line-height:15.0pt"><a href="http://www.lsu.edu/" target="_blank"><b><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#664499;text-decoration:none"><img border="0" width="54" height="17" style="width:.5625in;height:.177in" id="m_387671366913891765Picture_x0020_1" src="cid:image001.png@01D25782.88826E60" alt="LSU"></span></b></a><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-bottom:7.5pt;line-height:15.0pt"><b><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333">Alice Daugherty</span></b><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"><br>
Collection Assessment and Analysis Librarian<br>
LSU Libraries<br>
Louisiana State University <br>
30 Middleton, Baton Rouge, LA 70803 <br>
office <a href="tel:(225)%20578-7652" value="+12255787652" target="_blank">225-578-7652</a> <br>
<a href="mailto:adaugher@lsu.edu" target="_blank"><b><span style="color:#451d7c">adaugher@lsu.edu</span></b></a> | <a href="http://www.lsu.edu/" target="_blank"><b><span style="color:#451d7c">lsu.edu</span></b></a> | <a href="http://lib.lsu.edu/" target="_blank"><b><span style="color:#451d7c">l<wbr>ib.lsu.edu</span></b></a><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-bottom:7.5pt;line-height:15.0pt"><a href="http://www.facebook.com/LSULibraries" target="_blank"><b><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#664499;text-decoration:none"><img border="0" width="17" height="17" style="width:.177in;height:.177in" id="m_387671366913891765Picture_x0020_2" src="cid:image002.png@01D25782.88826E60" alt="Facebook"></span></b></a><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"> </span><a href="http://www.twitter.com/lsulibraries" target="_blank"><b><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#664499;text-decoration:none"><img border="0" width="21" height="17" style="width:.2187in;height:.177in" id="m_387671366913891765Picture_x0020_3" src="cid:image003.png@01D25782.88826E60" alt="Twitter"></span></b></a><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"> </span><a href="http://www.instagram.com/lsulibraries" target="_blank"><b><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#664499;text-decoration:none"><img border="0" width="17" height="17" style="width:.177in;height:.177in" id="m_387671366913891765Picture_x0020_4" src="cid:image004.png@01D25782.88826E60" alt="Instagram"></span></b></a><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"> <u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<br>______________________________<wbr>_________________<br>
Eril-l mailing list<br>
<a href="mailto:Eril-l@lists.eril-l.org">Eril-l@lists.eril-l.org</a><br>
<a href="http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org" rel="noreferrer" target="_blank">http://lists.eril-l.org/<wbr>listinfo.cgi/eril-l-eril-l.org</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Melissa Belvadi</div><div>Collections Librarian</div><div>University of Prince Edward Island</div><div><a href="mailto:mbelvadi@upei.ca" target="_blank">mbelvadi@upei.ca</a> 902-566-0581</div><div><br></div><div><br></div></div></div>
</div>