From Interlock Rochester Wiki

Revision as of 21:17, 20 December 2009

Network Acceptable Use Policy

(This is a draft and has not been approved by legal council)

Preamble

The rules that comprise this Code of Conduct apply to all areas of computer use at Interlock Rochester, including all computers, storage devices, networks, and network devices owned or managed by Interlock Rochester, including any for which Interlock Rochester contracts with a third party. The network infrastructure group is responsible for publishing, and in concert with other members of the community, enforcing this Code.

A variety of computer resources are currently available at Interlock Rochester, from local area networks that provide access to PC, Mac, and *nix based software, to wide area networks such as the Internet. All users are required to follow this Code of Conduct when using these resources.

Any information stored on Interlock computers, or with third party providers under contract by the group, may be stored digitally in multiple live and backup sources and, aside from the usual difficulties of guaranteeing confidentiality, is always subject to "discovery" by means of subpoena. Although the group may seek appropriate legal counsel, users should assume that the group will cooperate with outside agencies investigating violations of local, state, or federal law, including but not limited to copyright infringement, child pornography, or other illegal content.

Violation of the Code can lead to:

• Suspension of membership privileges
• Criminal Prosecution

Rules of Conduct

All Networks

• You may not give out your password.
• You may not let another person use your account.
• You may not copy, retain, or distribute copyrighted or proprietary material without written consent of the copyright holder.
• Individuals who store sensitive or confidential information on their computers are accountable for that information and must make sure the appropriate security (encryption, etc.) is in place.
• Interlock Rochester reserves the right to remove any technical resource (computers, software, network devices, etc.) that it deems a security or network risk

Production and Playground Networks

• You may not possess or attempt to possess another user's password
• You may not use false or misleading identification to gain access to any computing resource.
• You may not use any computing resource that you are not authorized to use.
• You may not use an account for any purpose other than that for which you are authorized.
• You may not change, copy, delete, read or otherwise access files or software without permission of the owner (in the case of user files) or system administrator (in the case of system specific files).
• You may not attempt to prevent others from accessing any computing resource.
• You may not attempt to bypass accounting or security mechanisms, or attempt to circumvent protection schemes or uncover security loopholes. If you find a security loophole, you are required to report it to the Infrastructure Team immediately.
• You may not use any Interlock computing resource, including the network itself, to attack, disable, or gain unauthorized access to any other computing resource either on or off the Interlock network.
• All personally owned equipment connected to the Interlock network must be running an effective and currently updated anti-virus software package and must have all operating system patches installed.
• You may not attempt to compromise the privacy of others. This includes, but is not limited to, the installation of traffic sniffers, key loggers, etc. or any other hardware or software designed to capture information which you are not authorized to have.

Web Access Policy

The Production and Playground networks shall have internet access. The Warzone network shall not. Regardless of network, the following rules apply:

• Use of the Internet for any unlawful purpose is prohibited. This includes, but is not limited to:
  • posting, storing, transmitting or disseminating information, data or material which is libelous, obscene, unlawful, threatening or defamatory, or which infringes the intellectual property rights of any person or entity, or which in any way constitutes or encourages conduct that would constitute a criminal offense, or otherwise violate any local, state, federal, or non-U.S. law, order, or regulation;
  • initiate, perpetuate, or in any way participate in any pyramid or other illegal scheme;
  • participate in the collection of e-mail addresses, screen names, or other identifiers of others (without their prior consent);
  • transmission of child pornography
• No Production Co-located Servers are allowed, with the exception of official Interlock Rochester services.

Data Retention Policy

Interlock Rochester does not intentionally maintain any meaningful records about network users or computers and their associated network traffic unless compelled to do so by a legal order. Any data that is collected for network diagnostic or educational purposes is destroyed as soon as the diagnostic or educational session is complete. The only permanent / semi-permanent records we maintain are:

• DHCP records (stored for the duration of the DHCP lease)
  • This includes a correlation between a MAC address and IP address
• Captive Portal Registration
  • These records may include a correlation between a user account and an associated MAC address
• Door access logs
  • Correlation between a user account and when they unlocked the door to our 1115 Main St E location

Traffic sniffing and logging is allowed on the "warzone" network, however Interlock Rochester itself makes no attempt to maintain these records.

We reserve the right to collect and analyze traffic on Interlock Rochester networks for the purpose of diagnosing and troubleshooting network and bandwidth issues.