Re:How did Facebook intercept their competitor's encrypted m...
by tjoff on Sunday July 28, 2024 @12:52AM
(#41091300)
Doesn't change anything, consent and whether you own the device is everything.
The comparison with VPNs doesn't hold either, because for all their faults VPNs do not decrypt traffic going through them.
Re:How did Facebook intercept their competitor's encrypted m...
by 620gelato on Sunday July 28, 2024 @01:10AM
(#41091364)
99% of corporate networks? That can't be true.
I do know that this is done - in fact worked at a pretty major smartphone manufacturer and never logged in to any personal account on work devices. It was pretty obvious by even just looking at the security info on chrome/firefox that the certificate used was a root signed by the company itself. I used to shout at the top of my lungs to my friends, that hey, _this_ is how your information is vulnerable to the corporate overlords, but I guess they weren't as paranoid as I.
The first thing I checked when moving to my next employer was if they were intercepting SSL traffic like this. (They weren't - they used Falcon)
As coincidence would have it, this is the perfect alibi provided by a snake oil "cybersecurity" app by one of the world's largest companies.
Every tech company that has promulgated the lie that a VPN operated by a third party provides added security is indirectly responsible for this. Funneling all your traffic through a shady intermediary does no such thing, and in fact often does the opposite.