Why YSK: It appears several Lemmy Instances are flagged as suspicious and at least 1 instance intentionally using the name of ransomware. A couple of the big enterprise monitoring suites (Fortiguard, ZScaler) will flag your account and may end up with you being pulled into an office for an explanation, or worse.

TL;DR: Keep browsing to your local instance at work for now.

    • lordkuri@lemmy.world
      link
      fedilink
      arrow-up
      30
      ·
      2 years ago

      I had a lady in the marketing department open a ticket with us many years ago when ILoveYou was running rampant and we had blocked yahoo mail, gmail, etc on our corporate network and she was PISSED because “I need to access that for my other job!”. Yes, she put that in the ticket. That was a brief discussion with her manager and a resume generating event for her.

        • lordkuri@lemmy.world
          link
          fedilink
          arrow-up
          8
          ·
          2 years ago

          Ironically I would have been happy to help her figure out a solution had she not been a complete and utter bitch about it. Instead she got her ass fired for misusing company resources. I suspect her boss was looking for an excuse, 'cause this woman was a 100% Karen stereotype.

      • Final Remix@lemmy.world
        link
        fedilink
        arrow-up
        5
        ·
        2 years ago

        We have a guy who isn’t in IT who goes through Peoples’ email and shit here, so I’m definitely steering clear of their internet traffic here.

          • Final Remix@lemmy.world
            link
            fedilink
            arrow-up
            4
            ·
            2 years ago

            Employer email, employer network, etc.

            Possible and legal, just a fuckin’ scumbag thing to do. Real creepy when he jumps in on an email to reply to something you sent to someone else.

            • Phantom3805@lemmy.world
              link
              fedilink
              arrow-up
              6
              ·
              2 years ago

              No, if he’s not in IT it should not be possible - I don’t know what email system you’re using but this person should not have the access you’re saying they do.

              I’m not saying it shouldn’t be technically possible (I’m a sysadmin, I know what’s possible in a corporate environment), I’m saying your organization should not make it possible.

              If he’s in some leadership position I’d be looking for other employment and/or reporting that person to your corporate compliance officer if you have one.

              • Final Remix@lemmy.world
                link
                fedilink
                arrow-up
                1
                ·
                2 years ago

                Yeah, well. He’s in admin, and I don’t feel like searching for a new tenured position. I’ll just skirt shit until he’s gone. And by then, keep skirting shit anyway.

    • Elektrotechnik@lemmy.world
      link
      fedilink
      arrow-up
      6
      ·
      edit-2
      2 years ago

      I’m visiting other companies for work every now and then.

      If they are in a fancy new steel-and-concrete office building with open space offices, chances are that cell reception is very bad. I once was in an office where I’m certain they had installed cell blockers on the toilets.

    • Bakachu@lemmy.world
      link
      fedilink
      arrow-up
      5
      ·
      2 years ago

      They might work in a place that doesn’t allow personal electronic devices (government, military, high-security site, etc.).

  • inclementimmigrant@lemmy.world
    link
    fedilink
    arrow-up
    26
    ·
    edit-2
    2 years ago

    Why in the heck would anyone browse any social media on your company machine?

    That’s the whole reason I left Reddit because it forced me to have to use Reddit on a computer and it’s one of the first things I remind new hires not to use social media on company property, it’s always monitored from keyboard to Internet connection.

    Good lord people…

  • Cybermass@lemmy.world
    link
    fedilink
    arrow-up
    22
    ·
    2 years ago

    The other day I was on all and there was fucking porn without any NSFW filter on it on some cumsluts community, no co-workers were around thankfully but it was a good wake up call that all is not a place you wanna be unless you are at home.

  • maaj@lemmy.world
    link
    fedilink
    arrow-up
    15
    ·
    2 years ago

    …y’all can’t seem to break your reddit habits for shit 😂😂😂😂

  • Celsiuss@lemmy.world
    link
    fedilink
    arrow-up
    14
    ·
    2 years ago

    I find it crazy that you can get in trouble for browsing the wrong websites. It’s illegal where I live to track people’s computers.

    • DV8@lemmy.world
      link
      fedilink
      arrow-up
      17
      ·
      2 years ago

      If you’re using company hardware on a company network and our security software says you’re visiting ransomware like URLs, it’s very much legal monitoring as it’s for a technical reason. It’s probably mandatory since you need to do this to protect the personal data your company stores.

      More often than not you probably signed a document stating you understood and accepted this.

    • just_change_it@lemmy.world
      link
      fedilink
      arrow-up
      10
      ·
      2 years ago

      In the US there is no reasonable expectation of privacy on company computers and company networks and to reinforce this usually on day 1 of a job you sign documents explicitly stating they can and will monitor traffic on company systems.

      Without monitoring traffic on all company systems there would be no way to know if your company was subjected to a breach. There is mandatory reporting for public companies and part of the reporting includes the capability to monitor for said breaches.

      To that end I have to wonder where you are that information security is basically prohibited by law.

  • Flying Squid@lemmy.world
    link
    fedilink
    arrow-up
    13
    ·
    2 years ago

    I’m glad my work doesn’t care what I do online as long as I get my shit done. It’s not the highest paying job in the world, but perks like that keep me there.

    • DV8@lemmy.world
      link
      fedilink
      arrow-up
      5
      ·
      2 years ago

      Not caring what you do on your pc, within reason, is not the same as not monitoring for dangerous actions that could endanger your network or company (and client data). I don’t care what my colleagues do on their pc either. As long as it doesn’t cause me more work.

      Logging security incidents is work. So we do block a lot of websites and keep an eye on what you try to run. If we see something wrong we just talk to you and explain why we don’t want you to do that. 99,9% of the time everybody is happy after that.

      The idea of this being something you can get fired for or that’s taken into consideration for your evaluation is insane though. We have rights as workers. Keeping the network safe means I can see some extent of what you do. Your boss or their boss has no right to that information unless you state you will continue endangering the network. Even in that case I wouldn’t even tell them the websites tbh.

  • Hazdaz@lemmy.world
    link
    fedilink
    arrow-up
    7
    ·
    2 years ago

    When I read stuff like this, I feel there is a whole part of Lemmy that I am totally clueless about.

    I have no idea even where the areas that OP is talking about even exist, and with the way the servers seem to go down all the time or I need to reload a browser, it makes it that much more difficult to wander around and get to know the place because you never know if a certain page is empty because its really empty or it just didn’t load correctly.

  • dm_me_your_feet@lemmy.world
    link
    fedilink
    arrow-up
    6
    ·
    edit-2
    2 years ago

    This does not apply for most european users. Source: I am the one who gets these requests and anyone who isn’t a judge gets jack shit. Go pound sand. Anything else would be illegal under privacy and work laws. Even police wont get ANYTHING (judge will reject it) if the crime in question isn’t worth at least 2 years of jail time.

    Suspected malware domains just get blocked, no further action will ever take place.

  • JackbyDev@programming.dev
    link
    fedilink
    English
    arrow-up
    6
    ·
    2 years ago

    How? The client should only be talking to your home instance. Your home instance does all aggregation for you. Only Lemmy instances talk to each other and clients talk to one instance. That’s how federation works.

    • RCMaehl [Any]@lemmy.worldOP
      link
      fedilink
      arrow-up
      7
      ·
      2 years ago

      Non-textual content (media, and icons I believe) is still served from the other instance to prevent all federated instances from exploding in size.

      Additionally, some browsers will preload/prefetch links to “improve the browsing experience”

  • superfiercelink@lemmy.world
    link
    fedilink
    arrow-up
    4
    ·
    2 years ago

    Good to know, thank you for posting this. I’ll keep this is mind to avoid any issues.

    And to everyone else wondering why you would use company computers to browse the Internet instead of just using your phone, some jobs out there do not allow you to do so. My employer for instance, has banned using phones everywhere except for the break rooms and offices. We can still have our phones on us for emergencies and take phone calls, but otherwise we are not allowed to have them our. If we have to take a phone call we have to exit the work area and move to a nearby break room to do so. We have been specifically told (in writing) to use the computers instead when there is nothing to do. We have even been told YouTube is fine as long as there is no work. Because of that, I do a ton of personal web browsing on company computers since my job is so feast or famine so having information like this is helpful.