This is absolutely correct. Heck, you’re free to deny that based on any reasoning, maybe the shoddy icon of the work app doesn’t match your phone wallpaper.
The phone is your private property, if an employer requires an app to be installed to do your job, they can provide a phone.
I would also never let corporate IT manage a device, e. g. a laptop connected to my private network at home.
I would also never let corporate IT manage a device, e. g. a laptop connected to my private network at home.
That’s pretty standard for working from home. I’m expected to use the company provided, managed laptop with my internet connection.
I figured so long as I made sure of things like there weren’t any open file shares and things like routers and IP cameras were password protected there wasn’t a whole they could see.
If I was really paranoid I could set up a VLAN or something.
I know it is somewhat of an accepted practice, and a lot of people lack the means or the knowledge to handle it any other way, but I’d still like to raise awareness that you’re basically inviting a foreign actor into your network.
The days were people would trust corporations, including their employers, to be generally benevolent and to do the right thing are long over.
No, have the company buy a laptop, and if necessary, also have them buy the hardware that allows for proper network separation, if not already available.
Surely not. But also many employees won’t even ask for it, and change will only happen if people care about it.
So first, raise awareness, and naturally, implement those things at any companies you manage or own.
I’m not saying quit your job and become homeless if your employer won’t corporate with you on the issue. Everyone should think about how this could potentially affect them and what they can do within the constraints they operate in, though.
As someone else in this thread said, a separate (VLAN, guest) network for work devices, reasonable access rules etc. can go a long way. Eventually, I would like this to become unacceptable though.
This is absolutely correct. Heck, you’re free to deny that based on any reasoning, maybe the shoddy icon of the work app doesn’t match your phone wallpaper.
The phone is your private property, if an employer requires an app to be installed to do your job, they can provide a phone.
I would also never let corporate IT manage a device, e. g. a laptop connected to my private network at home.
That’s pretty standard for working from home. I’m expected to use the company provided, managed laptop with my internet connection.
I figured so long as I made sure of things like there weren’t any open file shares and things like routers and IP cameras were password protected there wasn’t a whole they could see.
If I was really paranoid I could set up a VLAN or something.
I know it is somewhat of an accepted practice, and a lot of people lack the means or the knowledge to handle it any other way, but I’d still like to raise awareness that you’re basically inviting a foreign actor into your network.
The days were people would trust corporations, including their employers, to be generally benevolent and to do the right thing are long over.
If you ever must, buy a new laptop. And use it on a guest wifi network. Use it as you would a work laptop, nothing personal on it
No, have the company buy a laptop, and if necessary, also have them buy the hardware that allows for proper network separation, if not already available.
Just another thing to be aware of.
Not all companies will do that
Surely not. But also many employees won’t even ask for it, and change will only happen if people care about it.
So first, raise awareness, and naturally, implement those things at any companies you manage or own.
I’m not saying quit your job and become homeless if your employer won’t corporate with you on the issue. Everyone should think about how this could potentially affect them and what they can do within the constraints they operate in, though.
As someone else in this thread said, a separate (VLAN, guest) network for work devices, reasonable access rules etc. can go a long way. Eventually, I would like this to become unacceptable though.