Mozilla takes action to protect users in Kazakhstan

Re:Mozilla takes action to protect users in Kazakhstan by nradov on Wednesday August 21, 2019 @03:22PM (#20760634)

There's nothing harmful about it. Many organizations have a legitimate need to monitor their network traffic. For example any healthcare provider has a moral and legal requirement to ensure that protected health information isn't being improperly sent outside. Traffic monitoring and deep packet inspection is also important for intrusion detection.

If you don't like it then there is something you can do: go work somewhere else, or use your own device on your own network.

[ Parent | on HN ]

Re:Mozilla takes action to protect users in Kazakhstan by prepend on Wednesday August 21, 2019 @03:48PM (#20760933)

It’s harmful to me because it adds costs to development and use of technology. So it increases costs for no value and reduces my bonus payout.

Moral requirements to protect patient info has absolutely nothing to do with MITM traffic to employee banking sessions, etc.

There’s very little empirical data showing benefit of this for data loss prevention or intrusion detection. What I’ve seen is security theater by companies who make money selling these products.

The other option I have, other than quitting, is to improve company policy to focus resources away from wasteful spending toward productive. As well as to try to influence browser vendors to block this. Fortunately if Chrome and Firefox go a step further and block this behavior for companies then it’s not practical for an organization to spend money to purchase a different browser. This is possible since Microsoft went to chromium.

Obviously, I can also use my own device.

[ Parent | on HN ]

Re:Mozilla takes action to protect users in Kazakhstan by nradov on Wednesday August 21, 2019 @04:35PM (#20761458)

Why would you even consider using someone else's device to access your private financial accounts? That's just crazy from a security standpoint. Regardless of whether the browser has a MITM certificate installed or not, the device could have other monitoring and logging software installed.

Don't use employer devices for personal business.

[ Parent | on HN ]

Re:Mozilla takes action to protect users in Kazakhstan by prepend on Wednesday August 21, 2019 @04:58PM (#20761760)

It’s crazy, commonly practiced, and made crazier by expensive, insecure practices like corporate MITM.

If this was a real problem, traffic should just be blocked. Not snooped.

[ Parent | on HN ]