Why YSK: It appears several Lemmy Instances are flagged as suspicious and at least 1 instance intentionally using the name of ransomware. A couple of the big enterprise monitoring suites (Fortiguard, ZScaler) will flag your account and may end up with you being pulled into an office for an explanation, or worse.

TL;DR: Keep browsing to your local instance at work for now.

  • marmo7ade@lemmy.world
    link
    fedilink
    arrow-up
    30
    arrow-down
    3
    ·
    1 year ago

    This is why we have a Palo Alto firewall. All internet traffic from a single PC being tunneled over a VPN would set off some flags and quickly be remedied. Good, modern firewalls can do what are essentially “man-in-the-middle” attacks to snoop on traffic. If this was prevented by a VPN it will be immediately known.

    “You should be using a VPN” is not universal advice. It’s not up to you when you do not own the internet connection you are using.

    • BoneALisa@lemm.ee
      link
      fedilink
      English
      arrow-up
      14
      ·
      edit-2
      1 year ago

      Its worth noting, you cant actually MITM most traffic without device acess. To MITM my lemmy traffic, you would need either a copy of the certificate and private key of for example lemmy.world, which they would never willingly provide, or you would need to get a valid certificate from a CA for lemmy.world, which you could never get without verifying ownership of the domain.

      If you are using a company owned device to browse Lemmy, then 100% they can very easily install a custom Root CA and make their own certificates, and you should assume all your traffic is monitored. But if they allow BYOB or for your phone to be on the network, then they would be unable to see that traffic without you being able to tell, because you would get certificate errors.

      But if they allow you to install a VPN, then just use TOR with a TOR bridge and you wouldnt have issues, because they cant tell its VPN / TOR traffic akaik

    • minorsecond@lemm.ee
      link
      fedilink
      English
      arrow-up
      5
      ·
      1 year ago

      So if you were, say, using a VPN on your personal phone at work on their internet, would you also get in trouble?

      • fuzzzerd@programming.dev
        link
        fedilink
        arrow-up
        5
        ·
        1 year ago

        If it’s a personal device, at worst they would see you are using a VPN and maybe ask what’s up with that, but they can’t mitm you on your own device.

      • some_guy@lemmy.sdf.org
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        1
        ·
        1 year ago

        Why would you join your phone to the company wifi? Mobile data is cheap (at least where I am). I’ve never joined my personal phone to an employer’s wifi. At least not in the last five or so years.

        • nintendiator@feddit.cl
          link
          fedilink
          arrow-up
          1
          ·
          1 year ago

          Why would you join your phone to the company wifi? Mobile data is cheap (at least where I am).

          Where I am, I’m on prepaid. It’s not cost-effective to pay for a full plan (when eg.: I already have internet at home).

        • ᗪᗩᗰᑎ@lemmy.ml
          link
          fedilink
          arrow-up
          1
          ·
          1 year ago

          cell reception is spotty where I work and there’s a guest WiFi option and they allow VPN. works Wi-Fi works for my use case.

    • AphoticDev@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      4
      arrow-down
      1
      ·
      1 year ago

      Unless you’re handing your phone over and letting them root it, they almost certainly are not MITMing your traffic. At best, they can see you’re using a VPN. If they are able to snoop your traffic, either your VPN is absolutely shit, or you changed some setting you shouldn’t have and fucked yourself.