• Septimaeus@infosec.pub
    link
    fedilink
    arrow-up
    2
    ·
    3 days ago

    I’ve seen that scenario play out multiple times now.

    In every case management’s paranoia was a result of their inability to comprehend employee departure as anything short of personal betrayal and thus, drama ensued. Cringe-o-rama

    Practical takeaways (tips for non-IT knowledge workers)

    While avoiding toxic management in the first place is great, ultimately the best advice is to protect yourself in every case by learning better habits/hygiene: if possible, use only personal equipment for anything personal; otherwise, learn how to encapsulate personal activity/traffic effectively.

    Effective methods include portable or web-based encrypted remote to a home PC, lightweight virtual machine with a killswitched VPN that you run exclusively from an encrypted drive that travels with you, and so forth.

    Mistakes include:

    1. Any personal web browsing — trackable in enough ways that it’s best to just assume no countermeasure offers complete privacy.
    2. Storing personal data on disk — outside of security and privacy concerns, this has often been used by companies to claim employee IP as their own.
    3. Personal use of workstation/client software — least problematic, but much of this is trackable at the system and network level.