7 ms·

> In the US, there's the expectation that when you use an employer-provided device that any and all activity on it can be fully monitored/recorded I don't expe

> In the US, there's the expectation that when you use an employer-provided device that any and all activity on it can be fully monitored/recorded I don't expect this. I know that some companies install spyware on their devices, but I don't expect it, I don't accept it, and if they did it without disclosing it I'd be furious. I understand they're allowed to do it. I'd never work anywhere that did.

stingraycharles 4mo ago
I think the keyword is “can”. It is allowed, contrary to eg the EU, where this is not allowed.
- throw1234567891 4mo ago
  It is allowed under certain circumstances.
  - prerok 4mo ago
    I am pretty sure there would have to be a court order, i.e. a severe violation would have to have good ground to be suspected.
    - throw1234567891 4mo ago
      No court order. Just a suspicion against an individual, and a process to follow. Plus, you have to tell them. There is no mass surveillance without notice, correct.
- caymanjim 4mo ago
  Yeah, I know they can. I just can't believe it's normalized and that people simply accept it. Good on the EU for pushing back.
  - 3form 4mo ago
    I guess from my perspective there are even more dire problems in the US that I'm surprised people accept. But it seems they don't know, or care, or know that they should care. Perhaps it's the lack of proper authoritarian regime in the US' past that drives this. I believe the temporal proximity of such makes people aware of, and angry against, the many traps that such systems leave in their "law", so you can be imprisoned anytime for anything. EU has a bunch of countries with varying degree of such past.
    - mrhottakes 4mo ago
      Most people need to work to support themselves so it's quite inconvenient to single-handedly solve all of the problems in the US. Suggesting people simply don't know or care is very naive.
      - bigfudge 4mo ago
        I’m sympathetic to this view, butI don’t see any evidence they actually do know or care though. This (workers rights) gains no traction in US elections. You have this weird macho culture around it, almost like complaining about this abuse would be a sign of personal weakness.
      - johannes1234321 4mo ago
        On the time where Europeans fought for their worker rights they had to work, too. Often even not yet having other civil liberties. However a thing that changed is impact: A handful coal workers could interrupt work in significant ways.
  - mhurron 4mo ago
    You should expect it because it's the safest position to work from. Don't use your work device for non-work, they may be tracking something or everything and do you want that in that record. Additionally, don't use personal devices for work, but that is because of other reasons.
  - jlarocco 4mo ago
- KaiserPro 4mo ago
  > It is allowed, contrary to eg the EU, where this is not allowed. Its allows in most of the EU apart from germany where there are strict limits. however you can still record what your users are doing for purposes of detecting fraud. This is where it differs from the USA, where they can do anything because they have no data protection laws.
  - LtWorf 4mo ago
    Would it be too much to ask to not make stuff up?
    - KaiserPro 4mo ago
      WOuld it be too much to ask for you to dig a little deeper in to what the law allows? An employer am allowed to record all your actions for the purposes of detecting fraud and or illegal activity. The method or recording and the way the employer stores and allows access to that recording must be "reasonable" For example if you are using slack, gchat or teams, all your conversations are logged in the compliance system. Every action you make in m365 is also logged. AWS actions are also logged if you have cloud trail enabled All you emails are also recorded and stored for n years. If you have zscaler or some other threat detection system every site that you visit will be recorded. The anti phishing plugin you have will also log what sites you are looking at. Theses are not automatically illegal, its how the data is stored and processed that determines the illegality. Now, lets get to meta. As part of their leaking detection system, in about 2024 they started routinely taking screenshots of all users every n minutes. One could argue that it wasn't proportionate. However for holland, france and germany, the workers councils should have been informed. The thing that was illegal was the covert nature, or at least not explicitly telling employees that they were taking screenshots. not the screenshots themselves. For the AAI bullshit that meta are pushing, again depending on how its done its not necessarily against the various EU/UK data protection laws to record the data. Where it gets interesting is how and where the data is processed later on. To blindly say that "EU says it can't happen" is far too simplistic and not accurate to say the least.
      - 4mo ago
- d1sxeyes 4mo ago
  It’s not true that it’s not allowed in the EU. There’s the Barbalescu ruling which is case law that says employers must fulfill a bunch of criteria around informing employees, the necessity of the monitoring, and they are not allowed to impose blanket bans on private use, but it is still legal to monitor employees in the EU.
  - layer8 4mo ago
    It can be legal, but demonstrating the necessity is a significant bar.
sunsetSamurai 4mo ago
if it's a device provided by your company, it's very likely it'll have some spyware on it.
jbuhbjlnjbn 4mo ago
You can rest assured a company firing you for what they saw while surveilling your work computer will not be so stupid as to reveil this fact. That would indeed be a liability for them. They will simply invent a different reason for firing. Because they know it's not allowed (or at least frowned upon), but they decided to do it anyways, the company surveillance is kept secret and downplayed and plausibly denied as much as possible.
- devmor 4mo ago
  Or they just find another way to show you did it - the idea is very similar to how law enforcement uses illegal spying. They simply find another way to prove what they already caught you doing - it’s called Parallel Reconstruction.
  - wahnfrieden 4mo ago
    parallel construction
- heathrow83829 4mo ago
  Well, usually they would never tell the person the real reason for the firing or layoff anyways. there's no benefit for them to tell you, it just increases liability.
  - nickff 4mo ago
    Telling people the reason is also likely to provoke an argument, which is often heated, and may become violent.
catlifeonmars 4mo ago
I always assume it is the case that my company will spy on my work computer. It’s naive to assume otherwise; there are just too many incentives/externalities for it to not happen given enough time and a reasonably funded infosec department.
izacus 4mo ago
[dead]

stingraycharles 4mo ago

I think the keyword is “can”. It is allowed, contrary to eg the EU, where this is not allowed.

throw1234567891 4mo ago
It is allowed under certain circumstances.
- prerok 4mo ago
  I am pretty sure there would have to be a court order, i.e. a severe violation would have to have good ground to be suspected.
  - throw1234567891 4mo ago
    No court order. Just a suspicion against an individual, and a process to follow. Plus, you have to tell them. There is no mass surveillance without notice, correct.
caymanjim 4mo ago
Yeah, I know they can. I just can't believe it's normalized and that people simply accept it. Good on the EU for pushing back.
- 3form 4mo ago
  I guess from my perspective there are even more dire problems in the US that I'm surprised people accept. But it seems they don't know, or care, or know that they should care. Perhaps it's the lack of proper authoritarian regime in the US' past that drives this. I believe the temporal proximity of such makes people aware of, and angry against, the many traps that such systems leave in their "law", so you can be imprisoned anytime for anything. EU has a bunch of countries with varying degree of such past.
  - mrhottakes 4mo ago
    Most people need to work to support themselves so it's quite inconvenient to single-handedly solve all of the problems in the US. Suggesting people simply don't know or care is very naive.
    - bigfudge 4mo ago
      I’m sympathetic to this view, butI don’t see any evidence they actually do know or care though. This (workers rights) gains no traction in US elections. You have this weird macho culture around it, almost like complaining about this abuse would be a sign of personal weakness.
    - johannes1234321 4mo ago
      On the time where Europeans fought for their worker rights they had to work, too. Often even not yet having other civil liberties. However a thing that changed is impact: A handful coal workers could interrupt work in significant ways.
- mhurron 4mo ago
  You should expect it because it's the safest position to work from. Don't use your work device for non-work, they may be tracking something or everything and do you want that in that record. Additionally, don't use personal devices for work, but that is because of other reasons.
- jlarocco 4mo ago
KaiserPro 4mo ago
> It is allowed, contrary to eg the EU, where this is not allowed. Its allows in most of the EU apart from germany where there are strict limits. however you can still record what your users are doing for purposes of detecting fraud. This is where it differs from the USA, where they can do anything because they have no data protection laws.
- LtWorf 4mo ago
  Would it be too much to ask to not make stuff up?
  - KaiserPro 4mo ago
    WOuld it be too much to ask for you to dig a little deeper in to what the law allows? An employer am allowed to record all your actions for the purposes of detecting fraud and or illegal activity. The method or recording and the way the employer stores and allows access to that recording must be "reasonable" For example if you are using slack, gchat or teams, all your conversations are logged in the compliance system. Every action you make in m365 is also logged. AWS actions are also logged if you have cloud trail enabled All you emails are also recorded and stored for n years. If you have zscaler or some other threat detection system every site that you visit will be recorded. The anti phishing plugin you have will also log what sites you are looking at. Theses are not automatically illegal, its how the data is stored and processed that determines the illegality. Now, lets get to meta. As part of their leaking detection system, in about 2024 they started routinely taking screenshots of all users every n minutes. One could argue that it wasn't proportionate. However for holland, france and germany, the workers councils should have been informed. The thing that was illegal was the covert nature, or at least not explicitly telling employees that they were taking screenshots. not the screenshots themselves. For the AAI bullshit that meta are pushing, again depending on how its done its not necessarily against the various EU/UK data protection laws to record the data. Where it gets interesting is how and where the data is processed later on. To blindly say that "EU says it can't happen" is far too simplistic and not accurate to say the least.
    - 4mo ago
d1sxeyes 4mo ago
It’s not true that it’s not allowed in the EU. There’s the Barbalescu ruling which is case law that says employers must fulfill a bunch of criteria around informing employees, the necessity of the monitoring, and they are not allowed to impose blanket bans on private use, but it is still legal to monitor employees in the EU.
- layer8 4mo ago
  It can be legal, but demonstrating the necessity is a significant bar.

sunsetSamurai 4mo ago

if it's a device provided by your company, it's very likely it'll have some spyware on it.

jbuhbjlnjbn 4mo ago

You can rest assured a company firing you for what they saw while surveilling your work computer will not be so stupid as to reveil this fact. That would indeed be a liability for them. They will simply invent a different reason for firing. Because they know it's not allowed (or at least frowned upon), but they decided to do it anyways, the company surveillance is kept secret and downplayed and plausibly denied as much as possible.

devmor 4mo ago
Or they just find another way to show you did it - the idea is very similar to how law enforcement uses illegal spying. They simply find another way to prove what they already caught you doing - it’s called Parallel Reconstruction.
- wahnfrieden 4mo ago
  parallel construction
heathrow83829 4mo ago
Well, usually they would never tell the person the real reason for the firing or layoff anyways. there's no benefit for them to tell you, it just increases liability.
- nickff 4mo ago
  Telling people the reason is also likely to provoke an argument, which is often heated, and may become violent.

catlifeonmars 4mo ago

I always assume it is the case that my company will spy on my work computer. It’s naive to assume otherwise; there are just too many incentives/externalities for it to not happen given enough time and a reasonably funded infosec department.

izacus 4mo ago

[dead]