News for hackers. Stuff that matters.
Re:How did Facebook intercept their competitor's encrypted m... by xvector on Saturday July 27, 2024 @10:43PM (#41090876)
Your work does this. This is incredibly common on basically every corporate device issued today.

The real issue is the NUX, which doesn't look like it made the data collection clear to users.

Re:How did Facebook intercept their competitor's encrypted m... by yjftsjthsd-h on Saturday July 27, 2024 @10:45PM (#41090894)
My work puts a big banner on the login screen that says up front that they can and will record and monitor everything on this machine. And IMO that's fine, because it's their machine. If they wanted to do that to my machine it would be a problem.
Re:How did Facebook intercept their competitor's encrypted m... by Terr_ on Saturday July 27, 2024 @11:09PM (#41090976)
I agree it's legally fine, but morally/socially there are ways to go-too-far.
Re:How did Facebook intercept their competitor's encrypted m... by knome on Saturday July 27, 2024 @11:36PM (#41091071)
there's nothing wrong with corporations tracking use of their hardware.

they have to watch for data exfiltration and attempts to download malware, etc.

don't use a corporate device for anything you don't want work to see.

use your own. that's not a hard ask.

Re:How did Facebook intercept their competitor's encrypted m... by Terr_ on Saturday July 27, 2024 @11:58PM (#41091133)
> there's nothing wrong with corporations tracking use of their hardware.

As written, that means they can secretly turn on the camera and microphone to surveil my house, supposedly to check the usage on the hardware.

Surely that's very "wrong", if not also illegal in most places.

Re:How did Facebook intercept their competitor's encrypted m... by pigeonhole123 on Sunday July 28, 2024 @12:49AM (#41091291)
That's clearly not what was meant
Re:How did Facebook intercept their competitor's encrypted m... by Terr_ on Sunday July 28, 2024 @01:17AM (#41091379)
No, read what they're replying-to.

I wrote one sentence about how "there are ways for companies to go too far", which I think is pretty dang uncontroversial and trivially-true. However that user replied with what is clearly a disagreement, with corporate justifications and placing sole responsibility on employees to avoid the hardware.

This leads to two competing options:

(A) They simply can't imagine any scenario where a company might "go too far" and be at fault.

(B) Their stance is much milder, but for some reason they are replying to a straw-man argument that isn't what I actually wrote.

Of those two ambiguities, I went with (A), but if you think (B) is a more-charitable reading...

Re:How did Facebook intercept their competitor's encrypted m... by knome on Sunday July 28, 2024 @01:51PM (#41094736)
Or that the discussion was about information on and being transmitted through the devices and I was limiting my opinion on "there being nothing wrong with corporations tracking use of their hardware" to that scope, and not extending it to include spying on people in their homes using the device peripherals.

No, they shouldn't be flicking on your laptop camera or mic remotely, as these are pretty obviously violations of your privacy.

Re:How did Facebook intercept their competitor's encrypted m... by lukeschlather on Sunday July 28, 2024 @11:36AM (#41093928)
My rights are not subordinate to my company's, if anything it should be the reverse. My employment contract is intended for mutual benefit and the company also reserves the right to privacy from me in some things, even things in the scope of my employment. It should be acceptable to do things outside the scope of your employment using corporate devices, and you should retain a reasonable expectation of privacy when doing so.
Re:How did Facebook intercept their competitor's encrypted m... by yjftsjthsd-h on Sunday July 28, 2024 @03:54PM (#41095523)
There are some places where I don't really have an opinion; if you work in, I dunno, pet grooming, and you and your employer agree to... "shared custody" of a device then sure. But I'm not sure that's possible in some fields. As I understand it, financial companies are legally mandated to record every single message sent/received on the machine so they can prove that nobody's doing insider trading or whatever. I would kind of expect something similar for medical field companies. I'm open to suggestions, but I can't personally see a way to uphold that obligation while giving the employees privacy if they want to use the company device to ex. check their personal email.
Re:How did Facebook intercept their competitor's encrypted m... by mr_toad on Saturday July 27, 2024 @10:59PM (#41090941)
No place I’ve worked has ever told their employees that they do this, but most of them do. Some employees I’ve spoken to are quite surprised that their “encrypted” connections are being monitored.
Re:How did Facebook intercept their competitor's encrypted m... by suprjami on Sunday July 28, 2024 @12:01AM (#41091141)
People should probably read their employment agreements and IT usage policy. I'd be surprised if it's not written somewhere.

Besides which, using someone else's computer with an expectation of privacy is the wrong expectation.

Re:How did Facebook intercept their competitor's encrypted m... by Scarblac on Sunday July 28, 2024 @12:59AM (#41091326)
It's "fine" in the way that I would leave that company at the first opportunity.
Re:How did Facebook intercept their competitor's encrypted m... by suprjami on Saturday July 27, 2024 @11:59PM (#41091137)
I signed a contract with my employer that when I'm using the computer they give me to conduct their business on their behalf, they have the right to observe my usage of that computer.

The situation in this article is completely different.

Re:How did Facebook intercept their competitor's encrypted m... by saagarjha on Monday July 29, 2024 @01:44AM (#41098172)
None of my employers have done this to my knowledge. Some of them have had the ability to run commands on my computer, so they could in theory install such a thing without me noticing, but the default OOTB experience was not that.