3 ms·

I use my company laptop for personal things all the time. My personal computer is some kind of space heater that can also run video games, so I don’t use it by

I use my company laptop for personal things all the time. My personal computer is some kind of space heater that can also run video games, so I don’t use it by default. I can afford a third device but I have better things to do with the money. Of course I aim to respect the security rules of my company. I trust my company. I wouldn’t enjoy working for a company that I wouldn’t trust with my browser cookies. The laws are also on my side in my jurisdiction. I cannot be fired simply because I did something my company didn’t enjoy on the company laptop. They need a really good reason.

lelanthran 3y ago
> I cannot be fired simply because I did something my company didn’t enjoy on the company laptop. They need a really good reason. Getting fired is not the risk you are running, getting all your personal data exposed by any civil suit the company gets hit with is the risk. Exposure is the risk, not firing.
- speedgoose 3y ago
  I see. It sounds very unlikely and I’m fine with the personal data I have of my company computer being exposed within the context of an investigation and a trial. I guess it may be more scary in some countries.
  - lelanthran 3y ago
    > It sounds very unlikely and I’m fine with the personal data I have of my company computer being exposed within the context of an investigation and a trial. Okay, lets talk about something more likely: your communications are not private - when you connect to an https URL you expect that your password is never in the clear. With most organisations I have worked with/for, they almost always perform MitM on all TLS connections, and it works seamlessly (i.e. without you knowing) because their certificate is on the machine. Only the very small and/or very poorly-run organisations aren't doing this, because unless they do the MitM, the network tools they use to detect malicious activity on their network cannot do Deep Packet Inspection (tools such as Darktrace). It's exceedingly unlikely that the password you used to log into your bank account from your work computer is indecipherable to your network operators. It may as well be in the clear within the network.

lelanthran 3y ago

> I cannot be fired simply because I did something my company didn’t enjoy on the company laptop. They need a really good reason. Getting fired is not the risk you are running, getting all your personal data exposed by any civil suit the company gets hit with is the risk. Exposure is the risk, not firing.

speedgoose 3y ago
I see. It sounds very unlikely and I’m fine with the personal data I have of my company computer being exposed within the context of an investigation and a trial. I guess it may be more scary in some countries.
- lelanthran 3y ago
  > It sounds very unlikely and I’m fine with the personal data I have of my company computer being exposed within the context of an investigation and a trial. Okay, lets talk about something more likely: your communications are not private - when you connect to an https URL you expect that your password is never in the clear. With most organisations I have worked with/for, they almost always perform MitM on all TLS connections, and it works seamlessly (i.e. without you knowing) because their certificate is on the machine. Only the very small and/or very poorly-run organisations aren't doing this, because unless they do the MitM, the network tools they use to detect malicious activity on their network cannot do Deep Packet Inspection (tools such as Darktrace). It's exceedingly unlikely that the password you used to log into your bank account from your work computer is indecipherable to your network operators. It may as well be in the clear within the network.