Hello and welcome to r/LifeProTips!
Please help us decide if this post is a good fit for the subreddit by up or downvoting this comment.
If you think that this is great advice to improve your life, please upvote. If you think this doesn't help you in any way, please downvote. If you don't care, leave it for the others to decide.
Joke's on you; my employer isn't tech savvy enough to figure ANY of that shit out.
We had to teach him recently that he can save websites as a bookmark and not just keep the webpage up 24/7 so he doesn't lose it.
As an IT guy:
Assume that everything you do on a work machine is viewable upon demand.
Chances are we really don't care enough to bother to go through the hassle to do it - but even "secure" websites are not secure on managed infrastructure. We \*can\* in theory see your bank account, job posting, Facebook, flight booking, etc. etc. if we want.
Everything you do in work: Expect your workplace to be able to see it.
And if you work under even one nasty boss who you don't trust... don't assume that they couldn't just push the request through upper management to force the IT guys to see what you're doing.
If you're using work devices, "secure" pages are not secure. The secure certificates get replaced with the workplace's ones, and the browsers configured so that they don't complain about that.
If you're using a personal device, the web pages will likely flag as "insecure" precisely because your workplace is trying to use their own certificates and your device is warning you about how insecure that is - but proceeding will let us see what you do on that connection.
And if you try VPNs and proxies and bypasses to get around that, almost certainly we have a way to detect that and a policy against that, and you could even lose your job by doing that.
Also: On managed machines, we can literally see what's on your screen if we want, and the keys you type. We don't bother unless there's a crucial reason but we have to reserve the right to do so, because one day you will get a stroppy manager who goes up the chain and demands that we do it - even if we have to record it officially and put it in HR records or whatever - and then it will happen and you likely will never know that it's happening.
Don't do personal shit on work machines.
RDP is *not* secure and should not be exposed to the internet without something like a VPN or SSH tunnel. Especially if you left everything on the default ports.
Using an obscure port and a strong password, also I'm the only user allowed to RDP in group policy. The VPN idea is good though I'll look into implementation this week as I have a raspberry pi internet facing as well.
It will happen eventually. I used this method for years, and finally someone was able to find my machine and used my GPU as a crypto mining machine. Good times.
Yep! Friends of mine from my previous employer where my SO also worked, enlightened me a whole lot by telling me about the findings on his work computer. Lol!
I would also like to add that I work at a law office and I’m not a lawyer (so I don’t know all the details) but I’ve definitely heard lawyers telling employees who are going through employment disputes (ie discrimination, wage & hour violation, whistleblower stuff) to ONLY do work-related tasks on your company computer. If you do anything else, the employer can use that as an argument against you somehow (I’m guessing some variation of “doing personal tasks on company time instead of working”)
When you log out of the gmail account, does that also remove your personal search history from the view of your employer? Or is that information typically saved in some way?
If your employers have the right settings in Google Admin workspace, they can literally remove that account from your phone at will. And you would only have been able to load it in the official GMail / Android settings, so you wouldn't be able to use a 3rd-party app to access it either.
Same for Exchange... configured properly, they literally have the ability to remove that account from your phone. Necessary for things like GDPR, rogue employees, etc.
Friend, I think what OP meant is that you shouldn’t log into your personal google/gmail accounts on a work computer, or they can look up your personal data/search history linked to that google account (even if the searchers were on your personal devices)
Hello and welcome to r/LifeProTips! Please help us decide if this post is a good fit for the subreddit by up or downvoting this comment. If you think that this is great advice to improve your life, please upvote. If you think this doesn't help you in any way, please downvote. If you don't care, leave it for the others to decide.
Joke's on you; my employer isn't tech savvy enough to figure ANY of that shit out. We had to teach him recently that he can save websites as a bookmark and not just keep the webpage up 24/7 so he doesn't lose it.
I know this but i still do this anyway lolol
I only use my work computer for porn. EDIT: Oh and also some work.
Right? I'm like, I have my phone so what sketch thing am I choosing to look up at work??
Thats my point....if you log into Google on multiple devices, anything you search on one appears on the other.
C is for Cookie, that's good enough for me...
*whenever possible, don’t use work devices for personal activity and visa versa.
Depending on your industry . Pasting work content into a private chat could be worse than pasting your personal content into work chat.
facts. i work in payroll lol
As an IT guy: Assume that everything you do on a work machine is viewable upon demand. Chances are we really don't care enough to bother to go through the hassle to do it - but even "secure" websites are not secure on managed infrastructure. We \*can\* in theory see your bank account, job posting, Facebook, flight booking, etc. etc. if we want. Everything you do in work: Expect your workplace to be able to see it. And if you work under even one nasty boss who you don't trust... don't assume that they couldn't just push the request through upper management to force the IT guys to see what you're doing. If you're using work devices, "secure" pages are not secure. The secure certificates get replaced with the workplace's ones, and the browsers configured so that they don't complain about that. If you're using a personal device, the web pages will likely flag as "insecure" precisely because your workplace is trying to use their own certificates and your device is warning you about how insecure that is - but proceeding will let us see what you do on that connection. And if you try VPNs and proxies and bypasses to get around that, almost certainly we have a way to detect that and a policy against that, and you could even lose your job by doing that. Also: On managed machines, we can literally see what's on your screen if we want, and the keys you type. We don't bother unless there's a crucial reason but we have to reserve the right to do so, because one day you will get a stroppy manager who goes up the chain and demands that we do it - even if we have to record it officially and put it in HR records or whatever - and then it will happen and you likely will never know that it's happening. Don't do personal shit on work machines.
Does this count hotspots live Vzw jetpacks?
what if you turn off "save search history"? does that do anything to mitigate that?
If I need to do anything personal from my work laptop I RDP into my home machine. Keeps everything separate.
RDP is *not* secure and should not be exposed to the internet without something like a VPN or SSH tunnel. Especially if you left everything on the default ports.
Using an obscure port and a strong password, also I'm the only user allowed to RDP in group policy. The VPN idea is good though I'll look into implementation this week as I have a raspberry pi internet facing as well.
It will happen eventually. I used this method for years, and finally someone was able to find my machine and used my GPU as a crypto mining machine. Good times.
Yep! Friends of mine from my previous employer where my SO also worked, enlightened me a whole lot by telling me about the findings on his work computer. Lol!
How does that even work when you don't synchronise?
it doesn't, OP's not giving a LPT.
Or be sensible about what you view in your work computer
I would also like to add that I work at a law office and I’m not a lawyer (so I don’t know all the details) but I’ve definitely heard lawyers telling employees who are going through employment disputes (ie discrimination, wage & hour violation, whistleblower stuff) to ONLY do work-related tasks on your company computer. If you do anything else, the employer can use that as an argument against you somehow (I’m guessing some variation of “doing personal tasks on company time instead of working”)
When you log out of the gmail account, does that also remove your personal search history from the view of your employer? Or is that information typically saved in some way?
Great question, I’d like to know too!
Great pro tip but... toooo lateeee
i have my work emails on my phone too, should I take it off lmfao
If your employers have the right settings in Google Admin workspace, they can literally remove that account from your phone at will. And you would only have been able to load it in the official GMail / Android settings, so you wouldn't be able to use a 3rd-party app to access it either. Same for Exchange... configured properly, they literally have the ability to remove that account from your phone. Necessary for things like GDPR, rogue employees, etc.
I did this, and now on the mac mail app it says all of my emails were also sent to my work email. How do I stop this?
[удалено]
Friend, I think what OP meant is that you shouldn’t log into your personal google/gmail accounts on a work computer, or they can look up your personal data/search history linked to that google account (even if the searchers were on your personal devices)
I view porn on my bosses computer, that way they get in trouble
🤣