Security on Work You Can Explain

Protect Student Data Before You Share Anything with AI

Thu, 03 Sep 2026 00:00:00 -0500

Before sending a document, screenshot, log, dataset, or source file to an AI service, reduce the request to the minimum permitted evidence. Replace real values with synthetic equivalents when possible. Remove direct and indirect identifiers. Inspect filenames, metadata, and surrounding context. Then review the exact outgoing input.

If the task still requires restricted or sensitive material after that pass, do not treat redaction as automatic permission. Use an approved institutional route or ask an authorized person.

Choose an AI Agent by Where the Work Runs

Thu, 30 Jul 2026 00:00:00 -0500

An AI agent is a software system that uses a model, instructions, context, and possibly tools to pursue a bounded task. Choose one by where the work and execution need to live. A local or host-attached agent can reach selected files and tools on your computer. A managed cloud agent can continue without your computer but requires permitted material to be available in its cloud environment or connected services. A messaging application may control either kind, so it does not tell you where the work runs.

Set Up a Safe Mac for College

Thu, 30 Jul 2026 00:00:00 -0500

A safe college Mac has a known owner, an understood administrator path, a recoverable encrypted startup disk, and current software. Establish that state before installing course tools. The student should perform the checks and keep a non-secret record that another person can understand.

Do not remove management profiles, accounts, or security controls from a school-owned or institution-managed Mac. Follow the institution’s instructions and contact its IT service when ownership or policy is unclear.

Set Up Linux Users, Groups, and sudo Safely

Thu, 30 Jul 2026 00:00:00 -0500

Use a normal user account for daily work and elevate only a command you understand. Linux identifies processes and files with user and group IDs. sudo can authorize a user to run a command as another identity, commonly root; it does not make an unfamiliar command safe.

Account tools, administrative groups, and initial-install behavior vary by distribution. Inspect the installed system and its official documentation before adding users, changing groups, or editing sudo policy.

Understand Linux Filesystem Permissions

Thu, 30 Jul 2026 00:00:00 -0500

Linux filesystem access begins with identity, ownership, and mode bits. For a given file, the system selects the owner, group, or other permission class and checks the requested operation. Directories use the same r, w, and x letters, but their effects differ from regular files.

Learn to inspect this model before changing it. Do not respond to “Permission denied” with sudo or chmod 777.

Read a long listing

In a folder you own, run:

BitLocker and Recovery Keys Without Regret

Fri, 24 Jul 2026 00:00:00 -0500

Drive encryption protects data only when recovery is also planned. Before a hardware change or boot failure asks for a key, verify whether encryption is enabled, who controls it, where the matching recovery key is stored, and how the student can reach it from another device.

Do not disable encryption or trigger recovery as a beginner test.

Distinguish the Windows features

Microsoft describes two related experiences:

Device Encryption is available on a wider range of supported devices, including some running Windows Home, and may enable automatically.
BitLocker Drive Encryption provides advanced management on Windows Pro, Enterprise, and Education editions.

See Microsoft’s current Device Encryption documentation and BitLocker overview.

How to Review AI-Generated Code

Fri, 24 Jul 2026 00:00:00 -0500

Treat AI-generated code as an untrusted proposal. Read every line before execution, compare it with the specification, identify inputs, outputs, assumptions, dependencies, and effects, then test expected, boundary, and invalid cases.

Do not accept code you cannot explain. Passing one sample is evidence about one sample, not proof of general correctness or safety.

Confirm that generated code is allowed

Course policies can distinguish among explanation, completion, code generation, review, and disclosure. Before generating or using code, determine:

Never Blindly Paste a Command from the Internet or an AI

Fri, 24 Jul 2026 00:00:00 -0500

Never run an unfamiliar command merely because a webpage, classmate, or AI assistant presents it confidently. Before execution, identify every segment, input, target, privilege, network action, and possible secret exposure. Verify the behavior in official documentation and define how you will inspect the result.

If you cannot explain a segment, do not run the command yet. Ask for an explanation, not reassurance.

Treat a command line as a small program

A line can contain more than one operation. Shell operators may:

Set Up a Safe Windows Account for College

Fri, 24 Jul 2026 00:00:00 -0500

A safe college Windows setup begins with accountable ownership and recovery. The student should know which account owns the device, whether the school manages it, which account approves administrator changes, how Windows Hello relates to the account password, and how to recover access.

Settings vary by Windows version, edition, hardware, and institutional policy. Do not remove management or accounts from a school-owned device.

Identify ownership and management

Record:

Device owner:
Windows edition and version:
Primary daily account:
Account type: Microsoft | local | work/school
Administrator account:
Work/school account added:
Device management enrolled:
IT contact:

A personal Microsoft account, local Windows account, and institutional work/school account have different roles. Adding a work/school account to an application does not always mean the same thing as enrolling the device in management.