• johntash@eviltoast.org
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    Lol sorry, I’m probably not explaining it properly.

    • Corporations are required (by law in a lot of cases) to protect certain information
    • Corporations also have an interest to ensure their own property isn’t misused or abused

    Corporations need a way to achieve those two points. Normally this is done by some sort of MITM corporate proxy and maybe some invasive spyware-like software on the machine itself.

    Some people absolutely abuse this power and would have no problem reading your personal e-mail, or watching your desktop screen all day. I agree that this shouldn’t be a thing and they shouldn’t have access without some sort of strict approval process.

    But, how is a corporation going to prove that you did or did not send a secure/private document on your work device through your personal e-mail? If you are using your personal email, it won’t go through the corporate mail server so they have to rely on either MITM proxies and logs, or something locally on the device. The alternative (no monitoring at all) would lead to situations where data is compromised and the company has no idea why or how, if they even are aware of it at all.

    Similarly what if an employee uses their personal email to accidentally download a virus and that virus starts uploading all of the files on the device to a server somewhere? Without any sort of monitoring, that event could go undetected.

    If there’s an alternative, I’d love to hear about it. But I’ll probably always stick to keeping work and personal data separate.