Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Glassdoor not so anonymous

webworm.co

Post reply on HN
Print view View original

221–230 of 507 posts

Re: Glassdoor not so anonymous

#221

Post by MadsRC »

lazide wrote: post #213
ls15 wrote: post #191

Earlier quoted context omitted.

> If it’s a company provided laptop then it’s a good idea to assume that every keystroke, DNS request, and network packet is fair game. In the USA and other countries with subpar privacy laws.

Which countries don’t allow a company to monitor activity on company equipment and company networks during company time?

IIRC Danish law states that work email may be used for private purposes and that anything clearly labeled as private is to be considered such. For example, by moving email to a folder called “private”.

For the employer to open/read such communication would be highly illegal, akin to opening others private snail mail.

I do believe that this also extends to corporate issued phones and computers. Especially since you’re automatically taxed for “private use” of such equipment when assigned.

Re: Glassdoor not so anonymous

#222

Post by MarkSweep »

Mandatum wrote: post #61
chaps wrote: post #35

Once had a contract where my client wanted me to do "security work", which was initially meant to be for pentesting their clients, but it turned into me building their wifi auth system. At some point in the gig, one of their clients went to them asking them if it was possible to de-anonymize someone glassdoor review since someone still-employed worked with them. They then went to me to see if I could do it for them.…

https://www.glassdoor.com/Reviews/Employee-Review-Kraken-Dig... https://www.kraken.com/ is doing it too.

This page gives a little context about when they post such warnings:

https://help.glassdoor.com/s/article/Glassdoor-Alerts-Badge-...

Based on the wording on this page you have to be pretty flagrant to get a warning sign attached to your company.

Re: Glassdoor not so anonymous

#223

Post by metadat »

O__________O wrote: post #115
Mandatum wrote: post #61

Earlier quoted context omitted.

https://www.glassdoor.com/Reviews/Employee-Review-Kraken-Dig... https://www.kraken.com/ is doing it too.

This Google shows all the companies listed within Google’s index with the “Glassdoor Alert: Employer Legal Action” flag; just kept removing the companies for the SERPs using the negative search operator until none were left. No idea why Glassdoor doesn’t just have a list of all the companies doing this. https://www.google.com/search?q=Glassdoor+Alert:+Employer+Le...

"did not match any documents"

Re: Glassdoor not so anonymous

#224

Post by pyuser583 »

If you want to fix your Glassdoor review, it’s really simple.

As soon as you onboard employees, pressure then to leave Glassdoor reviews. Since they just started, they obviously approve, albeit ignorantly.

Re: Glassdoor not so anonymous

#225

Post by ywain »

gzer0 wrote: post #210
Mandatum wrote: post #39

Earlier quoted context omitted.

DNS records of your VPN or corporate work station would be pretty easy. You can line then up with when the review was posted. Then investigate their workstation more "thoroughly".

I run a Tor middle relay on one of the 8 IP addresses I have purchased as a block from a certain ISP that allows you to, I have been for around a year. The amount of traffic passing through it is heavy. Obviously, this comes with certain caveats (the middle relay's, or any TOR relay IPs are publicly available and published weekly on GitHub and as you can imagine, some places like to instant ban anything to do with TO…

I understand why websites would ban Tor exit nodes, but what's the point of banning middle relays? Wouldn't those only communicate with either other relays or exit nodes?

Re: Glassdoor not so anonymous

#226

Post by MadsRC »

alasdair_ wrote: post #179
koolba wrote: post #149

Earlier quoted context omitted.

> If so, is this legal? If it’s a company provided laptop then it’s a good idea to assume that every keystroke, DNS request, and network packet is fair game. Laptops are cheap. There’s no reason to mix personal and corporate usage.

This is an interesting question post-pandemic where the network the laptop is using may be an employees home network, especially if there is some kind of active scanning involved.

This is a real problem, especially for InfoSec tools. Many EDR tools, such as MS Defender for Endpoint (or whatever it’s called these days) and Crowdstrike Falcon, include functionality that will scan your local network for devices in order to discover unmanaged devices…

It’s a nightmare from a privacy point, but its also a problem for the InfoSec tools… How do they distinguish between an unmanaged private device on a private network or a unmanaged device on a corporate network?

Re: Glassdoor not so anonymous

#227

Post by andkenneth »

surement wrote: post #99

This is interesting but a more accurate title would be "New Zealand law allows corporations to sue Glassdoor for user data." As the article notes: > statements of “pure opinion” are protected by the First Amendment in America. But New Zealand doesn’t have this. Statements of opinion are not categorically protected. That said, the warning that Glassdoor adds to the pages of companies that do this has to be the biggest…

New Zealand requires the opinion to be "honest opinion", in that you're not allowed to make up an opinion just to cause damage.

Re: Glassdoor not so anonymous

#228

Post by gzer0 »

enkrs wrote: post #219
gzer0 wrote: post #210

Earlier quoted context omitted.

I run a Tor middle relay on one of the 8 IP addresses I have purchased as a block from a certain ISP that allows you to, I have been for around a year. The amount of traffic passing through it is heavy. Obviously, this comes with certain caveats (the middle relay's, or any TOR relay IPs are publicly available and published weekly on GitHub and as you can imagine, some places like to instant ban anything to do with TO…

Its a nice setup, but you can’t see any DNS data in the TOR middle relay traffic. Middle relays just pass on encrypted data to the next tor node, not “the Internet”. So any DNS requests hitting outside from your 8 IPs are still all attributable to you.

For any activity in which I do not feel safe and threatened for my Identity, I utilize the middle relay as a full on end-to-end Wireguard VPN itself to route all traffic through a VM I've got specifically built for this.

In addition, there is also this for those that do not want to go through the hassle: https://blog.cloudflare.com/welcome-hidden-resolver/

Cloudflare runs their own DNS Tor resolver.

Re: Glassdoor not so anonymous

#229

Post by dmos62 »

Mandatum wrote: post #39
chaps wrote: post #35

Once had a contract where my client wanted me to do "security work", which was initially meant to be for pentesting their clients, but it turned into me building their wifi auth system. At some point in the gig, one of their clients went to them asking them if it was possible to de-anonymize someone glassdoor review since someone still-employed worked with them. They then went to me to see if I could do it for them.…

DNS records of your VPN or corporate work station would be pretty easy. You can line then up with when the review was posted. Then investigate their workstation more "thoroughly".

DNS over HTTPS would solve that, right? It's an options flag on Firefox.

Re: Glassdoor not so anonymous

#230

Post by gzer0 »

ywain wrote: post #225
gzer0 wrote: post #210

Earlier quoted context omitted.

I run a Tor middle relay on one of the 8 IP addresses I have purchased as a block from a certain ISP that allows you to, I have been for around a year. The amount of traffic passing through it is heavy. Obviously, this comes with certain caveats (the middle relay's, or any TOR relay IPs are publicly available and published weekly on GitHub and as you can imagine, some places like to instant ban anything to do with TO…

I understand why websites would ban Tor exit nodes, but what's the point of banning middle relays? Wouldn't those only communicate with either other relays or exit nodes?

Sites that don't want Tor users should only block exit relays, but some will lazily block all relays. It's unfortunate but that is the current state of affairs right now.
Post reply on HN