4 ms·
A while back I remember seeing on HN there was a issue with a certain vendor and ChromeBooks because Chrome used a newer TLS(And the mitm vendor vendor was noti
by Keverw 10y ago
A while back I remember seeing on HN there was a issue with a certain vendor and ChromeBooks because Chrome used a newer TLS(And the mitm vendor vendor was noticed in advance too, and didn't update their product).
I wonder how schools and banks plan to react to this... Apparently financial firms have to record everything their employees do for some regulations.
To me, schools doing this sort of thing is wrong. I wouldn't be surprised if the principle would grab people's passwords and login to their accounts even. I know some schools even went as far to demand students hand over their passwords to social media when they report bullying... Which if the school blocks social networks anyways, I don't see how it's a school issue for what happens outside of school...
If this sort of thing really needs to be done, at-least people should be warned and aware they are being monitored. If it's for a bank and it's only company equipment everything is being monitored it seems a bit more okay to do if everyone is well aware. "You are only to use work computers for official business." sort of policy.
- JumpCrisscross 10y ago> financial firms have to record everything their employees do for some regulations Phone calls, emails, instant messages and other forms of client contact, yes. Internet browsing history? No. Rest assured, many firms do this. But it's because they decided to, not because of regulation.
- Mandatum 10y agoWorked for Big 4. They did not log my phone calls or sniff my TLS traffic.
- newjersey 10y agoWhy isn't it enough to do the tracking/audit log in the server side? I can't imagine even the JP Morgan Chase CEO lives under surveillance of JP Morgan Chase Bank 24/7. Just require them to use centralized services and keep audit log of that? Sounds simple enough. I don't get the need to monitor all traffic. Surely the sensitive servers have audit log independent of network?
- Spooky23 10y agoIf you went through a proxy, they almost certainly did.
- Mandatum 10y agoThey didn't install TLS certs on my machine. My certs were the same ones I see on my home PC.
- ktta 10y agohttps://news.ycombinator.com/item?id=13751505 https://news.ycombinator.com/item?id=13751505
- Keverw 10y agoYeah, https://news.ycombinator.com/item?id=13750379 https://news.ycombinator.com/item?id=13750379 is the original thread. I don't know that school personally, just talking in general I don't think I'd trust school admins with that level of access.