4 ms·

My eternal frustration in this space is that my employer has strict firewalls, web filtering and data-loss prevention software, and remote access is over Citrix

My eternal frustration in this space is that my employer has strict firewalls, web filtering and data-loss prevention software, and remote access is over Citrix with no copy-paste. Consequently, if I build a knowledge base, it is stuck inside the firewall. Equally, if I build it outside, I can't use it at work.

fctorial 7y ago
Why don't you host it on an ec2 instance? They won't be blocking amazon ip. Where do you work?
- insomniacity 7y ago
  There's definitely no external access without going through the web proxy. And a new uncategorized site would be blocked by the web proxy - and it wouldn't pass review. I work in a highly regulated industry... Any workaround would be grounds for termination. So there's no point to my comment really - just curious if anyone else is in the same boat.
  - PenguinCoder 7y ago
    I won't tell you how to circumvent security, but a simple solution seems to be getting your domain 'categorized'. Keep it clean (no malware, not wordpress), strong transport security, and maybe behind basic auth. This should allow you access to the site as needed, from your work environment.
    - insomniacity 7y ago
      TLS is MITMd, DLP will run on the decrypted content.
  - dr_baba 7y ago
    Can't you use a personal mobile device with a 4G connection to access a knowledge database outside the firewall, without moving any data across your employers network? As long as the data you wish to read/write is not sensitive in itself, and it's mostly just plaintext notes that you can read/write from any device, I don't see the issue with that.
    - KineticLensman 7y ago
      Secure physical sites (e.g. some military bases) may require you to place personal electronics in a lockable cabinet. You have to use a paper notepad if you don't have a device certified by the local security team. Using a non-certified device can result in being evicted or prosecuted.
  - macintux 7y ago
    I’m in the same situation, but I can use personal devices at work, and my personal interests and work interests don’t share much overlap, so in practice it’s not much of a problem. Every now and then I find an external link I want to share with myself, but I’ll just send myself an email with it.
  - deleted 7y ago
    [deleted]
  - Viliam1234 7y ago
    > just curious if anyone else is in the same boat. Yes. Spent a few years building a knowledge base in an offline application. Now I have a new job that doesn't allow me to install software. So all my notes stay at home. Maybe one day I'll make an export to PDF and use that at work. But I will miss the editing functionality. On one hand I understand the need to prevent data leaks, malware, etc. On the other hand -- am I supposed to memorize literally everything? Or search everything on Stack Exchange over and over again, hoping that the explanation is there, is correct, and is up to date? Figuring out stuff and making simple notes is my strength. Memory is my weakness. This sucks. I wonder if it would have been better to install some wiki software on my private website and build my knowledge base online. Reading unknown webs is not forbidden in my current job (the web filter apparently uses blacklists). But maybe in my next job it will be, who knows.

fctorial 7y ago

Why don't you host it on an ec2 instance? They won't be blocking amazon ip. Where do you work?

insomniacity 7y ago
There's definitely no external access without going through the web proxy. And a new uncategorized site would be blocked by the web proxy - and it wouldn't pass review. I work in a highly regulated industry... Any workaround would be grounds for termination. So there's no point to my comment really - just curious if anyone else is in the same boat.
- PenguinCoder 7y ago
  I won't tell you how to circumvent security, but a simple solution seems to be getting your domain 'categorized'. Keep it clean (no malware, not wordpress), strong transport security, and maybe behind basic auth. This should allow you access to the site as needed, from your work environment.
  - insomniacity 7y ago
    TLS is MITMd, DLP will run on the decrypted content.
- dr_baba 7y ago
  Can't you use a personal mobile device with a 4G connection to access a knowledge database outside the firewall, without moving any data across your employers network? As long as the data you wish to read/write is not sensitive in itself, and it's mostly just plaintext notes that you can read/write from any device, I don't see the issue with that.
  - KineticLensman 7y ago
    Secure physical sites (e.g. some military bases) may require you to place personal electronics in a lockable cabinet. You have to use a paper notepad if you don't have a device certified by the local security team. Using a non-certified device can result in being evicted or prosecuted.
- macintux 7y ago
  I’m in the same situation, but I can use personal devices at work, and my personal interests and work interests don’t share much overlap, so in practice it’s not much of a problem. Every now and then I find an external link I want to share with myself, but I’ll just send myself an email with it.
- deleted 7y ago
  [deleted]
- Viliam1234 7y ago
  > just curious if anyone else is in the same boat. Yes. Spent a few years building a knowledge base in an offline application. Now I have a new job that doesn't allow me to install software. So all my notes stay at home. Maybe one day I'll make an export to PDF and use that at work. But I will miss the editing functionality. On one hand I understand the need to prevent data leaks, malware, etc. On the other hand -- am I supposed to memorize literally everything? Or search everything on Stack Exchange over and over again, hoping that the explanation is there, is correct, and is up to date? Figuring out stuff and making simple notes is my strength. Memory is my weakness. This sucks. I wonder if it would have been better to install some wiki software on my private website and build my knowledge base online. Reading unknown webs is not forbidden in my current job (the web filter apparently uses blacklists). But maybe in my next job it will be, who knows.