<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: ARSL conference</title>
	<atom:link href="http://www.librarian.net/stax/2401/arsl-conference/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.librarian.net/stax/2401/arsl-conference/</link>
	<description>putting the rarin back in librarian since 1999</description>
	<lastBuildDate>Sat, 11 Feb 2012 18:14:14 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
	<item>
		<title>By: Catherine</title>
		<link>http://www.librarian.net/stax/2401/arsl-conference/comment-page-1/#comment-120345</link>
		<dc:creator>Catherine</dc:creator>
		<pubDate>Thu, 25 Sep 2008 23:13:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.librarian.net/?p=2401#comment-120345</guid>
		<description>Dale, thank you for pointing out that massive security hole!  I was completely aghast a couple of months ago when I got a routine (unsolicited) membership renewal reminder from ALA that included my member-login-numerical-username-whatsis that ALA uses, &lt;em&gt;and my password&lt;/em&gt;, right out there for God and everyone to see.

Note to ALA: your member profile database includes a &quot;password hint&quot; field.  This might be a great time to use it, maybe?

It never occurred to me to write to ALA and object, however, partly because who exactly was I going to write to? So now I&#039;m complaining about it on poor Jessamyn&#039;s blog, which is about as ineffective as writing to ALA about it, but more satisfying somehow.</description>
		<content:encoded><![CDATA[<p>Dale, thank you for pointing out that massive security hole!  I was completely aghast a couple of months ago when I got a routine (unsolicited) membership renewal reminder from ALA that included my member-login-numerical-username-whatsis that ALA uses, <em>and my password</em>, right out there for God and everyone to see.</p>
<p>Note to ALA: your member profile database includes a &#8220;password hint&#8221; field.  This might be a great time to use it, maybe?</p>
<p>It never occurred to me to write to ALA and object, however, partly because who exactly was I going to write to? So now I&#8217;m complaining about it on poor Jessamyn&#8217;s blog, which is about as ineffective as writing to ALA about it, but more satisfying somehow.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dale</title>
		<link>http://www.librarian.net/stax/2401/arsl-conference/comment-page-1/#comment-120313</link>
		<dc:creator>Dale</dc:creator>
		<pubDate>Tue, 23 Sep 2008 19:21:02 +0000</pubDate>
		<guid isPermaLink="false">http://www.librarian.net/?p=2401#comment-120313</guid>
		<description>I have one to add to your list of things not normal: it is not normal (nor wise) to send your members emails with their profile/account usernames and passwords in plain text. It&#039;s even more abnormal to write back to a member who objects to this, noting that since some librarians can&#039;t handle technology (i.e.- can&#039;t remember their passwords), it&#039;s OK to compromise the privacy of those who can. It is normal, or so I would assert, for those members to have finally had enough and leave the organization after dutifully supporting it for years.

Have to agree with your comments on interface design, too. It&#039;s bad enough when a minor vendor (sorry, Follett) has bad interfaces; it&#039;s pathetic when the vendor is large and has legion large customers who pay beaucoup maintenance. Our ILS has staff clients that literally haven&#039;t been redesigned since the mid-1990s, and they weren&#039;t exactly well built then.</description>
		<content:encoded><![CDATA[<p>I have one to add to your list of things not normal: it is not normal (nor wise) to send your members emails with their profile/account usernames and passwords in plain text. It&#8217;s even more abnormal to write back to a member who objects to this, noting that since some librarians can&#8217;t handle technology (i.e.- can&#8217;t remember their passwords), it&#8217;s OK to compromise the privacy of those who can. It is normal, or so I would assert, for those members to have finally had enough and leave the organization after dutifully supporting it for years.</p>
<p>Have to agree with your comments on interface design, too. It&#8217;s bad enough when a minor vendor (sorry, Follett) has bad interfaces; it&#8217;s pathetic when the vendor is large and has legion large customers who pay beaucoup maintenance. Our ILS has staff clients that literally haven&#8217;t been redesigned since the mid-1990s, and they weren&#8217;t exactly well built then.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jessamyn</title>
		<link>http://www.librarian.net/stax/2401/arsl-conference/comment-page-1/#comment-120311</link>
		<dc:creator>jessamyn</dc:creator>
		<pubDate>Tue, 23 Sep 2008 15:06:06 +0000</pubDate>
		<guid isPermaLink="false">http://www.librarian.net/?p=2401#comment-120311</guid>
		<description>This was on the old home page and it was the &quot;member and customer service center&quot; link in the old footer. I don&#039;t even see a similar link on the new site, so maybe it&#039;s all okay now?</description>
		<content:encoded><![CDATA[<p>This was on the old home page and it was the &#8220;member and customer service center&#8221; link in the old footer. I don&#8217;t even see a similar link on the new site, so maybe it&#8217;s all okay now?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jenny Levine</title>
		<link>http://www.librarian.net/stax/2401/arsl-conference/comment-page-1/#comment-120309</link>
		<dc:creator>Jenny Levine</dc:creator>
		<pubDate>Tue, 23 Sep 2008 05:15:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.librarian.net/?p=2401#comment-120309</guid>
		<description>Hi, Jessamyn - can you tell me which link on the home page 404ed for you? The new website went live today and it took a little while for links to rectify themselves, so I want to make sure this one got resolved.

As always, we appreciate your feedback.

Thanks,
Jenny</description>
		<content:encoded><![CDATA[<p>Hi, Jessamyn &#8211; can you tell me which link on the home page 404ed for you? The new website went live today and it took a little while for links to rectify themselves, so I want to make sure this one got resolved.</p>
<p>As always, we appreciate your feedback.</p>
<p>Thanks,<br />
Jenny</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: james fox</title>
		<link>http://www.librarian.net/stax/2401/arsl-conference/comment-page-1/#comment-120305</link>
		<dc:creator>james fox</dc:creator>
		<pubDate>Mon, 22 Sep 2008 19:52:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.librarian.net/?p=2401#comment-120305</guid>
		<description>good to see you keeping everyone honest... all caps... love it!.</description>
		<content:encoded><![CDATA[<p>good to see you keeping everyone honest&#8230; all caps&#8230; love it!.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

