News for hackers. Stuff that matters.
Re:MoreOnionsPorfavor: Onionize your website and take back t... by tomrod on Wednesday July 08, 2020 @11:43PM (#23776739)
Naive question, as I am not a security professional. Why?
Re:MoreOnionsPorfavor: Onionize your website and take back t... by coolspot on Wednesday July 08, 2020 @11:56PM (#23776800)
In some businesses it is important that all employee communications are captured and can be inspected in case there is suspicion of IP or customer data theft.

For example in a hospital, there is no good reason for employee to use Tor on work computer.

Re:MoreOnionsPorfavor: Onionize your website and take back t... by 0xggus on Thursday July 09, 2020 @09:15AM (#23779807)
>For example in a hospital, there is no good reason for employee to use Tor on work computer.

"I'm a doctor in a very political town. When I have to do research on diseases and treatment or look into aspects of my patients' histories, I am well aware that my search histories might be correlated to patient visits and leak information about their health, families, and personal lives. I use Tor to do much of my research when I think there is a risk of correlating it to patient visits. - Anonymous Tor User"

From here: https://blog.torproject.org/remote-work-personal-safety

Re:MoreOnionsPorfavor: Onionize your website and take back t... by toyg on Thursday July 09, 2020 @04:21AM (#23778067)
> in a hospital, there is no good reason for employee to use Tor on work computer.

I would argue that hospitals and other public settings are actually more in need of higher privacy in electronic communications.

Imagine a physician working on, say, Scarlett Johansson's health issues; he periodically sends this data to the specialist that will run some test, and a creepy sysadmin finds out. Should he be able to MITM those comms, and resell the info to newspapers (or worse)...? Nope; the physician should have perfect privacy from network operators.

Re:MoreOnionsPorfavor: Onionize your website and take back t... by Reelin on Thursday July 09, 2020 @03:16AM (#23777753)
That's an excellent example but I'd point out that in any such scenario devices ought to be thoroughly locked down and run strictly audited environments. If properly configured you wouldn't be firing an employee for using Tor but instead for maliciously tampering with company hardware.