3 ms·
> I've heard of some US Government workers who are allowed to work from home, but only from home. Ostensibly for cybersecurity reasons, they aren't allowed to w
by schoen 5y ago
> I've heard of some US Government workers who are allowed to work from home, but only from home. Ostensibly for cybersecurity reasons, they aren't allowed to work from hotels, cafes, airports, WeWorks, etc.
I first thought that this didn't make so much sense, because you could just use a VPN. But this might be only partly because of network insecurity. It could be more because you have so little control over your neighbors and physical environment in public and semipublic spaces, and people who know you're there can easily arrange to be nearby you in order to try shoulder-surfing or higher-tech attacks.
For example, it might be challenging to get close enough to someone's home office to carry out an attack like this, but not so difficult in comparison in a café.
https://www.tau.ac.il/~tromer/handsoff/ https://www.tau.ac.il/~tromer/handsoff/
- jodrellblank 5y agoI have wondered about the idea of shared rent-a-workspace, and what that does to security and regulatory compliance and how many CIOs have conniptions over it. Would you feel OK if you called up your bank to sort out a problem with your account, and they were opening all your account details on a laptop in a coffee shop or WeWork office shared with all sorts of people? If you were a normal employee raising an issue with HR and they were doing that? If you were Apple, or high up in a company behaving like them and trying to keep projects secret and your employees were doing that?