Powered Descent posted:

Assuming most of these VPN users are working from home, what's stopping them from just... using their own personal computer (or tablet, phone, or whatever they prefer) for non-work stuff? You know, the one they use when they aren't working. Why ask for exceptions in the company filters so as to do their Facebook fuckery on their work laptop specifically? They're at home, they can set things up on their desk however they like, and the boss isn't going to sneak up behind them and catch them looking at the wrong screen.

Like, for me to go back and forth between my work laptop and my shitposting station, I just rotate my chair 90 degrees. It works great.

LethalGeek posted:

People are incredibly lazy and privileged

Rooted Vegetable posted:

I'm going to turn this question round to answer it: Thread of IT people, does anyone actually give a poo poo to use any of the listed items to actually try to intercept anyone's banking?

orange juche posted:

That would be an ethics violation to be sure. However, most corporate login splash screens display a warning that things done on the computer will be audited, and monitoring of network traffic will occur. Usually this includes deep packet inspection, which could certainly scoop someone's banking information. Still a very very bad idea and nobody here who wants to keep a job would ever admit to intentionally seeking such information.

We will absolutely monitor everything you do, though and if our systems do get hacked yeah your banking information might go out in the data a hacker would attempt to obtain, so maybe don't log into your bank on the work pc. Depending on the company, they may block webmail or banking sites to prevent the temptation of workers to do personal business on company machines, but that was more common in the past, less common now.

Hargrimm posted:

An Autohotkey/AutoIT script that just runs on a loop to click an empty spot in the Teams window every minute does the trick just fine. Together with a Launchy shortcut, it's a couple keystrokes to keep me active whenever I know I'm going turn away from the work machine for any length of time

Rooted Vegetable posted:

I'm going to turn this question round to answer it: Thread of IT people, does anyone actually give a poo poo to use any of the listed items to actually try to intercept anyone's banking?

dragonshardz posted:

Split tunnel ist verboten. State/department policy.

Most of the poo poo we block at the firewall level is known malicious domains, with a leavening of porn and game sites.

Renegret posted:

What's the best way to make sure I stay active on teams?

I use a kvm to shitpost. Since work computer is a laptop, I occasionally reach over and boop the touchpad, but I'm lazy.

AlexDeGruven posted:

Logs are data that could be exposed in a breach. So if you're doing all your banking through a Palo Alto (and others), which MITMs your SSL sessions with an internal cert, and with audit logging, etc, a lot of your information will be sitting in a splunk indexer, potentially somewhere out in AWS.

orange juche posted:

Yeah it's pretty much this, nobody in your corp IT is likely to try to steal your data, we like to keep our jobs after all. However, when a hacker does hack your corporate network and exposes data from your network, your personal information will be exposed if you were logging in to your bank etc on the corp network. You don't want that. Don't make yourself a bigger target basically.

orange juche posted:

Yeah it's pretty much this, nobody in your corp IT is likely to try to steal your data, we like to keep our jobs after all. However, when a hacker does hack your corporate network and exposes data from your network, your personal information will be exposed if you were logging in to your bank etc on the corp network. You don't want that. Don't make yourself a bigger target basically.

Arquinsiel posted:

In practice people see how much data is generated by this and go "how many gigabytes? Eight hours of visibility is enough, right?" and then you can't figure out what happened at 7PM last night when you get in at 9AM. I genuinely would not give a gently caress about it, because if anything happens there are multiple other layers of defence and ways to remediate compromise for my personal stuff.

AlexDeGruven posted:

"We need to do command-line auditing of the entire environment!"

*Turns on audit logging for 25,000+ server instances and 30,000+ desktops and laptops shipping everything to Splunk*

Splunk: hey, so, about your licensing...

RFC2324 posted:

Some companies just don't care about the money if they get the results the want/need, and that can including hoovering everything that comes near.

I'm aware of one colo DC that hoovers data off their guest network, so even your own devices can be iffy

RFC2324 posted:

I like the one tHat presses shift every 59 secoNds.

RFC2324 posted:

I'm aware of one colo DC that hoovers data off their guest network, so even your own devices can be iffy

BaseballPCHiker posted:

What kind of nutjob place do you work at? I deal with state governments all the time for police networks and even they let us enable split tunneling in certain areas. Your department policy sounds dumb.

RFC2324 posted:

I like the one tHat presses shift every 59 secoNds.

The Fool posted:

Do you have a disability that prevents you from typing faster than 4 WPM?

Weatherman posted:

Lol just lol if you don't jump on a VPN any time you use someone else's wifi

Arquinsiel posted:

Very different kind of "guest network"...

GreenNight posted:

Have you seen his posts?

Canuck-Errant posted:

My 5GHz network is "theCIAdid5G" so

MF_James posted:

Flowers By Irene is mine; think I got that from someone in one of these threads.

TITTIEKISSER69 posted:

RFC2324 posted:

I like the one tHat presses shift every 59 secoNds.

Arquinsiel posted:

Make one that presses altgr randomly.

Live dang€rously.