What's next? Using https could get you fired because they can't MITM you?
Using Brave's “Private Window with Tor” could get you fired
11–20 of 72 posts
Re: Using Brave's “Private Window with Tor” could get you fired
#12What's next? Using https could get you fired because they can't MITM you?
Most of them use group-policies and other software to install root-certs onto company devices. HTTPS won't help you with MITM in that case.
Re: Using Brave's “Private Window with Tor” could get you fired
#13I skimmed through the reddit thread but couldn't find an answer. Why do companies not want you using Tor ?
The initial post mentions FUD and top-level management, so it's possible management associate Tor with dark net drug dealing, CP, and assinations and so on. Non-tech people aren't likely to have heard of Tor in any other context.
Re: Using Brave's “Private Window with Tor” could get you fired
#14I skimmed through the reddit thread but couldn't find an answer. Why do companies not want you using Tor ?
Speculation: it looks a lot like a data exfiltration attempt, or like malware trying to reach its control network. Just don't do things unrelated to work using work resources.
This is definitely the case. Most of these people are worried about you ferreting away company secrets over a connection they cannot monitor.
Re: Using Brave's “Private Window with Tor” could get you fired
#15What's next? Using https could get you fired because they can't MITM you?
I noped out of the corporate CA that came per-installed for the purpose of MitM my machine. Getting rid of the corporate malware increases my productivity anyway (via faster computing).
Re: Using Brave's “Private Window with Tor” could get you fired
#16I once triggered my domain account and PC intranet connection to be disabled because I started a Linux ISO download via BitTorrent. I didn't get in any trouble. Assuming this is even real, it's obviously just an example of bad management or there's more to the firing than what's being said.
I was "caught" torrenting Knoppix on a university computer. I had left it running in the background, and not realised it wouldn't exit when I logged off.
After I'd shown what it was, the sysadmins suggested leaving it seeding to see if we could get the university domain name to the top of the "top seeders" list.
Re: Using Brave's “Private Window with Tor” could get you fired
#17What's next? Using https could get you fired because they can't MITM you?
Most of them use group-policies and other software to install root-certs onto company devices. HTTPS won't help you with MITM in that case.
It was good while it lasted tho.
Fun times getting blocked by the public/corporate firewall for something, hovering the mouse in the right place and pressing “s” and going, ahhh, “fixed it!”
Re: Using Brave's “Private Window with Tor” could get you fired
#18I skimmed through the reddit thread but couldn't find an answer. Why do companies not want you using Tor ?
Malware and other attackers use Tor for C&C.
So blocking Tor hinders attackers using it.
Re: Using Brave's “Private Window with Tor” could get you fired
#19There are industries where compliance requires all work-related communications be logged and monitored.
This logging is typically done through proxy servers on the network, and avoiding them is a _bad_thing_. They will also track web traffic through a proxy and MITM any https traffic by forcing the use of specific keys. They're trying to look for insider trading. Avoiding the proxy is the problem.
Staff using their own apps for regulated communications just cost JPMorgan USD$200m.
https://www.cnbc.com/2021/12/17/jpmorgan-agrees-to-125-milli...
Re: Using Brave's “Private Window with Tor” could get you fired
#20My company blocks so much inane crap it’s ridiculous. Any site not explicitly reviewed by the firewall company? Blocked. Want to Google restaurants for lunch? Half the restaurants websites are blocked under the firewall rule against “alcohol and bars”. So much more.
Trying to talk to IT about it is painful. I had to go through three levels of support over a week just to get a single site unblocked.
Before Work-from-Home started, Brave’s Tor support was a godsend just for getting actual work done.
Before my department got bought out, our old company had pretty draconian blocking as well, but if you explicitly plugged into the ethernet ports in the developer area they were wide open.
And no, we’re not in any sort of industry where it really matters. Privately held educational software company.