Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

PremiumSupport posted:

I think you'll find that in a corporate environment (in the United States at least) the computer and everything on it, including any personal login credentials that may or may not be there, is considered to be company property and no right to privacy exists. If the said harassment was sent from a work machine, company IT is well within it's rights, and possibly even obligated by law so search their own computers for evidence.

Now if the machine is owned by the employee then you would probably be correct, but in most companies this is not the case.

Edit: I do agree however that HR should be involved. The police on the other hand, unless the harassment is at a criminal level they really have no need to be involved in what is essentially a civil matter.

I don't know where this belief comes from, but in what way can you possibly believe that ownership of personal accounts is transferred by logging in on a work machine? Most companies i've worked with even have personal use policies, and even if they don't, there isn't some magic clause that would stand up in a court that says "If you log in on this PC we own your facebook". I mean you guys gotta see how ridiculous that sounds. Basically everyone in this thread that is in the US would have to relinquish their SA account to their employer because obviously they own it.

Adbot
ADBOT LOVES YOU

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

Nerdrock posted:

this.

They're not trying to hijack or take ownership of this person's account, just find a record that the account was used, which they absolutely are within their rights to do.

I don't see where the distinction is, you are accessing data for a reason that is not justifiable (Since you are accessing everyones data to find a match) in a store that you have no business accessing (no matter if its the password store or cookies, these are both credential storage). I only know tidbits about the american federal computer hacking laws but I am fairly positive that this easily falls within their jurisdiction. Accessing these stores in order to diagnose a technical issue is a special case where a lot of privacy can be circumvented, doing so for forensic HR purposes certainly isn't. Don't forget that you are performing the same actions as if stealing a stored password/hijacking a cookie. I haven't read a law that cared if you stole 'just' a username or the actual password.
It's as if you were handling medical records and looked at every employees records 'just to see if they have cancer' because you found a hint at such a thing.

Like, do none of you guys use signing certificates? Impersonating someone by use of a personal certificate by signing with it is a crime, regardless of who provided that cert. The private key can't be property of the company, because the signature has to prove the identity of the user. Same goes for passwords IMO.

Anyway, I'll shut up about this since apparently privacy/security isn't a concern for you guys.

SEKCobra fucked around with this message at 15:56 on Jul 18, 2017

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

Avenging_Mikon posted:

I can't remember; are you US-based? For some reason it's in my head that you're in the UK, not US. If that's so, you're 100% correct, but for the US it's definitely different in that a company is within their rights to check browsing history on company machines. I wouldn't do it without a printed and signed copy of the order from my bosses though.

I am indeed not based in the US, defacto you'd get into so much trouble in my country for even thinking about doing this aloud that you could probably shut your company down on the spot. But having touched bases with US companies, it just seems unlikely this extent of invasion can be legal even in the US. But obviously IDK, my main point still stands to CYA to hell and back.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

Raerlynn posted:

That's needlessly passive aggressive.

I live in the US. Every company I have ever worked for as part of the onboarding process has had me sign a document stating in no uncertain terms that they have the right to see everything on their hardware. If I shop on Amazon, check my personal email, or open up Facebook, they have a right to know if I used their hardware to do it.

I solve this quandry by not loving doing these things on their hardware.

It's not meant to be, the responses here just give me the feeling that not only are your laws weak (which I knew before) but you guys actually seem ok with it.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

Zero VGS posted:

You're responsible if you leave your laptop unsecured, and I can still wreck your day over it.

Just like if you leave your Wi-Fi open at home and some stranger does something illegal on it... it's still going to become your problem.

Plus the person has to be smart enough to pin it on someone else once approached which they might not be.

I'm pretty sure it was the IT guy who just showed us that he has the means to remotely access everything, he probably planted the evidence! (This is joke, pls no hurt)

Also, this is the sorta thing I would CMA with more than just an email.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
First thing I did when I started was close the oldest tickets no one could solve. Not sure how to fix that tho.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

Steakandchips posted:

Why did you even take the meeting?

I don't consider it a meeting when someone just comes into my office.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
I wish I could get a nightshift in some critical infrastructure but there really isn't anything like that :(
Working at night is just so very nice, if for the fact that no idiots are at work to call you alone.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
Things regularly reported as fires here:
Sonicwalls with a yellowed case when the power supply is dead, obviously the sonicwall 'was burning'.
Smoke coming out of any device.

I have had more than 5 reports of devices burning and not once has there been a flame.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

ConfusedUs posted:

To be fair, unless it has an internal combustion engine, smoke should not be coming out of any device. Even if there's not an open flame, smoke is the result of something burning!

Not really, 90 % of the time smoke coming out of electronic devices is from capacitors.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

ChubbyThePhat posted:

Please tell me this is real.

You know this is real, it's Linus.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
Don't blow this out of proportion, most people feel the need to tell you why they are on sick leave, so she probably just wrote "I'm going to be out from x to y for my hemorrhoid surgery". I think I am the only person that just calls in and says 'SIck until at least x' at my company, instead of saying "I did stupid thing z, broke my leg, got aids and then also contracted the flu".

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
Why can't a single vHost on Apache have multiple SSL certs? Shouldn't it be possible to server a SSL cert basked on the ServerAlias? We have a website that has 5 different domains that go to one Typo3. We are planning to activate HTTPS and I'm wrecking my brain trying ti figure out if this is possible without redirecting the other 4. Can anyone break this down for me?

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

nielsm posted:

You can put multiple Subject Alternate Name into a single certificate. Remember that all domain names that can serve the site need to be listed there, including the "primary" name, otherwise some recent browsers will reject it.

Otherwise if you already have the certificates, or your provider won't sign multi-name certificates, you need to create a vhost for each cert and possibly redirect them all to a primary name.

I know that, but I'm trying to wrap my brain around why I can't just have 3 certs for example.com example1.com and example2.com and server them depending on which site the user goes to. With SNI this seems perfectly doable.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

spankmeister posted:

You can with SNI but you need separate vhosts for that. I don't see the problem, really

I was thinking aobut pointing multiple vHosts at the Typo, but I can't find anything reassuring me that this won't lead to issues because of the instances interfering.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

spankmeister posted:

Why not set up a few reverse proxies pointing to the one instance?

This is the only clean-ish solution I could think off but really I'll just force them to use redirects because what they have built is a horrible abomination anyway.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
IDK, my problem with Linus is his pretending to be scientific and acting like he is an authority on things when just about everything that company produces is SO loving WRONG.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
I always make sure to provide a detailed explanation of what the problem was and how to fix it and it pissed me off so much when I fixed my own ticket with MS (Convergys) and this was their response when I asked for an explanation and why they couldn't figure it out:
"Unfortunately on Professional level of support we can’t work on root cause analysis or the observed problems, because of that we can’t provide you an explanation "

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
I just watched the Linus video and I just dont get why they painted rgb components instead of building a pc that isnt rgb. They didnt play the joke up enough to do it just for the lulz i feel

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
Good on you if you are ok with installing spyware on your pc for random testing. I now know what my online security exam would look like.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
I'm assuming those are all work details and not private email or phone, those can obviously be published. I don't think you can stop your company from publicly acknowledging that you work there under privacy laws. :v:

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

Collateral Damage posted:

Under GDPR you can, because your name is still personal information. Our legal and HR department are both busy as hell chasing down and deleting personal information from places where it's been carelessly stored, and it's only 8 months until it starts getting enforce.

But again, that's EU law and I don't know how it works in the new world.

I am in the EU and I've never heard of such an asinine interpretation, I don't see how you can construct a case where an employee working at the company can be constructed as being privileged personal data.

Foxhound posted:

It's still dumb to put them all up there because you just know a lot of people will google "<company> phone number" or "<company> email address" and call/mail the first number/address they see.

You can also just email firstname.lastname@example.com at 90 % of all companies to reach the CEO, what's your point?

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

Ursine Catastrophe posted:

So since linkedin shows people's names and their previous/current work history, is just straight illegal now? I mean, there's either gotta be something else going on there, or someone's done something real dumb with a law without thinking about how that's actually gonna affect things

either is possible of course, but that sounds weird as hell

Well on linkedin everyone agreed to that so it's unquestionably OK.

This isn't a law that forbids personal data from being public or used or whatever, it just adds some structures that have to be implemented if you do handle 'sensitive' data.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
Even that site specifies what “sensitive personal data” is, names are not that and the burden for handling that stuff is far lower.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
I actually regret rooting this phone, it has made things (updates) much more complicated and I didnt need to transfer that much actually.
Although, apparently the new firmware introduces problems so :unsmith:

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

Inspector_666 posted:

Don't try to tape a breaker into the ON position please.

Do american breakers not fail regardless of switch blockage?

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
Sounds to me like the internal IP is for some reason a public IP and they want a 172.16.0.0/12 Address on it.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
All I can think is that someone got paid out of the rear end to come up with this crap.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
Everything is transient and putting labels like "finished" on our process messes with our mantra.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

"Call our complaint department" in response to your phone not working is great advice.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
What argument is made against 2.4 GHz?

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

Methanar posted:

I'm curious what you appeared to be logged in as after doing that.

Also: the ease of access hack

That's the one where you change the filesystem before booting, right? Not really a hack when you have full file level access to a system.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
Well honestly, if 55 % is what he needs and he has 54,49999 % I don't see any good reason not to round even just the last digit, I mean come on.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
Someone help me out, is it possible to put a second router on a Subnet, have certain PCs use that as gateway and then just forward internet traffic to the "real" router? I'm thinking no because the reverse IP would be a mismatch but I can't wrap my brain around it right now.
Background is trying to get an easy solution to have our admin PCs be able to work with customer networks we are setting up at our location before deployment without having to set them up on our clumsy main routing infrastructure that makes this needlessly complicated. I wanna just insert an edgerouter. and have it 'split' the management traffic to the network of the day.

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

EoRaptor posted:

I'm betting (hoping) that you guys are using 7.0.0.0/8 for that extra range. Although it's assigned to the U.S. DoD, they've said it's okay to use for internal private networks, as the IP space will never appear on the public internet. It gives people a whole other Class A block that is 'safe' for network management purposes if you can't deploy IPv6.

Then why don't they donate it for that purpose?

Adbot
ADBOT LOVES YOU

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:

anthonypants posted:

What part of that post made you think they didn't?

The fact that I haven't seen a RFC stating this.

  • Locked thread