Why YSK: It appears several Lemmy Instances are flagged as suspicious and at least 1 instance intentionally using the name of ransomware. A couple of the big enterprise monitoring suites (Fortiguard, ZScaler) will flag your account and may end up with you being pulled into an office for an explanation, or worse.

TL;DR: Keep browsing to your local instance at work for now.

  • LostDeer@infosec.pub
    link
    fedilink
    arrow-up
    1
    ·
    1 year ago

    Don’t use company computers for personal stuff, it all gets logged and can be used against you at the very least as evidence that you weren’t working come performance reviews.

    • givesomefucks@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      It’s fucking insane people don’t know this in 2023.

      Work computers are for work, and pretty much every employer monitors what you do on it.

    • uberrice@feddit.de
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      Depends on your work. I agree with you, but for example my work is different.

      Yes, we have managed devices as well, but my department specifically went for unmanaged devices. Just plain old laptops. Install whatever OS you want, do whatever you want. I only have the base windows install on there for some compatibility reasons, I mostly just use PopOS.

      And we’re also explicitly allowed to browse private content - as long as the work gets done and we stay in budget, do whatever.

      • ludwig@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        Do the other departments use managed devices? IT might get pretty mad if your department went over them and bought computers themselves, lol.

        It’s not optimal from a security and legal point of view.

        • uberrice@feddit.de
          link
          fedilink
          arrow-up
          0
          ·
          1 year ago

          IT specifically has an option for unmanaged devices, exactly for developers like me :)

          • ludwig@lemmy.world
            link
            fedilink
            arrow-up
            0
            ·
            1 year ago

            Alright. Seems reasonable as long as the devices are sandboxed from the company network and resources.

            • uberrice@feddit.de
              link
              fedilink
              arrow-up
              0
              ·
              1 year ago

              They aren’t, and our private phones are also connected to the network ;)

              But then again, it’s a fairly large organization vpn’d up over multiple locations, with server farms in different VLANs and so on, so the network we usually access when working are in a different subnet.

              I do know what you mean though - it really depends on what the company does. Prior, I worked at a company that developed and manufactured hardware cryptography devices - I learned proper security procedures there :) our ‘actual work computers’ weren’t even connected to the Internet, and the unmanaged laptops accessed the same WiFi guests would access that, well, only went to the Internet. Just wpa2.

      • theDoctor@lemmy.sdf.org
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        If you are on their network they can see what you are doing. At the end of the day, the business will protect itself.

        Do what you want at your own risk. But never assume that any company is on your side.

        • uberrice@feddit.de
          link
          fedilink
          arrow-up
          0
          ·
          1 year ago

          Of course they can. That’s why I usually use my phone as a hot spot when I’m browsing private stuff ;)

    • lordkuri@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      I had a lady in the marketing department open a ticket with us many years ago when ILoveYou was running rampant and we had blocked yahoo mail, gmail, etc on our corporate network and she was PISSED because “I need to access that for my other job!”. Yes, she put that in the ticket. That was a brief discussion with her manager and a resume generating event for her.

  • inclementimmigrant@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    1 year ago

    Why in the heck would anyone browse any social media on your company machine?

    That’s the whole reason I left Reddit because it forced me to have to use Reddit on a computer and it’s one of the first things I remind new hires not to use social media on company property, it’s always monitored from keyboard to Internet connection.

    Good lord people…

    • frenchyy94@feddit.de
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      Good thing I live in a country where it’s forbidden (unless everyone approves of it, which if course almost never happens) that they monitor everything.

      Sure internet movement could be looked up but even that needs to be because if a specific reason. They cannot just randomly look up everyone’s browser history.

  • dm_me_your_feet@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    1 year ago

    This does not apply for most european users. Source: I am the one who gets these requests and anyone who isn’t a judge gets jack shit. Go pound sand. Anything else would be illegal under privacy and work laws. Even police wont get ANYTHING (judge will reject it) if the crime in question isn’t worth at least 2 years of jail time.

    Suspected malware domains just get blocked, no further action will ever take place.