4 ms·
Employer provided and managed hardware is treated as a hostile entity on my network. Separate SSID, separate VLAN, no access to local resources whatsoever. I do
by zrail 3y ago
Employer provided and managed hardware is treated as a hostile entity on my network. Separate SSID, separate VLAN, no access to local resources whatsoever. I don't even let them talk to my local DNS server, they reach out to Google and/or Cloudflare.
Further, I don't put any personal accounts on employer provided hardware. For example, I always use a dedicated GitHub account for work stuff and the key and password never leave that machine. This ensures a clean break when I'm no longer at that employer.
- ttt3ts 3y agoI find it annoying how social GitHub has become. Posting notifying others when I work on public repos. I don't care for my coworkers to know when I am up at 2am working on open source. I also use separate accounts now. Vlan is a good idea. Doing that now. Thanks.
- npteljes 3y agoSame here. Not trusting endpoints go both ways - I don't trust it either. I don't have a fancy router, but it supports guest wifi, so I use my work computer with that.