Technical Team

Marvin Addison, Victor Bagley, Marc DeBonis, Daniel Fisher, Karen Herrington, Kim Homer, Mike Hosig, Greg Kroll, Ken McCrery, Andrew Olson, Kevin Rooney, Brenda van Gelder

Agenda

1. Issues, questions, and status update from development teams
2. It has been suggested that when a user sets account recovery options, if they are told we will only notify them if they give us a 3rd party email that they will more likely give it to us. What was the reason why we chose to include emailing PID@vt.edu?
   • See "Meeting Notes" #2 from 20101015 - October 15, 2010, Agenda & Meeting Notes
3. Project Management Issues
   1. Need estimates of time spent on this project for budget estimate.
      • Budget worksheet
      • Resources & Staffing worksheet
   2. Need more detail on tasks or activities to develop a working project plan.
      • SelfServPwdReset_MSProjectPlan.mpp
   3. Work on Communications plan

Meeting Notes

Attendees: Marvin Addison, Daniel Fisher, Karen Herrington, Mike Hosig, Greg Kroll, Ken McCrery, Andrew Olson, Kevin Rooney

1. It has been suggested that when a user sets account recovery options, if they are told we will only notify them if they give us a 3rd party email that they will more likely give it to us. What was the reason why we chose to include emailing PID@vt.edu?
   1. Several contend that PID@vt.edu is the official e-mail address for correspondence so we should always send notifications there.
   2. Is this a usability, security, or audit issue?
   3. There was a long discussion about this topic that resulted in the following draft message:
      • Notification will be sent to PID@vt.edu, if you do not forward e-mail you may want to list a third-party e-mail address for notification in case you forget your password and are locked out of your e-mail at VT.
   4. The question was asked what procedures does 4Help follow if a user calls in to report a hacked account (PID)?
      • In response Joyce Landreth said "It is usually NOT the person that reports a hacked PID – it is usually a mail admin or a library admin or ITSec". But all procedures are on the Wiki: Emergency, Abuse, Security and Threats Procedures Specifically, if a user calls in to report the problem: Possible account compromise
   5. Action item: Kevin will make necessary changes to the software requirements specification.
2. Status
   1. Greg still needs time estimates and task details (milestones) from most of the team.
   2. Regarding the SMS gateway. Kevin is going to contact Bulletin.net with some questions. Karen is awaiting information from Penn State. John Krallman is ready to forward Bulletin.net's terms and conditions to VT legal. Kevin, Karen and Greg attempted to contact Twilio as a alternative vendor without much success. No phone calls were answered and e-mail responses referred back to their website. We dropped Twilio from consideration.