15 ms·

Once had a contract where my client wanted me to do "security work", which was initially meant to be for pentesting their clients, but it turned into me buildin

• Mandatum 4y ago
  DNS records of your VPN or corporate work station would be pretty easy. You can line then up with when the review was posted. Then investigate their workstation more "thoroughly".
  • chaps 4y ago
    Pretty uncool to give employers ideas on how to force their IT staff to rat out employees who speak out. Edit: yikes, people.
    • bogwog 4y ago
      Alternatively, it's a warning to employees on how they might get caught.
      • MonkeyMalarky 4y ago
        Once again for those in the back, never use your employer's equipment or network for anything you don't want them to see!
        • quickthrower2 4y ago
          Insidious problems are things like sync (Google Chrome favourites, Dropbox etc.).
        • quickthrower2 4y ago
          Refer to your work laptop as your “girlfriend”. (SV reference)
    • Mandatum 4y ago
      I'm not for it, I'm just saying - it's trivial. I was in your position, kinda - spent many weeks "searching" but "found nothing". They fired them anyway.
    • Zircom 4y ago
      Pretty dumb to talk crap about your employer on said employer's hardware and/or network, regardless of how true it is or not.
    • vorpalhex 4y ago
      Nah that's a pretty obvious way to catch people and any sysadmin knows it. Browser history is a good spot to check too. Be smart kids. Do your employer bashing at the public library.
    • xmprt 4y ago
      Or cool to give employees an understanding that employers aren't their friends and can and will go to extreme lengths to screw them over if it benefits the corporation. Also just general advice to avoid doing things on your company laptop if you don't want your employer to know about them.
      • chaps 4y ago
        That's all fine and dandy and I agree that employees should be informed of these methods. My issue is more with the framing of the post, which clearly doesn't have a cautionary spirit that informs those who'd potentially affected by a vindictive employer. Instead, it's playful curiosity of how to rat out an employee.
    • lotsofpulp 4y ago
      Pretty much everyone is carrying around a pocket computer connected to the internet 24/7 with which they can do all their non work related tasks on, including badmouthing their employer.
      • feet 4y ago
        How many get connected to company WiFi?
        • lotsofpulp 4y ago
          They all have the ability to disconnect with a swipe and a tap. Life does not get much easier.
          • feet 4y ago
            Right, but I'm trying to consider the average user. They likely aren't aware their activity on their phone is being logged on WiFi. My assumption is that once they got it connected to WiFi, it leaves attention and isn't considered
      • heavyset_go 4y ago
        If employees cross streams and use the same device on both the employer's network and off, and they post to Glassdoor off-network with the same device, a subpoena could reveal identifying information to the employer. Glassdoor can also choose to just hand over that information when requested, as well.
  • kadoban 4y ago
    This is a good example of why not to do personal stuff on your work machine or work network. If you care at all if your company would see it, _don't_ do it anywhere near their hardware.
    • chasil 4y ago
      Actually, since Glassdoor's protection can obviously be compromized, anyone posting on their site should do so with Tor Browser, which anonymizes access by routing traffic through a minimum of three relays in the "dark web" of the Tor network. It might also be wise to do this on a public WiFi network (not your own ISP or mobile data provider). Any email provided to Glassdoor should be a burner on a service that is not one of the majors (no gmail) also set up with Tor browser, specifically for Glassdoor (and used for no other purpose). Finally, the text that is posted should be somewhat disguised if possible, with altered vocabulary, atypical slang, and distinctly different grammar and sentence structure. Any facts that can reveal identity should be removed. Under no circumstances should a native Android/iOS app be used to post or access any such review. It sounds like we will have examples soon of what happens without these precautions. I imagine that many reviews will be coming off Glassdoor's site rather soon.
      • amadeuspagel 4y ago
        Isn't the entire point of glassdoor that people use their work email to prove they actually work for the company?
        • SamoyedFurFluff 4y ago
          I believe that’s Blind.
          • amadeuspagel 4y ago
            I see.
  • atwood22 4y ago
    If it’s a managed corporate laptop that uses Chrome, then they could remotely check the browser history, likely directly to the review itself.
    • nhooyr 4y ago
      Are you sure this is possible? I thought managed google accounts didn't allow admins to access browsing or any other history.
      • emmelaich 4y ago
        If they have managed Google accounts they probably have admin on your device as well.
        • not-so-jerry 4y ago
          To belay paranoia, this is not always the case. I manage a company's google workspace, and we don't have managed browsers or devices, and no one has ever asked to have that capability.
          • mike_d 4y ago
            I am going to guess you don't have any security or compliance folks.
          • enkrs 4y ago
            Until the first case when an employee sends death threats from your company laptop and you need to provide the data to the police to help in investigation. Or the first case when some shared credentials get compromised probably from an infected computer and now you need to find which of the 80 laptops is the infected one. Or the first time employee converts his laptop into a wifi access point for the office girl upstairs and unknowingly lets her inside your companies private network. Of course, there are workarounds and better practices for every example. You can solve it without admin access to laptops and network request logging. But company property is not anonymous either with or without full admin access - so why jump trough the hoops to not have it?
  • gzer0 4y ago
    I run a Tor middle relay on one of the 8 IP addresses I have purchased as a block from a certain ISP that allows you to, I have been for around a year. The amount of traffic passing through it is heavy. Obviously, this comes with certain caveats (the middle relay's, or any TOR relay IPs are publicly available and published weekly on GitHub and as you can imagine, some places like to instant ban anything to do with TOR). Since it is only 1 of the 8 IP addresses; the other 7 remain free from blockages of any kind and the one running the TOR middle relay is setup in a manner in which I can use it normally (for the most part) and my traffic would just "blend in" with the normal tor traffic passing through it. You might ask, what is the purpose of this? Well, if it is normal for a lot of TOR middle relay traffic to be passing through one of my IP's on a daily basis, plausible deniability becomes a real defense as checking DNS logs becomes a moot point as there are requests being routed 24/7/365. Edit: https://hacky.solutions/blog/2020/06/06/operating-a-tor-relay.html https://hacky.solutions/blog/2020/06/06/operating-a-tor-rela... This is an excellent, detailed, and in-depth guide of the process of going through running a TOR middle relay. The statistics provided and data presented are simply superb, Great read!
    • ywain 4y ago
      I understand why websites would ban Tor exit nodes, but what's the point of banning middle relays? Wouldn't those only communicate with either other relays or exit nodes?
      • gzer0 4y ago
        Sites that don't want Tor users should only block exit relays, but some will lazily block all relays. It's unfortunate but that is the current state of affairs right now.
        • OJFord 4y ago
          'should' from whose perspective though? 'Sites that don't want Tor users' have no incentive to care do they? If anything it stands to reason such a site would block anything and everything to do with Tor, using it as a search term, usernames containing it, anything? (I don't know much about Tor, so am I missing something about 'middle relays' that such a site would want to allow them?) Edit: oh is the point that you're not accessing the site using Tor, just from an IP addociated with Tor use?
  • dmos62 4y ago
    DNS over HTTPS would solve that, right? It's an options flag on Firefox.
    • Mandatum 4y ago
      Barely anyone supports it yet.
  • WheatM 4y ago
  • saargrin 4y ago
    in any proper corporate IT , the workstation would already have DLP software which you can use to track Glassdoor use or any other activity ,if you wish
  • 4dregress 4y ago
    That's why you shouldn't use your work computer for anything but work!
    • ulimn 4y ago
      Yes, it's important to separate work you do for your employer from your personal life and everything else basically. I never understood people who use their work/school machines to do stuff that could hurt their employer/school. Or even just to cause them potential problems. But of course, the other way around is true imo: I won't use my personal devices for work - but that's mostly to prevent me from giving free extra work time to my employer.
  • whoomp12342 4y ago
    why on earth would someone log onto glass door with their corporate work station? are they a fool?
• Mandatum 4y ago
  https://www.glassdoor.com/Reviews/Employee-Review-Kraken-Digital-Asset-Exchange-RVW24429715.htm https://www.glassdoor.com/Reviews/Employee-Review-Kraken-Dig... https://www.kraken.com/ https://www.kraken.com/ is doing it too.
  • O__________O 4y ago
    This Google shows all the companies listed within Google’s index with the “Glassdoor Alert: Employer Legal Action” flag; just kept removing the companies for the SERPs using the negative search operator until none were left. No idea why Glassdoor doesn’t just have a list of all the companies doing this. https://www.google.com/search?q=Glassdoor+Alert:+Employer+Legal+Action+site:glassdoor.com+-Steidle+-legatum+-Medspira+-Media+Consulta+-Keller,+Fishback+%26+Jackson+-ABG+Accessories+-Echelon+Environmental+-Admiral+Markets+-canidae+-Discovery+Clinical+Trials+-kraken+-zuru+-bw+legal+-kurland+-SynapseFI https://www.google.com/search?q=Glassdoor+Alert:+Employer+Le...
    • metadat 4y ago
      "did not match any documents"
      • Mandatum 4y ago
        Because they removed all the companies, remove the "-company name" paramters from the search.
    • hughesjj 4y ago
      Manually curated list from parent process: -Steidle -legatum -Medspira -Media Consulta -Keller, Fishback & Jackson -ABG Accessories -Echelon Environmental -Admiral Markets -canidae -Discovery Clinical Trials -kraken -zuru -bw legal -kurland -SynapseFI
  • MarkSweep 4y ago
    This page gives a little context about when they post such warnings: https://help.glassdoor.com/s/article/Glassdoor-Alerts-Badge-Program https://help.glassdoor.com/s/article/Glassdoor-Alerts-Badge-... Based on the wording on this page you have to be pretty flagrant to get a warning sign attached to your company.
• altdataseller 4y ago
  It might be possible to do linguistic analysis (ie. What they did to catch the Unabomber) to compare the language they used in the review vs how someone usually write in things like performance reviews, manager evaluations, emails, etc
  • walrus01 4y ago
    Write your review, machine translate it into Mandarin, translate it back to English, and run it through a leet speak text filter
    • vbezhenar 4y ago
      So you have to be a CIA spy to post a workplace review. Nice.
      • seanp2k2 4y ago
        Welcome to The Land of the Free and the Home of the Brave©
        • cscurmudgeon 4y ago
          Isn't the final law here New Zealand's law?
          • Mandatum 4y ago
            No, they get the user information now - before any charge is made in New Zealand to justify providing access to the data.
            • cscurmudgeon 4y ago
              I know it is cool to shit on the US, but: “We are deeply disappointed in the Court’s decision, which was effectively decided under New Zealand law.”
• walrus01 4y ago
  Also sounds like they had no idea what they were doing, since instead of missing with the Wi-Fi, SOP would have been to MITM SSL/TLS on the office firewall (trusting company root CA on all company equipment) and log everything.
  • bitwize 4y ago
    This is why corporate IT tells you they're moving to zScaler because it's "more secure"...
• lopis 4y ago
  Another query you can use for another kind of alert is "Glassdoor Alert: Inflated Reviews site:glassdoor.com" for companies that were caught trying to fake positive reviews to flood out negative ones.
  • baryphonic 4y ago
    I had a company do this once after they let me go. The place was a toxic personality cult around the owner/manager, and I left a Glassdoor review saying as much. Someone at the company found it within a couple months, and then overnight several current employees had posted glowing reviews refuting mine. Certainly we wouldn't expect a personality cult to launch an Internet brigade to protect the boss' ego.
• antioppressor 4y ago
  If you experience deliberate techniques* used to erode your sanity inside-outside the company, then no matter the cost, you must make sure it gets public. There is an ongoing epidemic at certain companies where individuals who refuse to become a lapdog on all fours, who reject the brainwashing experiments and who reject the pretend you are stupid and should not excel in your job mantra are forced out. * psyops: running/scurrying in your periphery mentioning personal things from your personal/sex life yesterday, but addressed to others compliment you for bad work, berate for good work silent treatment throwing out your performant code and replacing it with trash employees one after each other, one by one turn against you, trying to give you the impression you are going insane... imagine you talk with someone on a daily basis and then all of a sudden he refuses to interact with you or gives you looks and avoiding you slamming doors doing borderline insane things before you, like getting elbow deep in the toilet then smiling at you pretend face to face that nothing happened "oldworld" things etc etc This oppressive system must be burned down, nuked big time.
  • eru 4y ago
    > [...] then no matter the cost, you must make sure it gets public. Is this supposed to be a moral obligation? I'd be careful about putting moral obligations on other people.