Company Wifi and VPNs

[Anonymous]

Anonymous wrote:

Anonymous wrote:Related question for DC. Uses a work laptop and uses it solely for work. However the outlook email is also on personal phone along with several other personal email account (work doesn’t provide phones). Can any internet searches from phone be seen from work email in search history?

Bump. Can anyone answer this? They don’t issue work phones.

No, they can not. If they could, you could sue the ever loving sh*t out of them for invading your privacy. You can't have access to someone's search history just because their phone connected to your wifi. You think you can legally look at the pics on your neighbor's computer because you can see their wifi and guessed their password? How about their banking info? What if they are a doctor? You think you have a right to look at patient records?

This thread has been taken over by luddites and boot lickers.

[Anonymous]

You never ever use a work computer or device for anything other than work.

[Anonymous]

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:Do not use your work computer for anything you don't want your employer to see. They can see everything.

Incorrect.

If you have a VPN installed and use it to read the NY Times all day at work, all your IT administrator sees is that you have a browser window open and it is connected to a VPN. Where you use that VPN to take you is encrypted. Concealing your browsing history is like 95% of the reason to use a VPN.

lol wrong

OP, just assume that everything you do on a corporate computer can be monitored.

Not wrong. 100% right. And no one said anything about corporate, moron.

Honestly, please stop talking about things your don't understand. At a minimum, your browser history is stored locally regardless of VPN usage and can be easily accessed by an administrator, let alone an EDR agent or similar.

And "If I'm using a VPN on my computer at work" pretty clearly implies using a work computer.

You are way in over your head. It's simple to clear history, cache and logs on the machine being used. You can set it to wipe 15 minutes It's even simpler to prevent that from being stored on the machine anyway. And unless IT is logged into your machine they would never see it. And if your company has $250 an hour to hire a babysitter, per machine, then you'd already know this. No one outside of the IC does anything remotely like this. If you are a research analyst at NIH, no one has a damn clue what you are doing on a VPN. Ask me how I know.

I think it's fairly common to have transparent web proxies in corporations. Given that most corporate firewalls block every but http and https, your "encrypted" connection to the VPN isn't as secure as you would like to believe since they are tunneling over https in most cases.

Ask me how I know.

[Anonymous]

The above is a good point--if this is a work computer, the company could be decrypting https traffic (essentially a man-in-the-middle attack) by using custom certificates in the browser and on a proxy. The user could probably find those certificates if he actually looked, but almost no one would.

Maybe the best option here is a bootable Linux (or other OS) USB flash drive to boot into a non-company-managed OS to run the browser and/or VPN connection tools. But most companies that are this draconian would disable booting from flash drives and probably would also enable secure boot.

[Anonymous]

Anonymous wrote:The above is a good point--if this is a work computer, the company could be decrypting https traffic (essentially a man-in-the-middle attack) by using custom certificates in the browser and on a proxy. The user could probably find those certificates if he actually looked, but almost no one would.

Maybe the best option here is a bootable Linux (or other OS) USB flash drive to boot into a non-company-managed OS to run the browser and/or VPN connection tools. But most companies that are this draconian would disable booting from flash drives and probably would also enable secure boot.

Or, just use TOR as the IC has since the mid 80s.

Funny thread. Thanks for the laughs. My employer isn't seeing a damn thing I do online because I'm smarter then they are.

[Anonymous]

Anonymous wrote:You never ever use a work computer or device for anything other than work.

Does that go for adding work email to phone?

[Anonymous]

what if your work computer is your personal computer and you use an application to connect to the corporate network?