News for hackers. Stuff that matters.
Re:Twitter engineer: I thought I’d been hacked. It turned ou... by Raed667 on Friday December 02, 2022 @01:51PM (#33834984)
This is why I tell everyone I ever work with: "Don't have any personal document on your work laptop that isn't backed somewhere personal"

You never know when that bank statement, or rent agreement or whatever will suddenly become inaccessible.

Edit: I know we're not supposed to mix personal data with work. But who hasn't downloaded some docs because you need them filled or printed or something.

Re:Twitter engineer: I thought I’d been hacked. It turned ou... by kadoban on Friday December 02, 2022 @02:39PM (#33835710)
Anything you do on work hardware, it the US is pretty much free range for them to snoop into as much as they want.

Putting that kind of stuff on your work laptop is just unthinkably weird to me. Why would anyone do that?

Re:Twitter engineer: I thought I’d been hacked. It turned ou... by Raed667 on Friday December 02, 2022 @02:48PM (#33835835)
I guess my rule of thumb is "Am I ok with HR seeing this?", this is more about access (tax papers, paystubs, bank statements, ...) than privacy.
Re:Twitter engineer: I thought I’d been hacked. It turned ou... by Symbiote on Friday December 02, 2022 @03:23PM (#33836373)
For many people, HR have access to this already — they know how much I'm paid and where I live, my next of kin, etc.
Re:Twitter engineer: I thought I’d been hacked. It turned ou... by kelnos on Friday December 02, 2022 @02:48PM (#33835849)
Because most people don't actually care all that much about privacy, at least when the consequences aren't immediately obvious.

Sure, if you flat-out ask someone if they'd be comfortable posting their bank statements on Facebook, they'd say no, of course not. But even if people know that their employer can snoop on the contents of their work laptop (I imagine some people don't realize), it's a hypothetical threat. And often people have some sort of implicit trust in their employer, anyway, for some strange reason.

In my experience, most people put personal things on their work laptop, and don't think twice about it. Unfortunately you're actually the "weird" one, even though I totally agree with you.

Re:Twitter engineer: I thought I’d been hacked. It turned ou... by jenscow on Friday December 02, 2022 @03:31PM (#33836471)
And it's not just "employer" you need to trust - it's the people in the IT department who can snoop.
Re:Twitter engineer: I thought I’d been hacked. It turned ou... by francisofascii on Friday December 02, 2022 @03:06PM (#33836125)
> Why would anyone do that?

Because of convenience. It is an easy mistake to make. If you have to print something like a rent agreement, do you use your office printer or go through the hassle of sending it to FedEx to print? Also, when you have home office setups configured for your work, it can be a pain to switch everything to your personal laptop, if you even have one.

Re:Twitter engineer: I thought I’d been hacked. It turned ou... by teeray on Friday December 02, 2022 @03:15PM (#33836247)
From a sustainability perspective, it’s regrettable that regulations are so fixated on the physical machine. It would be entirely possible to logically segment a work environment from a personal environment on a machine without one’s processes spilling over into the other’s. But nope, we all lug two laptops and two phones (if you use iOS).
Re:Twitter engineer: I thought I’d been hacked. It turned ou... by worewood on Friday December 02, 2022 @03:21PM (#33836342)
Samsung does it with Knox and it works perfectly. If the company wants they can wipe out the Knox environment but my personal files and apps are completely separate. Even the company VPN works just inside the Knox environment.
Re:Twitter engineer: I thought I’d been hacked. It turned ou... by deathanatos on Friday December 02, 2022 @03:40PM (#33836577)
There have been a number of times in my career where HR emailed personal material (e.g., legal agreements, tax documents, etc.) to my work email, effectively forcing me to exfil my own personal data off the work laptop to the personal laptop. In HR's mind, it's a company document, because it pertains to an employee. But to me, it needs to persist beyond my employement, e.g., because the company wants me to honor the terms of the agreement, or because law requires it.

One of these times was during a layoff that I was a part of.

(But also, people are lazy, and personal stuff ends up on work machines.)

Re:Twitter engineer: I thought I’d been hacked. It turned ou... by kevstev on Friday December 02, 2022 @03:43PM (#33836606)
Mostly because we generally work during the same business hours other people are? If you ever have to deal with an insurance issue, sign a lease, take out or refinance a mortgage, buy a car... etc... its probable that you will have to print something out at the office, sign it, scan it and send it back to someone- and now its essentially open for the company to read. Even if you aren't downloading and printing something, even logging into a website is more or less the same thing for a determined snooper. Sometimes its just a matter of convenience, but it can add an irritating delay or worse.

I try to avoid it as much as possible, but its unavoidable in at least some cases. I am not going to take a day off of work just because I have to call about a billing issue and need to login to my account to give the details to a service representative.

Re:Twitter engineer: I thought I’d been hacked. It turned ou... by kadoban on Friday December 02, 2022 @06:10PM (#33838226)
For me, I can do 99.9% of things on my phone. I can't remember the last time I had to actually print something.

I guess my experience must not match others', fair enough.

Re:Twitter engineer: I thought I’d been hacked. It turned ou... by reaperducer on Friday December 02, 2022 @08:41PM (#33839416)
I guess my experience must not match others', fair enough

At least you can admit it. Things I've needed a printer for in recent months, off the top of my head:

- Filing a reimbursement claim for going to an out-of-network healthcare provider.

- Filing a reimbursement claim for contact lenses.

- Filing legal paperwork with the county clerk.

- Getting a certified death certificate.

- Change of address without paying a fee.

- Letter to the local postmaster.

- Paperwork for claiming an inheritance through a probate court.

- Printing a shipping label.

- Filing a zoning application.

- Life insurance forms.

The more you adult, the more you discover that you still need paper.

Re:Twitter engineer: I thought I’d been hacked. It turned ou... by GloriousKoji on Friday December 02, 2022 @02:25PM (#33835489)
I don't mix personal data and work but they sure can present enough gray areas. Things like digital copies of paystubs, ESPP details, and W4 can only be accessed while employed and on the company network. I leaned that one the hard way a year later when doing taxes.
Re:Twitter engineer: I thought I’d been hacked. It turned ou... by Raed667 on Friday December 02, 2022 @02:28PM (#33835551)
The scary wake-up call for me when I heard the story of someone who informed their manager of their 2-week notice. And instead of having 2 weeks to sort everything out, they got locked out immediately.
Re:Twitter engineer: I thought I’d been hacked. It turned ou... by throwdingding on Friday December 02, 2022 @02:37PM (#33835685)
Our business has to do this for security reasons upon learning an employee is no longer going to have an ongoing relationship. However, we explain this to the employee ahead of time, and the two weeks are still paid - the employee just doesn't get to touch sensitive information anymore.
Re:Twitter engineer: I thought I’d been hacked. It turned ou... by hotpotamus on Friday December 02, 2022 @02:33PM (#33835628)
I began disentangling things from my previous employer about a year before I actually left. 2 weeks notice would basically be a formality, I'd have effectively quit months before anyway.
Re:Twitter engineer: I thought I’d been hacked. It turned ou... by civopsec on Friday December 02, 2022 @03:01PM (#33836042)
I wiped the computer they gave me and installed my own OS. If I quit or they fire me there is a three month period where I have to work for them anyway.

It would be ideal to have two computers, but I don’t feel like committing to such an expense (it would have to be about equally powerful) in this economy and all that.

Re:Twitter engineer: I thought I’d been hacked. It turned ou... by 1983054105 on Friday December 02, 2022 @03:31PM (#33836469)
In France, I have the same 3 months period where I still have to work. If they decide to lock my computer during this period, I'm free to stop working and tell them to provide me with a new computer ASAP since I cannot do anything at all.

Unless they want to fire you and then they still could remove those 3 months and give you some money instead. It would be stupid of them to give me a free salary for 3 months: either they fire me properly, or they give me a computer.

Re:Twitter engineer: I thought I’d been hacked. It turned ou... by Symbiote on Friday December 02, 2022 @03:22PM (#33836354)
The BIOS (or equivalent) will be locked on these corporate laptops. You can't install your own OS.
Re:Twitter engineer: I thought I’d been hacked. It turned ou... by civopsec on Friday December 02, 2022 @03:46PM (#33836648)
Makes sense. Good for me.

Would in any case be kind of obvious that the employee thad violated the company policy when their desktop doesn’t look like the Mac or Windows one.

Re:Twitter engineer: I thought I’d been hacked. It turned ou... by Raed667 on Friday December 02, 2022 @03:04PM (#33836078)
How are you even allowed to access anything related to work without some sort of device-management installed?
Re:Twitter engineer: I thought I’d been hacked. It turned ou... by civopsec on Friday December 02, 2022 @03:17PM (#33836295)
Am I supposed to answer that?