4 ms·

Boy, I'm not sure lack of SSL is the reason you shouldn't do this!

mikeash 12y ago
One of the interesting tidbits of information that came out of the Lenovo spyware fiasco was that companies routinely MITM SSL traffic by installing their own certificates on company computers. Unless you own and fully control the hardware you use at work, you should just assume the company can see anything you do with it, regardless of how encrypted it looks.
- deleted 12y ago
  [deleted]
- daheza 12y ago
  My work does not even bother to install the certificate on the individual machines. I get unsigned cert errors all day long.
  - Noelkd 12y ago
    I would guess you use firefox which doesn't use the certs installed on the host machine by default, I also see unsigned cert errors all day long!
newman314 12y ago
General rule of thumb: NEVER conduct personal business on work equipment and vice versa.
- johnward 12y ago
  I'm curious about this. What are the risks? I use my work device for everything. I can't afford to buy a laptop just for personal usage.
  - dijit 12y ago
    they can fire you for misuse of company property. check your contract. Undoubtedly they have a clause stating you must use your work device for the companies interest only.
    - sukilot 12y ago
      Mine explicitly does not. But I don't work on top-secret projects and I dont work for jerks.
      - mdekkers 12y ago
        A lot of companies, especially smaller ones (like mine) will have a clause like that not to be jerks, but to protect themselves. We have a clause like this in our contract. Do I care if our devs spend time on Facebook, or whatever? Not really - I am interested in their output and productivity, and however they are comfortable in producing their output is fine by me. I did have an administrative employee recently that spent all her time on Facebook, and didn't produce any useful output at all, and clearly had to be let go - we tried to work with her to improve, but she just didn't care. Under the employment laws of the country where we operate, it is very hard to fire somebody. Performance related dismissals take forever, and are very expensive in terms of administrative, legal and opportunity costs. Larger companies can probably afford that, but small companies like ours cannot. Our choices are simple: Either spend a lot of time, money and effort in trying to get the person fired on the basis of insufficient performance, where the outcome isn't certain, and where we likely have to end up paying a few more months salary even if we are successful, or pull her up for provably excessive use of company computers during work time for private purposes, and fire her on the spot. Does that make us jerks? I don't think so.
  - caseysoftware 12y ago
    My comment above: It goes beyond personal use. Odds are you signed an agreement that says "Anything I do using company resources is owned by the company."* So you have to be careful for any open source work, startup ideas, etc that you may have. Don't do it at work or on your work machine (even at home). * If your agreement says "everything you do is ours," it's already too late for you. I never sign those contracts. Ref: https://news.ycombinator.com/item?id=9213831 https://news.ycombinator.com/item?id=9213831
pseudonym 12y ago
>Malicious or Stupid? Funny, for a second I couldn't tell if this was about Glassdoor itself or the people who browse it from work.
serve_yay 12y ago
Also, personally I wouldn't pay much mind to Glassdoor's rankings. I used to work for a company whose business is reporting on other companies. This place often seeks "best place to work in America" type accolades from the press. After making a deal to show Glassdoor data on their site, this company magically started topping the Glassdoor list of "best places to work" for its particular size group!

One of the interesting tidbits of information that came out of the Lenovo spyware fiasco was that companies routinely MITM SSL traffic by installing their own certificates on company computers. Unless you own and fully control the hardware you use at work, you should just assume the company can see anything you do with it, regardless of how encrypted it looks.

deleted 12y ago
[deleted]
daheza 12y ago
My work does not even bother to install the certificate on the individual machines. I get unsigned cert errors all day long.
- Noelkd 12y ago
  I would guess you use firefox which doesn't use the certs installed on the host machine by default, I also see unsigned cert errors all day long!

newman314 12y ago

General rule of thumb: NEVER conduct personal business on work equipment and vice versa.

johnward 12y ago
I'm curious about this. What are the risks? I use my work device for everything. I can't afford to buy a laptop just for personal usage.
- dijit 12y ago
  they can fire you for misuse of company property. check your contract. Undoubtedly they have a clause stating you must use your work device for the companies interest only.
  - sukilot 12y ago
    Mine explicitly does not. But I don't work on top-secret projects and I dont work for jerks.
    - mdekkers 12y ago
      A lot of companies, especially smaller ones (like mine) will have a clause like that not to be jerks, but to protect themselves. We have a clause like this in our contract. Do I care if our devs spend time on Facebook, or whatever? Not really - I am interested in their output and productivity, and however they are comfortable in producing their output is fine by me. I did have an administrative employee recently that spent all her time on Facebook, and didn't produce any useful output at all, and clearly had to be let go - we tried to work with her to improve, but she just didn't care. Under the employment laws of the country where we operate, it is very hard to fire somebody. Performance related dismissals take forever, and are very expensive in terms of administrative, legal and opportunity costs. Larger companies can probably afford that, but small companies like ours cannot. Our choices are simple: Either spend a lot of time, money and effort in trying to get the person fired on the basis of insufficient performance, where the outcome isn't certain, and where we likely have to end up paying a few more months salary even if we are successful, or pull her up for provably excessive use of company computers during work time for private purposes, and fire her on the spot. Does that make us jerks? I don't think so.
- caseysoftware 12y ago
  My comment above: It goes beyond personal use. Odds are you signed an agreement that says "Anything I do using company resources is owned by the company."* So you have to be careful for any open source work, startup ideas, etc that you may have. Don't do it at work or on your work machine (even at home). * If your agreement says "everything you do is ours," it's already too late for you. I never sign those contracts. Ref: https://news.ycombinator.com/item?id=9213831 https://news.ycombinator.com/item?id=9213831

pseudonym 12y ago

>Malicious or Stupid? Funny, for a second I couldn't tell if this was about Glassdoor itself or the people who browse it from work.

serve_yay 12y ago

Also, personally I wouldn't pay much mind to Glassdoor's rankings. I used to work for a company whose business is reporting on other companies. This place often seeks "best place to work in America" type accolades from the press. After making a deal to show Glassdoor data on their site, this company magically started topping the Glassdoor list of "best places to work" for its particular size group!