Defining Responsibilities - Found Message

Sent January 2005:

This email again re-iterates the responsibilities of the webmaster as well as cautions against the unsafe credit card transactions on the site. Again, if you registered via credit card for the 2005 Banga Sammelan site I would review your statements.

Chairperson North American Bengali Conference 2005,

As discussed I have designed and built a completely new NABC2005.org website. I would like to confirm a few things with you first:

First and foremost, and I hope you will understand, that I will take no responsibility or accept any liability regarding any credit card issues that have arisen, is arising, and will arise with the website. I have warned the NABC2005 staff a number of times regarding the unsafe practices that were employed via the website.

Furthermore, I have, on numerous occasions offered my advice regarding the best and safest practices for the website. My most recent email was sent while you were in India and, understandably, out of reach. Since no other member of the NABC 2005 committee addressed any items on my action item list (to start the new webiste), I can only assume they are comfortable with the status quo.

Also, as we had discussed prior to your going to India, I want to confirm that I retain full autonomy & control on the site. That is, I maintain complete control over the layout, design, and updating.

In any event, please review the beta site, located at:
http://www.randomsite.com/banga

I would say about 75% of the site is finished, with 3 areas to complete:
1. minor cosmetic changes.
2. The TRAVEL, BUSINESS OPS, and HOTEL sections need completing.
2. testing with the ISS Soft for the new registration page design.

I desperately need help with the TOURISM section of the TRAVEL area.

That is all,

webmaster

Recommendations not taken and a response

Sent December 2004:

Hello All,

I have noticed with the recent emails that there is some confusion regarding the nabc2005.org website. I would like to clarify my role regarding the website upon which Chairperson North American Bengali Conference 2005 and I agreed. Once again please review the email which I had sent Monday, December 27th, which you can find below.

The understanding I had with Chairperson North American Bengali Conference 2005 regarding the website was simple: A completely new site would be built (this included finding a new hosting company) and the existing development company would be relieved of its duties. At no time was it stated that I was to take over (and/or administrate) the existing site. Furthermore, there was no exchange between Chairperson North American Bengali Conference 2005 and myself that I was to partner with the company that is currently developing the site, nor was it expressed that I was to initiate site updates.

Again, please review the email below. In the latter half of that email, I outlined the steps that were required in order for me to begin development of a COMPLETELY NEW site. I had noted that these steps were to expressly be taken before I could begin designing the new site.

I, along with those that have graciously offered to help me, are anxious to begin work on this project. Please let me know when I can begin.

Regards and Happy New Year,

webmaster

Registrants put into the line of fire

Sent December 2004:

This email addresses a major failure by various committee members to ensure the security of the website and the registrants to Banga Sammelan 2005. The webmaster was told, when discussing this issue, that if he remained quiet it wouldn't become a problem. Again, the bold text represents individuals who probably should be named, but won't be.

Please note, that none (that's NOT ONE) of the recommendations were executed. As such, registrant personal information, including credit cards, remained on an unsecure server far longer than they should have been.

Guests who registered online might want to call Banga Sammelan 2005 and find out if their information was compromised.

The new webmaster made it abundantly clear that he would not be involved with registration or the registration form on the site. He would only redesign the site and have another vendor finish the backend coding.

Hello,

As per my discussions with various committe members on December 22, 2004, please review the following information regarding the NABC 2005 website:

First and foremost, please note that the website for credit card transactions STILL remains unsecured. This is an item I had addressed approximately 6 months ago and, to my knowledge, has not been fixed. You will note that when arriving at the registration page, the URL reads http://www.nabc2005.org/Registration.asp where it MUST READ

https://www.nabc2005.org/Registration.asp

You will notice that the second URL has an "S" after the http. This signifies a secure (SSL protected) connection between the user and the server. I had sent a number of recommendations regarding the purchase and implementation of an SSL certificate. To my knowledge, this has not been executed.

Furthermore, you are currently sitting on a MAJOR liability, specifically the retention and recording of all Credit Card numbers. As you may remember, I vehemently opposed the practice of storing credit card information, as it could open NABC 2005 and its organizers up to major lawsuits. Not only do you have this information available online, this information remains in UNSECURED databases. Any hacker can access this information.

I cannot stress how important it is to change this process as soon as possible.

To continue, as decided by committe members with my recommendations, the development of the website would shift completely to me. As such, the following needs to be completed right away (this list is subject to additions at any time):

1. Have all registrant information (online registration) shift over to us as soon as possible. Specifically have the database moved into our custody.
2. Determine where the domain name, www.nabc2005.org, is registered.
3. Purchase new hosting. I recommend www.hostway.com, as they have proven themselves to be a leader in the industry. They also use Chase Manhattan as an e-commerce provider which can help our transition.
4. Inform all site visitors that www.nabc2005.org will be offline for a few weeks in order to update the site.
5. Inform the existing development company that they have been removed from the project.

When I am notified that complete control of the www.nabc2005.org has been shifted to me I will begin the process of developing the new site. As agreed upon by Chairperson North American Bengali Conference 2005, I will have complete autonomy to develop the site.

You are welcome to contact me should you have any questions or comments.

Regards,

webmaster

Before and After

The image below is a screen capture of what the NABC 2005 site looked like prior to its overhaul. Please note that this site had not changed for more than a year, until the new webmaster was asked to redo it. Click on image to see a larger view.




The image below represents the redesign of the site. This was created after a deadline of only 2 weeks. It was also after the NABC2005 committee was unable to push the original site developers to update. Click on image to see a larger view.

Response to "Broken Contract"

Sent December 2005:

This email is in response to the previous correspondence. Again, names have been changed in order to avoid backlash, otherwise there have been no other changes. Please note, as of April the receipt for the Katrina Fund donation still has not been received.

Chairperson North American Bengali Conference 2005,

Thanks for finally responding to my invoice. To reiterate, you are now offering me $1000 for my $3000 invoice to which we both agreed prior to my starting the NABC 2005 website. One of your reasons for discounting my fee, you write, is that the Sammelan ran at a deficit. I have been informed that the Sammelan lost money due to a serious lack of a planning and poor management.

Although I strongly feel that I kept my side of the bargain and believe that I am justifiably owed the full amount of the invoice, I cannot in good faith accept your decision. To that end, please make out a check for $1000 to the "American Red Cross - Katrina Fund" and send me a copy of the canceled check. I believe that will be an acceptable use of the money and, concurrently, will close my account with NABC/Banga Sammelan.

To address the other concerns in your email, I question the necessity of your untruths in order save a few thousand dollars. I can comfortably say that the accusations in your email below are simply false, which I can prove with the numerous correspondences I have from you and your folks. You and many of the committee members have known me from my childhood and I have considered many of you family friends. I used to have a lot of respect for you and really was not prepared for such absurdity. I, unfortunately, know better now.

Should you folks question again why participation of the second generation is so lukewarm, you may have found your answer.

Webmaster

Broken Contracts and Petty Excuses

Received December 2005:

This email reneges on a contract to pay the webmaster of NABC2005 $3000. Please note, said webmaster built site only after being approached by NABC2005 AND only after certain conditions were met. These emails have been slightly altered only to prevent backlash. Individuals involved know who they are.

Dear webmaster,

You know we had very rough time to post web material and money transactions in particular.After your father's illness you have abandoned the work and we had to go back to original developer.He stopped the site for few days and claimed he had to reconstruct everything from begining.So,committee members were very unhappy about this web sites and evantually declined to pay your invoice in full.Moreover Sammelan is running in deficit.So committee empowered me to offer you $1,000 for your services.

Thanks for your cooperations.

Chairperson North American Bengali Conference 2005