I would use GDPR on them.
Ask HN: My client want an agent on my laptop. Is this the new normal?
311–320 of 506 posts
Re: Ask HN: My client want an agent on my laptop. Is this the new normal?
#312I don't find this uncommon. I also work as a freelancer, but for local companies (eu). Sometimes the company (banks for example) will ask me to work on one of their laptops, which has vpn and other software that they want. I can of course deny, but then I won't get the contract. As long as I don't feel that they are invading my privacy, like you hear some companies do by taking screenshots, checking for idleness, etc…
That's different tho.
Firms that hire contractors can legitimately require the use of their own equipment, to an extent, on security grounds.
However, a hiring firm installing software on equipment they don't even own? That's an entirely new level of control.
Remember that contractors are free agents compared to employees. The immorality of this spying aside, contractors shouldn't cede this control unless they want to be treated as employees. They might gain paid holidays and better work security by doing so, but permanent employees are underpaid.
Re: Ask HN: My client want an agent on my laptop. Is this the new normal?
#313Earlier quoted context omitted.
Arguably, the new laptop being difficult to procure is a feature, not a bug. It serves as a deterrent to installing that agent, if it's easier to just make an exception.
Or they reimburse the consultant when they procure their own dedicated laptop for the client's work.
And hey, when the gig is over you got a new laptop that just needs to be formatted and it's all yours!
Re: Ask HN: My client want an agent on my laptop. Is this the new normal?
#314Say no. Name and shame.
The soc2 controls in question can be met with a handful of config changes and an antivirus install. (I’ve implemented soc2 controls five times) Full disk encryption with FileVault or Bitlocker Screen lock Enable automatic security updates Use of password manager Virus scan with ClamAv or windows defender.
If they want an agent to make sure you’re working when you say you’re working I’d pass.
Re: Ask HN: My client want an agent on my laptop. Is this the new normal?
#315If you are a freelancer then your contract should allow you to do work for others. In which case, your response to this client has to be "Sorry, but my business laptop potentially has data from other clients on it. I can't let you install this monitoring agent without violating my contractual confidentially agreement with those other clients. I always maintain client confidentiality and will do the same for you. If y…
> If you are a freelancer then your contract should allow you to do work for others Not only that, in some EU countries it's even illegal for a freelancer to work for 1x customer.
> Not only that, in some EU countries it's even illegal for a freelancer to work for 1x customer.
How does that work? Is it more "exclusively for one customer" similar to the how the IRS rules work?
Re: Ask HN: My client want an agent on my laptop. Is this the new normal?
#316Earlier quoted context omitted.
> "The poster says "Their business model (in my case) seems to be to take money from companies to spy on their employees/contractors, and then they sell the employees/contractors private information to "targeted advertising". > Do you have any evidence for this?? I've just been involved in selecting Drata as a vendor for SOC2 compliance planning for our company. If this is true it's a huge deal and totally against my…
That’s not how burden of proof works. OP made a claim that Drata collects private employee info and resells it. That’s a large claim. It’s on OP to justify that position, not on the parent to rebut the opposite.
It is a large claim. I'd say there's a bit of burden on both sides as the parent called it out as nonsense. They're implying they know for a fact that it doesn't breach privacy/integrity.
Re: Ask HN: My client want an agent on my laptop. Is this the new normal?
#317I would see two rather easy options in this case:
- Client supplies a laptop
- You create a virtual machine/environment on your laptop and grids the client within the environment.
Re: Ask HN: My client want an agent on my laptop. Is this the new normal?
#318Earlier quoted context omitted.
If this is really the kind of things this company would do… why are you working for them?
> If this is really the kind of things this company would do… Because, until last week they didn't. Now I have to figure out if I'm just an unreasonable, stubborn old guy, or if this requirement is out of band.
I like others idea of getting them to spring for a dedicated computer. You just have to make it palatable to their accounting department. Maybe lease a laptop and expense the payments or something. If you have an accountant, I'd consider asking them for suggestions on "good ways" on how to make your client pay for your laptop.
In my case, I just outright said "hey, you guys I really want you to be my client but I'm gonna need a new laptop". So we bought a new laptop as part of the contract.
Re: Ask HN: My client want an agent on my laptop. Is this the new normal?
#319Earlier quoted context omitted.
Not really. VLAN provides segmentation, but it does not provide any mechanisms to limit access to other vlans in your network - which are most likely routed by your router. You will need to add some L3 filtering (acls/iptables/whatever) to isolate segments.
That's only true if use of VLAN tags is controlled by hosts; if you use a smart switch to assign VLANs to ports it's pretty much as-if you have multiple, physically separated networks.
All nice, but now you need managed switches and stuff plus some amount of unbillable time to configure it all and fix it when it breaks. Might be worth it if your bill rate accommodates it though.
Re: Ask HN: My client want an agent on my laptop. Is this the new normal?
#320I mean if they provide you with separate laptop and all required software I don't see much harm in this.