« The great HD-DVD protest | Weekly CCA database reset changed? » |
In early November of last year, I found an interesting letter from the Office of the UCI Dean of Students in my mailbox.
With that letter, I was informed about a complaint that alleges that I violated "several University of California, Irvine policies."
A scanned-in copy of the letter is here. Besides me, two other individuals also got such a letter. We apparently were named as "co-conspirators" in the complaint.
The following day, I got a copy of the complaint. It was about my involvement in exposing security flaws in the Cisco Clean Access product, and writing about it, on security mailing lists as well as here on my blog.
Reading through the complaint, it very quickly became clear that it was frivolous and utterly bogus. Besides attacking my free-speech rights, and my rights to freely perform security research, it also contained sections I consider libelous and slanderous.
Subsequently, we informed several UCI School of Information and Computer Sciences faculty, including the school's graduate dean, about this complaint. They then had meetings with the person in the Dean of Students office responsible for such complaints, in an effort to dismiss the complaint. Other administrative personnel also intervened on our behalf.
And quite frankly, the complaint is so obviously bogus that it should have been dismissed immediately. It seems that the Student Judicial Affairs people at the Dean of Students' office mostly deal with cheating undergrads and the like, and not with graduate students who perform legitimate security research. Freedom of research is a hallmark of a university, and administrators in an auxiliary service like UCI Housing do not have any rights to limit research just because they don't like the outcome
Fact is that it is not possible in this Universe to reliably detect the operating system of a remote computer. If Resnet personnel thought otherwise when they bought CCA, they obviously didn't do their due diligence. And when I point that out, they react with bullying... Too bad for them that I am not intimidated by bullying
Anyway, after a meeting in December with the Acting Director, Student Judicial Affairs, in the Dean of Students' office, it became clear that they wouldn't be going forward with the complaint, and a couple of days ago I got the official word:
Due to our discussion last Fall 2006, I determined that in the interest of all parties, we will not pursue a violation of university policies.
That was of course the only outcome possible, and I hope that in the future, the Dean of Students office dismisses such obviously frivolous and bogus complaints right away, without the need to have students and faculty spend a lot of time explaining the bogus nature of such complaints.