Can work see my log ins
Discussion
At the grand old age of 56, I have been in my first full time job in at least 30 years, as opposed to being self employed, for 7 weeks.
I have a desk and a computer. This is all new to me.
I'd like to look at my documents via One Drive, Drop Box excetera but does that mean that my employers can get hold of my passwords etc?
Cheers
I have a desk and a computer. This is all new to me.
I'd like to look at my documents via One Drive, Drop Box excetera but does that mean that my employers can get hold of my passwords etc?
Cheers
Anything is in theory possible, in all likely hood no. They will probably have some form of web monitoring and will most likely some form of web blocking. Taking it a step further they will most likely have the ability to see what applications you have installed as well. Dropbox is generally a big no-no in most places owing to DLP concerns etc. In a nutsack, it's reasonable to assume everything you do on a work pc can be "seen"
Speak to your IT team.
Most should be happy to tell you what they do.
The short answer is yes they can see your passwords if they want to, but they almost certainly don't, and if you're using file sharing/storage apps on a corporate PC that can be anything from "meh" to a big no-no depending where you work.
Most companies of any size will have an acceptable use policy so look for this.
Most should be happy to tell you what they do.
The short answer is yes they can see your passwords if they want to, but they almost certainly don't, and if you're using file sharing/storage apps on a corporate PC that can be anything from "meh" to a big no-no depending where you work.
Most companies of any size will have an acceptable use policy so look for this.
MECHENG84 said:
If they're monitoring (and not all companies do) they'll be able to see which websites you're visiting. They won't be able to see your passwords as this is end to end encrypted...unless they've installed a keylogger on your computer...but I very much doubt they have done that.
You don't need to do that.In a corporate environment they can push a certificate to their computers so that when someone on one of those computers visits a website it look encrypted and is encrypted but if you were to look at how it's happening it's using their certificate.
That kind of thing is very common but it comes back to my first comment, it's very unlikely that anyone is going to be doing anything log and/or look for credentials.
Can't be that strict if they're allowing personal devices on the wifi, unless it's guest only?
Done loads of SSL decryption which is what is inspecting your https traffic, never come across anybody checking for personal creds, it won't be logged anywhere (top banks might be storing raw packets but that's unusual) so would be packet sniffers and a fair bit of effort.
As has already been said, check your use policy, if personal sites are allowed then have at it, just try and browse to dropbox without logging in and see if you get a corporate block or warning page.
Done loads of SSL decryption which is what is inspecting your https traffic, never come across anybody checking for personal creds, it won't be logged anywhere (top banks might be storing raw packets but that's unusual) so would be packet sniffers and a fair bit of effort.
As has already been said, check your use policy, if personal sites are allowed then have at it, just try and browse to dropbox without logging in and see if you get a corporate block or warning page.
steve-V8s said:
geeks said:
Dropbox is generally a big no-no in most places owing to DLP concerns etc.
Sorry to be a bit simple but what are "DLP concerns"Generally speaking, if in doubt, don't do things on a work computer or connection.
Funny thing thing to worry about. As others have said it is possible. I've worked places where we've had SSL decryption in place. We could read peoples personal emails.
But they wont capture passwords. Because they cant do anything with them. Getting your password and then using it is unauthorized accessing and I'm pretty sure it would be an offence under the computer misuse act.
But they wont capture passwords. Because they cant do anything with them. Getting your password and then using it is unauthorized accessing and I'm pretty sure it would be an offence under the computer misuse act.
BenjiS said:
Forwarding work email to a personal address is a classic one that people do. As Croyde admits, he hasn’t been in this game for a while, and I wouldn’t want him to get caught out by something silly. Simplest to ensure work machines are used for work, and personal for personal, with no overlap at all.
This is great advice. Work computers are for work, same as work phones or tablets. Sure Facebook and web browsing etc is ok to a degree but keep work and personal separate. Also don't forward confidential emails to your own email account as that will open a world a pain. I would just assume they have full visibility of everything. So if there is something you don't want them to see then don't use their computers for that.
If using your own computer in work for personal stuff I would use a 4G dongle for connectivity personally so there is no argument of you hanging your own device off their network.
If using your own computer in work for personal stuff I would use a 4G dongle for connectivity personally so there is no argument of you hanging your own device off their network.
At my new job they've blocked access to Gmail on the (reasonable enough) grounds that they don't want people wasting too much time on non work-related stuff.
Oddly enough I can access all the other Google services from my work machine plus social media sites like this but I've taken the hint and only very rarely stray off work-related stuff.
If I really need to send or receive a email through Gmail when I'm at work I just use my phone. Which is where their BYOD policy is handy.
Overall, I don't mind. It works quite well. I can do urgent non-work stuff if I need to but, oddly enough, it's easy enough to sort most of those things in evenings and on weekends.
Oddly enough I can access all the other Google services from my work machine plus social media sites like this but I've taken the hint and only very rarely stray off work-related stuff.
If I really need to send or receive a email through Gmail when I'm at work I just use my phone. Which is where their BYOD policy is handy.
Overall, I don't mind. It works quite well. I can do urgent non-work stuff if I need to but, oddly enough, it's easy enough to sort most of those things in evenings and on weekends.
AC43 said:
At my new job they've blocked access to Gmail on the (reasonable enough) grounds that they don't want people wasting too much time on non work-related stuff..
When I was running an IT dept I configured the firewall rules so that Gmail, Facebook, Twitter etc were available at lunchtime and coffee breaks but blocked otherwise.(Well, blocked for everyone else).
Nimby said:
When I was running an IT dept I configured the firewall rules so that Gmail, Facebook, Twitter etc were available at lunchtime and coffee breaks but blocked otherwise.
(Well, blocked for everyone else).
The company I work for allows email 1200-1400 and 0000-0200 only. Social Media is blocked all the time.(Well, blocked for everyone else).
croyde said:
At the grand old age of 56, I have been in my first full time job in at least 30 years, as opposed to being self employed, for 7 weeks.
I have a desk and a computer. This is all new to me.
I'd like to look at my documents via One Drive, Drop Box excetera but does that mean that my employers can get hold of my passwords etc?
Cheers
Unless the IT department are in the 1920s they for sure can see what sites you are accessing but probably not your log on passwords, why do you feel the need to access dropbox and one drive at work? is it work related? if not i would just not use them sitesI have a desk and a computer. This is all new to me.
I'd like to look at my documents via One Drive, Drop Box excetera but does that mean that my employers can get hold of my passwords etc?
Cheers
Nimby said:
AC43 said:
At my new job they've blocked access to Gmail on the (reasonable enough) grounds that they don't want people wasting too much time on non work-related stuff..
When I was running an IT dept I configured the firewall rules so that Gmail, Facebook, Twitter etc were available at lunchtime and coffee breaks but blocked otherwise.(Well, blocked for everyone else).
The safest way to treat this situation is separation, only do work stuff on work provided devices, any homer stuff use your own device or wait until you are home.
I treat the guest wifi at work as a public wifi access point i.e. someone is looking over your shoulder.
It is all too easy to get caught out and do the wrong thing, a lot of companies now deliberately send spam to employees to see who clicks on the link and needs re-education..
I treat the guest wifi at work as a public wifi access point i.e. someone is looking over your shoulder.
It is all too easy to get caught out and do the wrong thing, a lot of companies now deliberately send spam to employees to see who clicks on the link and needs re-education..
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff