5 ms·

Well, duh. I've never seen an office that didn't have crap people brought from home and hooked up. "Hey we don't get good wifi in here, I'll bring an old router

Well, duh. I've never seen an office that didn't have crap people brought from home and hooked up. "Hey we don't get good wifi in here, I'll bring an old router tomorrow."

austincheney 5y ago
That's not the implication. The term IoT suggests devices not related in any way to networking like a smart toaster, wifi connected coffee pot, or your wristwatch.
_trampeltier 5y ago
In our company, if they detect more than one MAC address behind a corporate switch port, they shut down the port. I don't know the exact rules, but I know, it does not need much to trigger to lock the port.
- tyingq 5y ago
  I've seen that, but it's a losing battle. People will unplug company IP phones and plug in their thing instead. Or use any number of other user-space networking, wifi sharing, etc, tools. Eventually you end up having to whitelist every legit MAC addr. Even that isn't safe, since I can spoof the MAC of anything I just unplugged, and many of them have helpful labels on them. So now you have to deploy certificates, and exceptions for things that don't support them. I imagine bad actors recognize which sorts of devices don't support certificates, so they would know what to unplug and spoof. Ugh. Just treat the office network as untrusted and be done with it. That's how every "WFH" worker is coming into your network anyway.
  - culopatin 5y ago
    I don’t know if it’s a losing battle. That doesn’t happen at my workplace because they tell you day 1 that your employment is at risk if you do that. We can’t even plug in usb devices other than mouse dongles and approved printers. No charging phones, no flash drives(only certain approved devices that few people have). I’m in IT and I never encounter people going rogue.
    - tyingq 5y ago
      I wouldn't trust "threat of being fired" to work universally across thousands of people though. People are strange.
  - _trampeltier 5y ago
    Even WFH users have to use an company notebook. If you let use the user with to work with there home PCs, then yes, you lost anyway.
- deleted 5y ago
  [deleted]

Well, duh. I've never seen an office that didn't have crap people brought from home and hooked up. "Hey we don't get good wifi in here, I'll bring an old router tomorrow."

austincheney 5y ago

That's not the implication. The term IoT suggests devices not related in any way to networking like a smart toaster, wifi connected coffee pot, or your wristwatch.

_trampeltier 5y ago

In our company, if they detect more than one MAC address behind a corporate switch port, they shut down the port. I don't know the exact rules, but I know, it does not need much to trigger to lock the port.

tyingq 5y ago
I've seen that, but it's a losing battle. People will unplug company IP phones and plug in their thing instead. Or use any number of other user-space networking, wifi sharing, etc, tools. Eventually you end up having to whitelist every legit MAC addr. Even that isn't safe, since I can spoof the MAC of anything I just unplugged, and many of them have helpful labels on them. So now you have to deploy certificates, and exceptions for things that don't support them. I imagine bad actors recognize which sorts of devices don't support certificates, so they would know what to unplug and spoof. Ugh. Just treat the office network as untrusted and be done with it. That's how every "WFH" worker is coming into your network anyway.
- culopatin 5y ago
  I don’t know if it’s a losing battle. That doesn’t happen at my workplace because they tell you day 1 that your employment is at risk if you do that. We can’t even plug in usb devices other than mouse dongles and approved printers. No charging phones, no flash drives(only certain approved devices that few people have). I’m in IT and I never encounter people going rogue.
  - tyingq 5y ago
    I wouldn't trust "threat of being fired" to work universally across thousands of people though. People are strange.
- _trampeltier 5y ago
  Even WFH users have to use an company notebook. If you let use the user with to work with there home PCs, then yes, you lost anyway.
deleted 5y ago
[deleted]