Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Monitoring internet access on school devices? That's been standard in every single school and workplace for decades.

What country are you talking about? Honest question, just curious. I am in the US, but even today many small and medium sized companies do not monitor internet (block parts, sure, but not monitor) and 10 years ago even large companies did not do it.



am in the US, but even today many small and medium sized companies do not monitor internet

Every URL accessed via a proxy will be logged, even no one is actively reviewing those logs regularly


In the early 2000's, I used to work at a medium size public company and managed the firewalls and proxy servers. I would regularly tail the logs for my own amusement. The amount of pornography streaming into that place was extraordinary.


When I was in high school, the admin regularly blacklisted new flash game sites as we started discovering and using them regularly on the school network.

Monitoring is done everywhere and has been done for a long time. Whether or not they check it depends on how lazy IT is.


I know for a fact BofA was doing it 10 years ago, because a family member tried to show me a YouTube video on their work laptop and it was blocked by the BofA firewall, even though they were at home. I doubt that there was a reprimand or anything, but I bet it was logged somewhere “just in case”.


That's still blocking, not actively monitoring. Probably because it runs all network traffic through their VPN.


Software like Forcepoint/Websense logs blocked attempts by default and can be configured to log all traffic. I don't believe there's a reliable source on what companies do.

The Levandowski incident at Google revealed that they had VERY extensive logs. They appear not to look at them routinely, but the logs are there when needed.


Was that the IP incident between Google and Uber? can you say more about the evidence here or post a source? just curious.



How do you block specific websites without monitoring which website is being visited? That doesn’t make any sense.


You can do it a couple of ways. You can whitelist sites, where all sites not on the list are automatically blocked, or you can blacklist them, where sites matching certain characteristics or on a particular list are blocked. Neither way necessitates logs or monitoring.


Hmm, what about this approach - monitoring adds a certain action on top of that blocked (or not) website you try to access. It gets reported, your credit/social/whatever score goes down. As a kid, you might have a talk with counselor, or your parents with principal. As working adult, you might get a warning or get fired. Your access to foreign travel, sim card, voting etc. might get altered.


That's both monitoring and blocking. I'm not sure you can block without monitoring.


Banks are strict on their work laptops. - Everything is tunneled through VPN

- 2 FA

- geofencing at VPN level (you can't take work laptop to Russia, India, China, etc)

- everything is whitelisted. Some employees can only access x.theirBank.com, everything is else blocked. This is the case with tellers, folks in the retail banking

- even for IT/dev, one should get explicit permission to get access to youtube, github

- every work laptop comes with an agent like ZScalar, which enforces these policies by coordinating with a central server.


...but that sounds like monitoring?


For example, downloading a list of prohibited domains to your device and running a local firewall. “Monitoring” in this context implies that someone will be able to later review the websites you’ve visited or tried to visit.


Every enterprises local firewall I know of can report back to a central system for logging.


I don’t have any special knowledge of enterprise firewalls; parent just asked how it was possible.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: