Now on ScienceBlogs: Why no, Virginia. I'm Not a Mexican...

Seed Media Group

Collective Imagination

Uncertain Principles

Physics, Politics, Pop Culture

Search

Profile

"Uncertain Principles" features the miscellaneous ramblings of a physicist at a small liberal arts college. Physics, politics, pop culture, and occasional conversations with his dog.

You've read the blog, now try the book: How to Teach Physics to Your Dog will be published December 22nd by Scribner.

Chad Orzel "Prof. Orzel gives the impression of an everyday guy who just happens to have a vast but hidden knowledge of physics." (anonymous student evaluation comment)

Emmy, the Queen of Niskayuna Emmy is a German Shepherd mix, and the Queen of Niskayuna. She likes treats, walks, chasing bunnies, and quantum physics.

Donors Choose challenge link

Recent Posts

Recent Comments

Greatest Hits

Chateau Steelypips

Blogroll

Scientists

Academics

Interesting People

Books

Punditry

Categories

Archives

« Academic Autonomy: How Much Freedom Do Post-Docs Have? | Main | links for 2009-06-30 »

Total Proposal Security

Category: FundingPersonalPhysics
Posted on: June 29, 2009 2:56 PM, by Chad Orzel

The National Science Foundation uses a computerized proposal-and-report submission system called FastLane. When I first submitted a proposal, this required three things to log in: your last name, your Social Security number, and a password of your choice.

Sometime in the last year, they stopped using the SSN, and switched to a randomly generated nine-digit ID number. Which they sent me in a massage that somehow manages not to include the strings "NSF," "FastLane," or "National Science Foundation." "ID" by itself returns too many results in GMail to be useful.

On the bright side, at least I can be confident that nobody else is going to log in and submit the final project report that's due...

Physical Science

Share this: Stumbleupon Reddit Email + More

TrackBacks

TrackBack URL for this entry: http://scienceblogs.com/mt/pings/113731

Comments

1

There should be a link somewhere on the FastLane home page that will let you request the secret number. At least there was three months ago when I had to submit an interim report on my NSF grant. They sent me the secret number in a message with the subject "Requested NSF ID". I looked for the message in which they originally sent me the number, but I couldn't find it.

Posted by: Eric Lund | June 29, 2009 3:24 PM

2

Dear Professor Orzel,

We have not received your expected final project report. We have, however, received a new grant proposal requesting funds for the following items:

Cheese
Bunnies
Bacon
Chew Toys

We are unclear on how these items are relevant to the research funded under your current grant. One reviewer has recommended that you investigate whether someone else with access to your computer and/or residence may have intercepted a recent NSF e-mail with your new password, and used this to file a fraudulent proposal under your name.

Best wishes,

NSF

Posted by: Emory Kimbrough | June 29, 2009 3:24 PM

3

There should be a link somewhere on the FastLane home page that will let you request the secret number.

I couldn't find a link, but they did have a phone support number, and after ten minutes on hold, I got it taken care of.

I still don't know what they did with the original message that GMail couldn't find it. Google's usually pretty good at that sort of thing, you know?

Posted by: Chad Orzel | June 29, 2009 3:27 PM

4

They sent you a massage?! How does that work? Does the NSF have a side deal with craigslist?

Sorry, couldn't resist.

Mike.

Posted by: NoAstronomer | June 29, 2009 5:02 PM

5

Chad, I just checked my email client, and my version of the NSF message (January 2008) actually had the subject line "Requested NSF ID". Who knows the mysteries of gmail....

Posted by: Doug Natelson | June 29, 2009 6:09 PM

6

And yet FastLane is the crown jewel of federal online grants management. You could have to use grants.gov.

Posted by: Kate W. | June 29, 2009 6:11 PM

7

That sounds like "security theater" (as Bruce Schneier calls it). Sending the id afterwards using non-secure email is stupid. You should generate it in real time, during an encrypted session.

Posted by: Lassi Hippeläinen | June 30, 2009 1:16 AM

Post a Comment

(Email is required for authentication purposes only. On some blogs, comments are moderated for spam, so your comment may not appear immediately.)





ScienceBlogs

Search ScienceBlogs:

Go to:

Advertisement
Collective Imagination
Visit the Collective Imagination blog
Advertisement
Collective Imagination

© 2006-2009 Seed Media Group LLC. ScienceBlogs is a registered trademark of Seed Media Group. All rights reserved.

Sites by Seed Media Group: Seed Media Group | ScienceBlogs | SEEDMAGAZINE.COM