A lot of corporate computers have at least an additional CA authority on each computer that they use... if you're using a corporate computer, it's really easy for them to MITM any request, just relaying requests to the public resource, then proxying and using their CA signed cert in the proxy.
From there, everything can be tracked.
Re:How to leak to the press
by organsnyder on Friday January 27, 2017 @04:05PM
(#13502647)
If you have a corporate computer, you shouldn't rely on any expectation of privacy. There's nothing stopping them from installing other monitoring software—screen grabbers, keyloggers, etc.—whenever they please.
That's where something like Tails comes in handy. :)
Re:How to leak to the press
by infinite8s on Friday January 27, 2017 @08:14PM
(#13504185)
I don't think Tails would work because a corporate proxy would likely block any outgoing connections. Also most corporate IT policies would probably disallow running something like Tails.
That's working. If it fails secure it's keeping you alive.
Re:How to leak to the press
by CapacitorSet on Saturday January 28, 2017 @05:32AM
(#13505722)
Monitoring hardware, then.
Edit: Nevermind — I assume you're referring to this scenario[1], in which the company installs a root certificate onto your actual computer that allows them to sign certificates for other sites.
[1] http://security.stackexchange.com/a/63306