[CODE4LIB] SSO, iframes, and Guide on the Side

[Kyle Breneman]

Is anyone out there still using Guide on the Side?  Our single sign-on
(SSO) page won't load within an iframe for security reasons, and we're
trying to find a solution to that for our Guide on the Side tutorials.  If
someone hasn't already authenticated, the tutorial sidebar loads, but the
iframe displays only a blank white page.

Regards,
Kyle Breneman
University of Baltimore

Re: [CODE4LIB] Video content creation policies?

[Kyle Breneman]

Thanks, all, for your responses.  Quick clarification: my main interest
here is in seeing other libraries' policies governing the creation of
public-facing video content, whether marketing videos, tutorials, or
info-lit instruction.  Although I can understand how the discussion has
gone towards whether or not, and how, to caption videos, my interest is in
seeing policies.

On Thu, Dec 3, 2020 at 10:32 AM Kyle Breneman 
wrote:

> I'm looking for policies that govern the library's creation of
> public-facing video content.  Anyone have an internal policy stipulating
> where videos are stored or mandating captioning?
>
> Kyle Breneman
> University of Baltimore
>

[CODE4LIB] Video content creation policies?

[Kyle Breneman]

I'm looking for policies that govern the library's creation of
public-facing video content.  Anyone have an internal policy stipulating
where videos are stored or mandating captioning?

Kyle Breneman
University of Baltimore

[CODE4LIB] Chat sliders and usability/accessibility

[Kyle Breneman]

We just implemented a chat slider across our library's website
, set to open automatically 10 seconds after
page load.  Although the slider seems to be increasing our interactions
with users, I am worried about a negative affect to usability or
accessibility.  NNG clearly says that
pop-ups are generally bad, but the slider isn't quite a pop-up.

Anybody have some authoritative info on the usability and accessibility of
chat sliders?

Regards,
Kyle

Re: [CODE4LIB] Library dashboards

[Kyle Breneman]

Thanks, Scott, Julia, and Danielle!  Anybody else?

On Mon, Jul 6, 2020 at 9:59 AM Kyle Breneman 
wrote:

> I'm looking for examples of inspiring library dashboards that can inform a
> makeover of ours <http://library.ubalt.edu/about-us/>.  (Note: we don't
> have Tableau.)  Also, please respond if you've ever used Dashing
> <http://dashing.io/> to make a dashboard.
>
> Regards,
> Kyle
>

[CODE4LIB] Library dashboards

[Kyle Breneman]

I'm looking for examples of inspiring library dashboards that can inform a
makeover of ours .  (Note: we don't
have Tableau.)  Also, please respond if you've ever used Dashing
 to make a dashboard.

Regards,
Kyle

Re: [CODE4LIB] Piecing together an offline search interface?

[Kyle Breneman]

Thanks, all, for your helpful responses.  It looks like Greenstone may be
the most workable solution for the moment, although I am intrigued by your
article, Julia.

Regards,
Kyle

On Mon, Nov 11, 2019 at 4:36 PM Julia Bauder  wrote:

> Hi, Kyle,
>
> I did almost this exact thing several years ago (created an offline library
> catalog for a prison education program) and wrote it up for the Code4Lib
> Journal:  https://journal.code4lib.org/articles/6225 . The code, based on
> an old version of VuFind, is incredibly outdated by now, but the principles
> should still hold, and it would work for #2 if you indexed article metadata
> rather than book metadata. I've indexed JSTOR metadata into VuFind (not for
> the prison catalog, for a different thing), so I know that works. Somewhere
> (I think) I still have the mapping I used to do that, and I'm happy to
> share it, if you want it.  You would just need to sign a rider with JSTOR
> to get them to give you the files of metadata for JSTOR articles.
>
> Julia
>
>
> 
>
> Julia Bauder
>
> Social Studies and Data Services Librarian
>
> Consulting librarian for anthropology, economics,
>
> education, political science, sociology,
>
> global development studies, and policy studies
>
>
>
> On Mon, Nov 11, 2019 at 1:07 PM Kyle Banerjee 
> wrote:
>
> > On Mon, Nov 11, 2019 at 10:06 AM Kyle Breneman 
> > wrote:
> >
> > > My university has a program that offers classes at a nearby prison, and
> > > this program is about to get a bunch of new laptops.  As many of  you
> > know,
> > > prisons are pretty restrictive and inflexible regarding technology...
> > >
> >
> > My gut reaction would be to schedule a meeting with people who decide
> > what's acceptable.
> >
> > Many things presented as security measures are really compliance issues.
> > This means engaging people can help you avoid problems outright,
> negotiate
> > paths through gray areas in ways that pass muster, and make people who'd
> > otherwise shoot you down part of the solution.
> >
> > Many environments subscribe to "checkbox" security model. Failure to meet
> > required checkboxes or triggering undesirable ones gets you rejected.
> This
> > means your goal -- and the goal you present -- is to get all the right
> > boxes checked. Don't get too hung up on common sense or actual technical
> > merit.
> >
> > You might want to have a couple approaches in your back pocket to propose
> > if the meeting goes really well. I suspect a more realistic expectation
> > would be to sent back to the drawing board. I'd avoid anything people
> might
> > have trouble processing like the plague. People always say no when they
> > don't know what's going on, and that can color future interactions with
> > you. Good luck on your project
> >
> > kyle
> >
>

[CODE4LIB] Piecing together an offline search interface?

[Kyle Breneman]

My university has a program that offers classes at a nearby prison, and
this program is about to get a bunch of new laptops.  As many of  you know,
prisons are pretty restrictive and inflexible regarding technology.  These
laptops cannot be connected to the internet, so it is very challenging to
provide students with opportunities to search across large collections of
content for research (e.g. Wikipedia, any article database).  (A few years
ago, we briefly considered using a small portable server developed by
Libraries Without Borders that hosted offline versions of Wikipedia,
Project Gutenberg, etc., but this solution did not make it past the prison
administration.)

Our reference librarian would like to set these new laptops up so that the
students can have the simulated experience of searching for information,
even if it is offline.

   1. His first idea is to simply put a lot of articles, with full-text
   PDFs, into Zotero on each computer and just use the native search
   functionality of Zotero.
   2. His second idea is to cobble together a handful of disparate
   resources, such as XML files from Medline/PubMed, a version of offline
   Wikpedia, and one or two other collections, then somehow engineer a search
   interface that will simultaneously search across these 2-3 separate
   resources (that are stored locally on the laptop) and display results.

Is there any relatively straightforward way to accomplish #2?  (Notice I
didn't use the adjective *easy.*)  What technologies would be involved?
Regards,

Kyle Breneman
University of Baltimore

[CODE4LIB] DMV Code4Lib Regional Meetup (Aug. 15): Schedule outline available

[Kyle Breneman]

Hello!



A schedule for our upcoming Code4Lib regional meetup is now available on
the wiki. Please have a look at the following page for a general outline of
events.



https://wiki.code4lib.org/MDC/2019#Schedule



Logistic information is also available on this page, so please review for
information on building location, directions to the University of
Baltimore, and more.



Should you have any questions or need more information about the event,
please contact me directly at kbrene...@ubalt.edu.


Regards,

Kyle

Integrated Digital Services Librarian

University of Baltimore

Re: [CODE4LIB] Anyone using Archivematica?

[Kyle Breneman]

Dear John,

Thanks for your detailed email.  I'm still rather fuzzy on two points, and
am hoping you can clarify.  First, it sounds like Archivematica is a server
application (leaving aside the database, which obviously needs to sit on a
server).  Its quite clear from the documentation that running Archivematica
in a Windows environment is not supported.  I'm a little fuzzy on the
component parts here: database on a server, server-side install of
Archivematica, local Archivematica client running (in Linux) on users'
PCs.  Have I captured all of the pieces correctly?  We only have Windows
servers, so we'd need to get a Linux server up for this, right?

Second, you wrote a bit about AIPs and DIPs.  Do I understand you correctly
that both AIPs and DIPs need to be stored somewhere?  That Archivematica
creates these packets or packages, and then passes them into some external
system, such as Atom/ArchivesSpace/ContentDM, etc.?

Regards,
Kyle

On Thu, May 16, 2019 at 2:47 PM John Pellman  wrote:

> 1) Archivematica does indeed use a MySQL/MariaDB database to store data
> related to individual microservices / tasks that are performed within the
> preservation workflow.  The MySQL database also contains the contents of
> the format policy registry.  Specifics about what the database contains can
> be found here
> <https://wiki.archivematica.org/MCPServer#Database_Schema_Diagram>,
> although the contents are most likely out of date.  To the best of my
> knowledge, the MySQL database currently needs to reside on the same server
> as the rest of the Archivematica installation, although I believe that
> Artefactual (Archivematica's principal developer) had ambitions to decouple
> it so that the database and Archivematica could live on separate servers.
>
> 2) Archivematica places an Archival Information Package (AIP) in some form
> of datastore, which can be managed through the storage service console.
> Multiple backends are supported, but my group has only ever used filesystem
> storage.  Dissemination Information Packets (DIPs) are ideally distributed
> via Artefactual's atom <https://www.accesstomemory.org/en/> (caveat, this
> is coming from my memory to wit, which might be off; we don't use atom in
> our library).  Archivematica/atom together are supposed to implement the
> OAIS
> model <https://en.wikipedia.org/wiki/Open_Archival_Information_System>.
>
> My advice regarding Archivematica would be to make sure you have someone
> very tech-savy involved who's comfortable with debugging.  There's a lot of
> technical debt with the project that can be challenging to deal with
> without an IT person or a programmer (unless you hire Artefactual to set it
> up for you).  I'd take a look at the user forum
> <https://groups.google.com/forum/#!forum/archivematica> as well before
> making a decision of whether or not to adopt it.  If you do decide to use
> it, I would choose a version, install it, iron out all the pain points, and
> then stick with that version unless there's a super compelling reason to
> upgrade.
>
> On Thu, May 16, 2019 at 10:49 AM Kyle Breneman 
> wrote:
>
> > Greetings, friendly c4l crew!
> >
> > We're considering using Archivematica and I have several questions to
> which
> > I cannot find answers.  Hopefully one of you can help me out.
> >
> > 1) It seems like the individual Archivematica client depends upon a MySQL
> > database mounted on a server.  Is that right?
> >
> > 2) I gather that Archivematica performs several important digital
> > preservation tasks, but it doesn't seem that Archivematica is intended to
> > be the final destination for the materials themselves.  Is the idea that,
> > at the end of the workflow, what they call Dissemination Information
> > Packets (DIPs) are routed into a separate repository, such as
> > ContentDM/DSpace/ArchivesSpace?
> >
> > Regards,
> > Kyle
> >
>

[CODE4LIB] Anyone using Archivematica?

[Kyle Breneman]

Greetings, friendly c4l crew!

We're considering using Archivematica and I have several questions to which
I cannot find answers.  Hopefully one of you can help me out.

1) It seems like the individual Archivematica client depends upon a MySQL
database mounted on a server.  Is that right?

2) I gather that Archivematica performs several important digital
preservation tasks, but it doesn't seem that Archivematica is intended to
be the final destination for the materials themselves.  Is the idea that,
at the end of the workflow, what they call Dissemination Information
Packets (DIPs) are routed into a separate repository, such as
ContentDM/DSpace/ArchivesSpace?

Regards,
Kyle

Re: [CODE4LIB] Looking for article: about attaching sensors to movable furniture in library

[Kyle Breneman]

Thanks!  It might just be.

On Tue, Jul 17, 2018 at 1:54 PM, Erin Nettifee  wrote:

> Kyle,
>
> Could it be this?
>
> "The Smart Commons: An Experiment in Sensor-Based Space Assessment of
> Learning Environments"
> http://hdl.handle.net/10919/76686
> Cheers,
> Erin
>
> On Tue, Jul 17, 2018 at 1:51 PM Kyle Breneman 
> wrote:
>
> > I'm trying to find an article that I read in the past year or two.  It
> was
> > about doing space analytics by attaching sensors to movable furniture in
> > the library, such as chairs, tables, and rolling whiteboards.  I think
> that
> > it was in an (American) academic library and that the authors used
> Arduino
> > sensors.
> >
> > Any pointers to the source appreciated!
> >
>

[CODE4LIB] Looking for article: about attaching sensors to movable furniture in library

[Kyle Breneman]

I'm trying to find an article that I read in the past year or two.  It was
about doing space analytics by attaching sensors to movable furniture in
the library, such as chairs, tables, and rolling whiteboards.  I think that
it was in an (American) academic library and that the authors used Arduino
sensors.

Any pointers to the source appreciated!

[CODE4LIB] Google Tag Manager: tracking accordion clicks as events?

[Kyle Breneman]

Is anyone out there using Google Tag Manager?  I am trying to set up 2
triggers to track accordion open/close events on this page
,
but I'm having trouble.  Simo Ahava suggested that I try the following:

Open events:
Click / All Elements
Click Element matches CSS selector ul.type2.clear1 > li:not(.minus1),
ul.type2.clear1 > li:not('.minus1') *

Close events:
Click / All Elements
Click Element matches CSS selector ul.type2.clear1 > li.minus1,
ul.type2.clear1 > li.minus1 *

In practice, I DO get a working "accordion CLOSE" trigger with the
following: Click / All Elements Click Element matches CSS selector
"ul.type2.clear1 > li.minus1, ul.type2.clear1 > li.minus1 *" -- but I find
that this trigger fires for clicks *anywhere* within the body of the
accordion element and not just for clicks on the accordion title (ex.
clicks on body text or links within body text).

I'm looking for help on 1) how to make the accordion OPEN trigger work and
2) how to restrict both triggers to just clicks on the accordion title for
open/close.

Regards,
Kyle

Re: [CODE4LIB] Using AWS to store TBs of digital video?

[Kyle Breneman]

1. A combination of both.  Around 60TB already digitized, with over 100TB
more footage still in analog form.
2.  Portable hard drives, a RAID, a Mac Pro tower.
3.  No, we do not have a digitization workflow defined yet.
4.  Define "quick access."  I think that we do want "quick access" unless
we also have something like a local NAS for immediate access to the files
and then AWS strictly as secondary backup copies.

On Thu, Mar 1, 2018 at 12:58 PM, Matthew Patulski 
wrote:

> Hello Kyle,
> The short answer is AWS and other cloud services are Ideal for backing up
> many TB of media like video.  Netflix started their hosting in AWS for
> instance. A few questions:
>
>1. When you say you have 200TB that you would like to digitize are these
>analog tapes to be digitized and you need a destination or you actually
>have 200TB of files.
>2. If it is the latter where does the media sit right now?
>3. If it is the former do you have a digitization workflow defined yet?
>4. Are you wanting to have quick access to this media say for
>scholarship or reuse or is it just about having back ups?
>
>
> With Regards,
>
> *Matthew Patulski*
> listening / thinking / doing
>
> +1 (616) 361-3951 / mrpatul...@gmail.com / linkedin.com/in/mrpatulski
>

[CODE4LIB] Using AWS to store TBs of digital video?

[Kyle Breneman]

​Dear Fellow Techies,

Is anyone out there using AWS (or another solution) to store multiple
terabytes of digital video files?  We have about 200 TB of video footage
which we should digitize for preservation, but the challenge is where to
store all those files.

Regards,
Kyle​

[CODE4LIB] Scheduling tools supporting Exchange server integration?

[Kyle Breneman]

Happy Friday, everyone!  I've been tasked with finding a one-size-fits-all
scheduling tool that will support scheduling research consultations with
reference librarians, as well as writing center and tutoring center
appointments through our learning center.  Everybody seems very interested
in having their availability calendar automatically synchronize with their
Outlook calendar.  Does anyone know of some good scheduling tools that
support Exchange server integration?

Kyle
University of Baltimore

Re: [CODE4LIB] Comparing Barcodes Between 2 Files?

[Kyle Breneman]

Thanks, everyone, for taking the time to reply to my question!  I liked the
simplicity of Kyle Bannerjee's command line suggestion, but stumbled over
how to get the "cat" command to work on my Windows machine and couldn't
figure out how to properly implement GnuWin32, so I went with a variation
of Hannah's solution, using this formula in Excel:

=IF(COUNTIF($C:$C, $A2)=0, "No", "Match!")

On Fri, Nov 10, 2017 at 4:16 PM, Kyle Breneman 
wrote:

> I have 2 Excel files, each with a column of barcodes.  I am supposed to
> determine which, if any, of the barcodes in the first file are also present
> in the second file.  Is writing a short Python program the best way to do
> this, or is there a more efficient way?  (There are about 300 items in the
> first file and about 1,000 items in the second file.)
>
> Regards,
> Kyle
>

[CODE4LIB] Comparing Barcodes Between 2 Files?

[Kyle Breneman]

I have 2 Excel files, each with a column of barcodes.  I am supposed to
determine which, if any, of the barcodes in the first file are also present
in the second file.  Is writing a short Python program the best way to do
this, or is there a more efficient way?  (There are about 300 items in the
first file and about 1,000 items in the second file.)

Regards,
Kyle

Re: [CODE4LIB] Fiscal Continuity IG report redux [silence has been deafening]

[Kyle Breneman]

I am involved in Code4Lib precisely because I cannot afford an ALA/LITA
membership.

Kyle Breneman


On Fri, Jul 21, 2017 at 9:00 AM, Jason Bengtson 
wrote:

> Personally I agree that incorporation presents enough tangible advantages
> that we should seriously consider making that move, and Carol makes an
> excellent point vis-a-vis the journal royalties, no matter how modest they
> may be. I think a sponsor is also a workable model, and I agree with folks
> that have had reservations about ALA/LITA. I have nothing against ALA (far
> from it), but it seems like, from some of the posted comments, ALA/LITA
> sponsorship would come with strings that are potentially limiting or at
> least off putting to some members of the community. When I first became a
> part of Code4Lib I was working in medical libraries, and hadn't even joined
> ALA (I was in the MLA at the time). Along with ASIS&T, one library
> professional organization at a time is all that I'm interested in footing
> the bill for. While I'm currently a member of ALA/LITA, I wouldn't want us
> to create a situation where folks who were solely involved in MLA, SLA, or
> no professional organization at all found it difficult or uncomfortable to
> participate in any of the formal activities of the group.
>
> Best regards,
>
> *Jason Bengtson*
>
>
> *http://www.jasonbengtson.com/ <http://www.jasonbengtson.com/>*
>
> On Fri, Jul 21, 2017 at 7:47 AM, Joseph Montibello <
> joseph.montibe...@dartmouth.edu> wrote:
>
> > I wonder if C4L could just decide to pay for ALA/LITA memberships for the
> > conference organizers? That way it wouldn't be a burden on them. I don't
> > know how much extra that would add to the cost of the conference but I
> > wouldn't think it would be much, relative to the other costs.
> >
> > I don't really have a favorite between ALA / CLIR / OLF / whoever else
> > might be in the mix. Just thought that this might be a way to keep the
> > burdens off of the people and on the broader community, which is gaining
> > the most benefit from the arrangement.
> >
> > Joe Montibello, MLIS
> > Library Systems Manager
> > Dartmouth College
> > 603.646.9394
> > joseph.montibe...@dartmouth.edu
> >
> >
> > On 7/21/17, 8:39 AM, "Code for Libraries on behalf of Elizabeth Leonard"
> <
> > CODE4LIB@LISTS.CLIR.ORG on behalf of elizabeth.leon...@shu.edu> wrote:
> >
> > I concur with Tim's assessment. If folks have limited funds for
> > professional development, they are less likely to become a member of an
> > association that requires them to join another organization as a
> > prerequisite to membership.
> >
> > Elizabeth Leonard
> > 973-761-9445
> >
> >
> > -Original Message-
> > From: Code for Libraries [mailto:CODE4LIB@LISTS.CLIR.ORG] On Behalf
> > Of Tim McGeary
> > Sent: Thursday, July 20, 2017 8:21 PM
> > To: CODE4LIB@LISTS.CLIR.ORG
> > Subject: Re: [CODE4LIB] Fiscal Continuity IG report redux [silence
> has
> > been deafening]
> >
> > I would strongly oppose any requirement that forces membership to ALA
> > / LITA.  This is unnecessary and an expense that is a personal choice and
> > often not reimbursed by libraries. I also think it would servely limit
> who
> > is willing to host / lead conferences.
> >
> > Tim
> >
> >
> > On Thu, Jul 20, 2017 at 7:53 PM Coral Sheldon-Hess <
> > co...@sheldon-hess.org>
> > wrote:
> >
> > > Point of order: *we do not have to incorporate, to have a fiscal
> > sponsor*.
> > > That is a large part of the benefit of fiscal sponsorship. While we
> > > probably *should* have bylaws, none of the potential fiscal
> sponsors
> > > have called that out as a requirement. The requirements they've
> given
> > > us, that come closest to incorporation, are listed below (but I
> > > encourage everyone to read the report in its entirety, because you
> > > might see things in it that I do not):
> > >
> > > From the report section about fiscal sponsorship <
> > > https://na01.safelinks.protection.outlook.com/?url=
> > https%3A%2F%2Fwiki.
> > > code4lib.org%2FFCIG_Report%23Option_2%3A_Obtain_Ongoing_
> > Fiscal_Sponsor
> > > ship_from_an_External_Organization&data=01%7C01%
> > 7Celizabeth.leonard%40
> > > SHU.EDU%7C03c74e330eba49a9c63408d4cfce900d%
> > 7C51f07c2253b744dfb97ca1326
> > > 

Re: [CODE4LIB] [lita-l] Public institutions using Let's Encrypt for security certificates?

[Kyle Breneman]

Thanks for chiming in, Kyle.  I think, in your second-to-last sentence, you
were about to say "impossible."  Is that right?  Also is it difficult to
setup automatic certificate renewal?  For the record, I'm not trying to
bypass any organizational processes here, just doing some legwork in hopes
of handing campus IT a suggestion that will save them money.

Kyle

On Mon, Jun 19, 2017 at 9:51 AM, Kyle Banerjee 
wrote:

> There are a few other catches. For example, you need to be able to run an
> appropriate ACME client and set up automatic certificate renewal since the
> maximum length you can get is 90 days. You also can't get wildcard
> certificates which makes doing things like proxying by host name (e.g.
> ezproxy). Your organization might also care if you bypass their process for
> getting domain names.
>
> kyle
>
> On Mon, Jun 19, 2017 at 5:41 AM, Jonathan Rochkind 
> wrote:
>
> > Here's a thread about per-TLD rate limits being a problem for
> universities;
> > it seems per a post at the end of that thread that letsencrypt might
> exempt
> > your institution from ratelimits, but an official agent of the university
> > needs to submit the request:
> >
> > https://community.letsencrypt.org/t/rate-limiting-at-an-
> > educational-institution/5910/24
> >
> >
> >
> > On Mon, Jun 19, 2017 at 8:27 AM, Kyle Breneman 
> > wrote:
> >
> > > Thanks for that detailed and interesting reply, Jonathan.
> > >
> > > On Sun, Jun 18, 2017 at 12:35 PM, Jonathan Rochkind  >
> > > wrote:
> > >
> > > > Just to clarify, by "Commercial certificates offer stronger proof of
> > > > identity", you mean an "Extended Validation" (EV) certificate.
> > > > https://en.wikipedia.org/wiki/Extended_Validation_Certificate
> > > >
> > > > If you are getting a 'commercial certificate' that is a standard
> > 'domain
> > > > validated' cert instead of an EV cert, you are not getting any
> stronger
> > > > proof of identity than you would from letsencrypt.
> > > >
> > > > The cert used at https://www.ubalt.edu does NOT appear to be an EV
> > cert,
> > > > but an ordinary domain validated one. (Additionally, that particular
> > web
> > > > page serves http: images , triggering browser mixed content
> warnings!).
> > > >
> > > > Same thing for the cert at https://langsdale.ubalt.edu/.
> > > >
> > > > Looking at another Maryland public university:  https://umd.edu/
> > appears
> > > > similar. NOT an EV cert, and additionally serving http assets
> > triggering
> > > a
> > > > mixed content warning.
> > > >
> > > > I'm actually having trouble finding an academic institution, or even
> a
> > > > standard ecommerce site, that DOES use an EV cert.
> > > >
> > > > You can tell it's an EV cert when chrome or Firefox put the name of
> the
> > > > organization in the location bar to the left of URL.  Additionally,
> in
> > > > Firefox, if you click that name, then click the right-chevron 'more
> > info'
> > > > icon, then click "More information", under "Website Identity" it will
> > > list
> > > > an "Owner:" for an EV cert. For an ordinary domain-validated cert, it
> > > will
> > > > list "This website does not supply ownership information" instead.
> > > >
> > > > Here's an example of an EV cert, the cert on digicert.com, a seller
> of
> > > > certs:
> > > >
> > > > https://www.digicert.com/
> > > >
> > > > If your cert is not EV but is just "domain validated", then despite
> it
> > > > being "commercial" it supplies the same level of proof of identity
> as a
> > > > letsencrypt cert -- proof of control of the domain at the time the
> cert
> > > was
> > > > issued, either way.
> > > >
> > > >
> > > >
> > > > On Sat, Jun 17, 2017 at 1:53 PM, Cary Gordon 
> > > wrote:
> > > >
> > > > > We are starting to roll out LetsEncrypt for all of our services and
> > > > > clients who do not use or want commercial certificates.
> > > > >
> > > > > Note that LetsEncrypt offers only domain authentication, in most
> > cases
> > > > > specifically validated by your co

Re: [CODE4LIB] [lita-l] Public institutions using Let's Encrypt for security certificates?

[Kyle Breneman]

Thanks for that detailed and interesting reply, Jonathan.

On Sun, Jun 18, 2017 at 12:35 PM, Jonathan Rochkind 
wrote:

> Just to clarify, by "Commercial certificates offer stronger proof of
> identity", you mean an "Extended Validation" (EV) certificate.
> https://en.wikipedia.org/wiki/Extended_Validation_Certificate
>
> If you are getting a 'commercial certificate' that is a standard 'domain
> validated' cert instead of an EV cert, you are not getting any stronger
> proof of identity than you would from letsencrypt.
>
> The cert used at https://www.ubalt.edu does NOT appear to be an EV cert,
> but an ordinary domain validated one. (Additionally, that particular web
> page serves http: images , triggering browser mixed content warnings!).
>
> Same thing for the cert at https://langsdale.ubalt.edu/.
>
> Looking at another Maryland public university:  https://umd.edu/ appears
> similar. NOT an EV cert, and additionally serving http assets triggering a
> mixed content warning.
>
> I'm actually having trouble finding an academic institution, or even a
> standard ecommerce site, that DOES use an EV cert.
>
> You can tell it's an EV cert when chrome or Firefox put the name of the
> organization in the location bar to the left of URL.  Additionally, in
> Firefox, if you click that name, then click the right-chevron 'more info'
> icon, then click "More information", under "Website Identity" it will list
> an "Owner:" for an EV cert. For an ordinary domain-validated cert, it will
> list "This website does not supply ownership information" instead.
>
> Here's an example of an EV cert, the cert on digicert.com, a seller of
> certs:
>
> https://www.digicert.com/
>
> If your cert is not EV but is just "domain validated", then despite it
> being "commercial" it supplies the same level of proof of identity as a
> letsencrypt cert -- proof of control of the domain at the time the cert was
> issued, either way.
>
>
>
> On Sat, Jun 17, 2017 at 1:53 PM, Cary Gordon  wrote:
>
> > We are starting to roll out LetsEncrypt for all of our services and
> > clients who do not use or want commercial certificates.
> >
> > Note that LetsEncrypt offers only domain authentication, in most cases
> > specifically validated by your control of the server. Commercial
> > certificates offer stronger proof of identity.
> >
> > We recommend commercial certificates for any sites that conduct financial
> > transactions or require HIPPA compliance.
> >
> > Thanks,
> >
> > Cary
> >
> > Cary Gordon
> > The Cherry Hill Company
> > http://chillco.com
> >
> >
> > > On Jun 16, 2017, at 12:34 PM, Kyle Breneman (via lita-l Mailing List) <
> > lit...@lists.ala.org> wrote:
> > >
> > > Apologies for cross-posting...
> > >
> > > Anyone out there working at a public institution that's using Let's
> > Encrypt for security certificates?  I just suggested to our campus IT
> that
> > we switch to using Let's Encrypt.  They told me it would need to clear
> > State of Maryland approval process first, and suggested that it would be
> > helpful to be able to point to other public institutions that are using
> it.
> > >
> > > Regards,
> > > Kyle Breneman
> > > Integrated Digital Services Librarian
> > > University of Baltimore
> > >
> > > To maximize your use of LITA-L or to unsubscribe, see
> > http://www.ala.org/lita/involve/email
> >
>

[CODE4LIB] Public institutions using Let's Encrypt for security certificates?

[Kyle Breneman]

Apologies for cross-posting...

Anyone out there working at a public institution that's using Let's Encrypt
for security certificates?  I just suggested to our campus IT that we
switch to using Let's Encrypt.  They told me it would need to clear State
of Maryland approval process first, and suggested that it would be helpful
to be able to point to other public institutions that are using it.

Regards,
Kyle Breneman
Integrated Digital Services Librarian
University of Baltimore

Re: [CODE4LIB] EBSCO Discovery Service, HTTPS, and mixed content

[Kyle Breneman]

Jeff, thanks for your response.  How do you get to "developer tools"?
Also, how can I learn more about working with the API?  I'd like to pursue
the last solution that you suggested, but I've never worked with API calls
before.

Kyle

On Wed, May 17, 2017 at 4:40 PM, Karlsen, Jeffrey 
wrote:

> There's an EBSCO service issue about this, SI 154875, that you can ask to
> be added to. I actually checked up on this the other day but there was no
> update. Ridiculous, right? If you look in developer tools, you see that the
> jackets come in with http:// explicitly declared.
>
> Will Sakai allow the search box to open results in a new window? Otherwise
> I don't see any solutions unless you were to use the API instead of
> EBSCOhost - if you did that you could change the protocol in the image url
> before it loaded.
>
> --
> Jeff Karlsen
> Librarian & Library Dept Chair
> Sacramento City College
> (916) 558-2583
> www.scc.losrios.edu/library
>
>
>
> -Original Message-
> From: Code for Libraries [mailto:CODE4LIB@LISTS.CLIR.ORG] On Behalf Of
> Kyle Breneman
> Sent: Wednesday, May 17, 2017 1:18 PM
> To: CODE4LIB@LISTS.CLIR.ORG
> Subject: [CODE4LIB] EBSCO Discovery Service, HTTPS, and mixed content
>
> My library uses EDS and we've enabled HTTPS for our main EDS profile.
> Apparently EBSCO is using unsecured content to provide book cover images
> within EDS.  This is a problem for us because we have a customized EDS
> search box within our LMS, but Sakai, which prefers secure content, will
> not load search results from EDS.  Sakai says that there is mixed content.
>
> Has anyone else encountered this mixed content in EDS and been frustrated
> by it? Elegant solutions?
>
> Regards,
> Kyle
>
> P.S. I'm aware that some browsers still allow you to disable protections
> and view unsecured content, but that process is far from intuitive for most
> of our users.
>

[CODE4LIB] EBSCO Discovery Service, HTTPS, and mixed content

[Kyle Breneman]

My library uses EDS and we've enabled HTTPS for our main EDS profile.
Apparently EBSCO is using unsecured content to provide book cover images
within EDS.  This is a problem for us because we have a customized EDS
search box within our LMS, but Sakai, which prefers secure content, will
not load search results from EDS.  Sakai says that there is mixed content.

Has anyone else encountered this mixed content in EDS and been frustrated
by it? Elegant solutions?

Regards,
Kyle

P.S. I'm aware that some browsers still allow you to disable protections
and view unsecured content, but that process is far from intuitive for most
of our users.

Re: [CODE4LIB] Looking for libraries present in their campus' LMS

[Kyle Breneman]

Thank you to all who responded!  It's neat to hear of all the different
configurations.  Seems like most of you are focusing on recommending
content within the LMS, linking to course/subject related guide instead of
working to create a library portal that brings several library services
into the LMS.

On Mon, Jan 23, 2017 at 1:59 PM, Kate Deibel  wrote:

> The UW Libraries does a similar thing. We have a service called the Guide
> Linking App that connects library guides our librarians make for subjects
> or specific courses. The linking app maps a guide's URL to either a
> curriculum code (for subject guides) or a course number (for course
> guides). A REST API is then available for various campus services to use.
>
> In our Canvas course pages, the REST API provides JSON that is used to
> fill in a page on how to use library resources for research. The content of
> the page depends if there's a course guide for that course. If not, a
> subject guide is provided. If there is no subject guide (usually due to a
> new curriculum code having been introduced), a default guide for that
> campus is listed.
>
> The API is also used by a service called MyUW, which is a portal to
> various UW resources. On a student's schedule page, each course gets a
> library link to the most appropriate guide.
>
> All of this is managed through a Django app. Each university service is
> responsible for caching the data as to not overload it.
>
>
>
> --
>
> Kate Deibel, PhD | Web Applications Specialist
> Information Technology Services & Digital Strategies
> University of Washington Libraries
> --
>
> "When Thor shows up, it's always deus ex machina."
>
>
> -Original Message-
> From: Code for Libraries [mailto:CODE4LIB@LISTS.CLIR.ORG] On Behalf Of
> Gary Thompson
> Sent: Monday, January 23, 2017 8:38 AM
> To: CODE4LIB@LISTS.CLIR.ORG
> Subject: Re: [CODE4LIB] Looking for libraries present in their campus' LMS
>
> UCLA uses Moodle, branded as the Common Coollaboration & Learning
> Environment (CCLE). Eight years ago, Library IT tried to develop a Moodle
> block for courses, but that didn't work out -- we didn't have time to
> become effective Moodle developers.
>
> After that failure, we took an approach of cooperating with the campus
> CCLE development team, providing resources and letting them expose
> course-specific resources in the Moodle user interface.
>
> Library currently has three ways to support the CCLE:
>
>  1. A link to library-managed electronic reserves for each course.
>  2. A referral link between a course and the best LibGuide. The link
> simply send the registrar's course ID to our Drupal site, which then
> resolves and redirects to the most specific guide according to these
> priorities:
>   * A course-specific guide if one exists.
>   * Else if the department can be identified, a subject/department
> guide.
>   * Otherwise a generic guide about conducting research.
>  3. A web service exposes data about streaming audio and video, mostly
> for music reserves. The CCLE shows the titles and composers for the
> tracks that have been assigned to the course, along with a link to
> the library's streaming server. The CCLE uses JWPlayer to stream the
> resource within the Moodle course.
>
> So after a false start, we focus on what we know (resources, data, web
> services) and collaborate with the CCLE team so they can integrate the
> resources in the most effective way.
>
> Gary
>
>
> On 1/23/2017 5:38 AM, Kyle Breneman wrote:
> > Does your library have some kind of presence within your campus'
> > learning management system (LMS)?  If so, what does that presence look
> like?
> >
> > Here at the University of Baltimore, we use Sakai and all users have
> > access to a tab, within Sakai, for the library.  The tab leads to a
> > page that is like an alternate portal to library services; very
> > stripped down from what you would get on our website, and in need of
> rethinking.
> >
> > Kyle
>

[CODE4LIB] Looking for libraries present in their campus' LMS

[Kyle Breneman]

Does your library have some kind of presence within your campus' learning
management system (LMS)?  If so, what does that presence look like?

Here at the University of Baltimore, we use Sakai and all users have access
to a tab, within Sakai, for the library.  The tab leads to a page that is
like an alternate portal to library services; very stripped down from what
you would get on our website, and in need of rethinking.

Kyle

Re: [CODE4LIB] Methods to test new site IA?

[Kyle Breneman]

Thanks very much for these helpful suggestions of strategies and tools!  I
appreciate your input.

Kyle

On Wed, Aug 31, 2016 at 11:55 AM, Mumpower, Elizabeth Peele <
epe...@emory.edu> wrote:

> Hi Kyle,
>
>
>  Our UX/UI person has done some card-based IA testing using the
> methodology outlined here:  http://boxesandarrows.com/
> card-based-classification-evaluation/
>
> [http://boxesandarrows.com/files/banda/art_end.gif] //boxesandarrows.com/card-based-classification-evaluation/>
>
> Card-Based Classification Evaluation « Boxes and Arrows<
> http://boxesandarrows.com/card-based-classification-evaluation/>
> boxesandarrows.com
> Mark the intersection of each scenario and the classification item
> selected by the participant. I usually use capital letters for first
> choices and ...
>
> If you have any questions about it, I can put you in touch with him.
>
> Thanks,
>
> Elizabeth Peele Mumpower
> Systems Librarian
> Emory University
>
> 
> From: Code for Libraries  on behalf of Kyle
> Breneman 
> Sent: Wednesday, August 31, 2016 9:48 AM
> To: CODE4LIB@LISTS.CLIR.ORG
> Subject: [CODE4LIB] Methods to test new site IA?
>
> Apologies for cross-listing...
>
> I need some advice on user testing methods.  I've embarked on a project to
> redo our library website's information architecture.  I've sketched out a
> new IA for the site which I want to test with users.  Initially I thought
> that I would just build out the new IA on our development server, then do
> usability testing with users on the dev site.  Now I'm realizing that will
> be a lot of work, and making any changes once its built will also take
> time.  Is there a middle ground?  Are there good ways to do some user
> testing with paper prototypes?  I want to get feedback on whether my
> categories and labels are intuitive and meaningful.
>
> Kyle Breneman
>
> Integrated Digital Services Librarian
>
> University of Baltimore
>
> 
>
> This e-mail message (including any attachments) is for the sole use of
> the intended recipient(s) and may contain confidential and privileged
> information. If the reader of this message is not the intended
> recipient, you are hereby notified that any dissemination, distribution
> or copying of this message (including any attachments) is strictly
> prohibited.
>
> If you have received this message in error, please contact
> the sender by reply e-mail message and destroy all copies of the
> original message (including attachments).
>

[CODE4LIB] Methods to test new site IA?

[Kyle Breneman]

Apologies for cross-listing...

I need some advice on user testing methods.  I’ve embarked on a project to
redo our library website’s information architecture.  I’ve sketched out a
new IA for the site which I want to test with users.  Initially I thought
that I would just build out the new IA on our development server, then do
usability testing with users on the dev site.  Now I’m realizing that will
be a lot of work, and making any changes once its built will also take
time.  Is there a middle ground?  Are there good ways to do some user
testing with paper prototypes?  I want to get feedback on whether my
categories and labels are intuitive and meaningful.

Kyle Breneman

Integrated Digital Services Librarian

University of Baltimore