New CISO, Rich Bi---h (or whatever his name is) is on the rampage about people not doing their jobs and doing too much "personal work" on their work computers. It will be done under the guise of "security," but it's a farce to get people to stop checking personal email on their work computers. Life at AT&T becomes even more hellish.
44 replies (most recent on top)
y͓͌̾̎͐͢e̙̥̖ͬ̒s͙̞̓ͫ
One time years back I logged into my personal email at work just to see if it would let me. I promptly closed out and went back to work. Tried to log in that night, my password had been changed and an email from a friend had been opened. Another warning- IT guy at my sister’s job called her with a friendly warning and told her her bank account number and password.
“Will I be able to access yahoo email on my laptop from my 2nd job? Since starting RTO, I bring the laptop from the other job to the office. To write their code. I often email the script back and forth that other people write. My AT&T boss and other boss think I’m a genius, but I’m just recycling each others code and the code of others. I love automation.”
With what T pays if you’re trying to even come close to tech salaries you need 2-3 jobs, I know this is a joke - but more power to ya.
Don’t block my Snapchat
I remember some time ago when they had some one in for LWD. He did two back to back talks with lunch in between. When he came back he said how odd he found it that AT&T employees could not access Facebook on their work computers. Kinda down talked the company for being outdated and backwards. Of course that was when we were trying to be tech company. And I’m sure he was looking at it from that perspective.
Will I be able to access yahoo email on my laptop from my 2nd job? Since starting RTO, I bring the laptop from the other job to the office. To write their code. I often email the script back and forth that other people write. My AT&T boss and other boss think I’m a genius, but I’m just recycling each others code and the code of others. I love automation.
“HTTPS is not private from the corporation as AT&T utilizes a next gen firewall. They utilize SSL/TLS interception to decrypt, inspect, and then encrypt the communication. If you want to see this in action, just check the security certificate when you connect to a site utilizing HTTPS. The only true way to make a connection private is to utilize a VPN.”
This is correct, which is why we have a vpn, and proxy.
The proxy is the https interception point and why we always have certificate issues and need the additional T cert for terminal functions.
I also don’t use my personal computer for anything work related, but if you are - disable the proxy and get off vpn and just use the normal internet (while not in the office) and when in the office just do the same and connect to a hotspot on your phone.
Or, just use a phone for that while in the office….seriously…
I also suggest not using in-office wifi on your personal. They block a bunch of cr-p, and who knows what snooping they are trying to do. Just use cellular, or if you have to use in-office wifi route your traffic through a vpn.
Never logged into personal email from work comp anyway. Don’t want work accessing my personal emails or contents
So, Yahoo manages ATT's customers email accounts. It will be interesting for ATT to block it's own customers from their email.
Actually I think he's concerned about people clicking on things that they haven't figured out how to block like links in webmail.
Kind of ironic given that he quietly fired Murray and Friends and now all the security training about being the firewall is being forgotten.
They have been using TLS inspection since 2018.
"Anything sent to a site that starts with http_s_ is not visible in transit. That's the whole point of encryption. "
HTTPS is not private from the corporation as AT&T utilizes a next gen firewall. They utilize SSL/TLS interception to decrypt, inspect, and then encrypt the communication. If you want to see this in action, just check the security certificate when you connect to a site utilizing HTTPS. The only true way to make a connection private is to utilize a VPN.
“whole google.com domain is currently blocked for certain groups.”
HR should be a primary group restricted.
This Rich “Beey0tch” sounds like another member of ‘team dark triad’.
“That will stop everyone who does not carry a smaller computer in their pocket that can check email just as easily. I wonder who sells those things anyway?”
This is where corporate asset keyboard stroke monitoring will become more important. Regular periods with no typing will draw attention.
What are most employees going to do all day in the office?
IT just uninstalled Solitaire. Now what will I do?
That will stop everyone who does not carry a smaller computer in their pocket that can check email just as easily. I wonder who sells those things anyway?
whole google.com domain is currently blocked for certain groups.
Tries to get performance with threats.
Have seen this with him. Belittles performance. Claims if you do 5 things in an hour, you should be doing 6. And if you can't do 10 by the end of the year, he'll find someone who can.
Yes, a real motivator.
"You should not be using the the company computer to check any personal accounts. They can read everything and your passwords."
Agree with the first, but anything sent to a site that starts with http_s_ is not visible in transit. That's the whole point of encryption.
The next mandate will be turning in personal cell phones and tablets at the guard’s desk when entering the office. Personal devices can be picked up at the end of the day or if leaving for lunch.
Poor widdle b@by doesn't want to work when he's at work....... Entire millennial generation not worth flip.......
Next thing AT&T will require is for us to actually work.
Not great but it is their right, not like there is not a pop-up that warns ya anyway.
“Because that 2 minutes it takes to check your email really eats into work productivity, right?”
It’s often 2 hours at a time.
What’s next? Will IT take away my Netflix? This is horse cupcakes!!
Pro Tip: Never do personal anything on your work laptop or COU devices. It can and will be used against you. Its been like this for years.
You should not be using the the company computer to check any personal accounts. They can read everything and your passwords.
Because that 2 minutes it takes to check your email really eats into work productivity, right? Not a good look for the CISO
In response to:
"The point here is that reports consistently show employees have primarily been doing personal work using corporate assets while on the clock. This is also a key reason so many companies including T are enforcing RTO."
....
"Pay attention meat-head, you're saying the same shizz he said" - Eminem (8 Mile).
I always check it on my phone. Simple enough. Yeah people have lives outside the job and things going on during business hours that may be personal in nature but require an immediate response. I’m sure we all try to limit that kind of thing, but yeah. We don’t all have assistants to handle things for us. Block all you want. Whatever.
Treat your employee base like toddlers and they will act like toddlers. I’ve never seen this more than over the last year.
What an embarrassing, juvenile, 1980s place to be employed.
“Imagine an AT&T employee using company laptop/phone for personal use.”
The point here is that reports consistently show employees have primarily been doing personal work using corporate assets while on the clock. This is also a key reason so many companies including T are enforcing RTO.
That really isn’t new at all, just depends on who you worked for. They are pretty clear when you log in that you agree to monitoring, so why would you want to do your personal business where someone might see that? Also, companies have blocked websites and apps for years, and that is not out of line. That is their network, and they can restrict what they deem necessary for productivity and/or security. Check your personal cell outside on your multiple smoke breaks.
Imagine an AT&T employee using company laptop/phone for personal use. :-D
Lots of companies block certain types of websites by default. It's common to block email sites. I personally believe a corporation has a right to restrict how their computers and networks are used. Surprised people do this stuff on their work computers where the company can see what they are doing.
@sqj+1slz5j3h did you ever think he may have a phone that is NOT a corporate asset.
Baich is the latest idi0t. He might be in security but is only a metric counter and bully. Tries to get performance with threats.
Look at his resume and he hasn't stayed anywhere very long which also says a lot. Now is offshoring security after his short stint at the CIA--wonder what they would have thought about that?
Imagine them actually wanting people to work?! The nerve.