People at universities travel widely and unpredictably

July 15, 2024

Every so often, people make the entirely reasonable suggestion that if one day you see a particular person log in from locally and then a few days later they're logging in from half way around the world, perhaps you should investigate. This may work for many organizations, but unfortunately it is one of the ways in which universities are peculiar places. At universities, a lot of people travel, they do it a fair bit (and unpredictably), and they go to all sorts of strange places, where they will connect back to the university to continue doing work (for professors and graduate students, at least).

There are all sorts of causes for this travel. Professors, postdocs, and graduate students go to conferences in various locations. Professors go on sabbatical, or go visit another university for a month or two, or even go hang out at a company for a while (perhaps as a visiting researcher). Graduate students also go home to visit their family, which can put them pretty much anywhere in the world, and they can also visit places for other reasons.

(Graduate students are often strongly encouraged to keep working all the time, including on holiday visits to their family. Even professors can feel similar pressures in the modern academic environment.)

Professors, postdocs, and graduate students will not tell you all of this information ahead of time, and even if you forced them to share their travel plans, it would not necessarily be useful because they may well have no idea how they will be connecting to the Internet at their destination (and what IP address ranges that would involve). Plus, geolocation of Internet IP addresses is not particularly exact or accurate, especially if you need to do it for free.

One corollary of this is that at a university, you often can't safely do broad 'geographic' blocks of logins (or VPN connections, or whatever) from IP address ranges, because there's no guarantee that one of your people isn't going to pop up there. The more populous the geographic area, the more likely that some of your people are going to be there sooner or later.

(An additional complication is people who move elsewhere (or are elsewhere) but maintain a relationship with your part of the university, and as part of that may to visit in person every so often. These people travel too, and are even less likely to tell you their travel plans, since now you're a third party to them.)


Comments on this page:

By Hauke Fath at 2024-07-17 06:09:43:

You would think university IT staff understood this. But a few years ago, our postmaster disabled my bosses' mail account because he had logged in and sent mail from several IP addresses in Morocco within a couple of hours, while attending a conference.

Without notifiying anybody of the administrative block, leaving us groping in the dark for a technical issue...

By MikeP at 2024-07-25 18:59:36:

We had pretty good luck with "3 countries in 24 hours" locks, but yes. I thought about writing a proper velocity calculator, realized I don't have a BCS/BMath for a reason, and went back to just counting.

By Perry Lorier at 2024-07-28 08:58:30:

There's the concept of "impossible travel" (https://techcommunity.microsoft.com/t5/microsoft-defender-xdr-blog/detecting-and-remediating-impossible-travel/ba-p/3366017), basically figure out the distance between locations and see if you can get between them with normal air travel, if you can't, then it's suspicious.

As the article points out this can be complicated if there are multiple devices (one left at home, and one at the far location) or if people are playing games with VPNs.

Written on 15 July 2024.
« The Firefox source code's 'StaticPrefs' system (as of Firefox 128)
My self-inflicted UPS and computer conundrum »

Page tools: View Source, View Normal.
Search:
Login: Password:

Last modified: Mon Jul 15 22:11:08 2024
This dinky wiki is brought to you by the Insane Hackers Guild, Python sub-branch.