On MovieTome: TRANSFORMERS 2 SPOILERS!

Search:
Go!




Click Here
advertisement

Security Watch : Don't get burned by viruses and hackers.
Your boss may be spying on you. Get used to it.
By Robert Vamosi 
Senior associate editor, CNET Reviews
May 14, 2003

Companies can now scan your computer's hard drive from a remote location--meaning your bosses could read all the data on your office PC (even the deleted stuff) without your knowledge.

This could get a lot of employees in trouble. I'm not talking about getting caught using your office's laser printer to create invitations for a personal party. Rather, I'm talking about companies, fearing employee lawsuits regarding harassment or other issues, using digital forensics to make sure you're abiding by company policies.

Get used to it
As scary as this may sound, I'm not opposed to it. After all, your company owns the hardware and software you use at work. Why shouldn't it make sure you're using it for legitimate purposes? Whether you agree with me or not, it's time to stop thinking of your office computer as a private place.

Employer snooping is not an entirely new concept. For years, companies have been able to examine the contents of employees' hard drives. But that used to entail shutting down the individual's computer, making an image of the hard drive with a program such as Norton Ghost, then spending hours looking for incriminating data.

Employer snooping is not an entirely new concept.
The problem for employers has been that Windows destroys a fair amount of your information when the computer is turned off (whether you pull the plug or shut it down properly). So, even though companies could reconstruct some deleted material, other data--such as temp files--was lost permanently.

That's where Pasadena, California-based Guidance Software comes in. Guidance has a line of forensic software products, called EnCase, that can make an image of a Windows system without shutting it down. Guidance's latest addition to this line, EnCase Enterprise Edition, is designed to scan desktops on a corporate network--without employees knowing what's going on.

Render unto Caesar
Why am I not worried? Because I believe this type of software provides accurate information that can definitively prove whether an individual has legitimately violated company policy.

My general feeling is that, if you use a desktop, a notebook, or a handheld that's company property, you shouldn't store personal information on it. For instance, I use a secondary Web-based account for personal e-mail. And some Web services, such as online banking, I just won't use at work. Yes, it would be convenient to bank during the day, but for me, it's too big a risk to think the company might get hold of my sensitive information. I'd rather wait until I get home to check my account balance.

Keep your private life private
I'm not saying your work computer has to be sterile. On mine, I do have digital photos of my family and friends--but I don't store personal e-mail messages or credit card information. It's all a question of how comfortable you feel knowing your company can find out about your personal life.

If you use a desktop, a notebook, or a handheld that's company property, you shouldn't store personal information on it.
I know some people will continue to carry out personal business at work. One of my coworkers not only obtained a copy of his credit report on his work computer, he also printed out the report on an office printer (which he shares with several other people). Though he promptly erased the report from his hard drive, a company using tools such as EnCase Enterprise could access his credit card number as well as his entire credit history if it wanted to.

I say: With powerful new tools such as EnCase Enterprise available, why take chances at work? It's time to keep our private lives out of the office, whether we like it or not.

Do you conduct personal business on your work computer? Why or why not? Do you think it's right for companies to be able to spy on employees in this way? TalkBack to me!


5/07/03
Stay on top of IE security issues
Microsoft isn't doing enough to publicize IE patches. Here's how to find out what IE patches do and where to get them.

4/30/03
Our best shot yet at stopping identity theft
A new California law could help fight identity theft and online fraud across the country--and possibly around the world. Here's why the time is ripe for this type of legislation.

4/23/03
What hackers can teach you about security
He's probably the most infamous hacker of all time--which is why we should listen when Kevin Mitnick says that traditional network security tools aren't enough to keep our information safe.



More commentary
Buzz Report
Molly Wood
Taking a bite out of hype.
Security Watch
Robert Vamosi
Don't get burned by viruses and hackers.
Fully Equipped
David Carnoy
The electronics you lust for.
On Call
Kent German
Solutions for your wireless woes.
Driving It
Wayne Cunningham
What's hot and what's not in car tech.



© 2008 CNET Networks, Inc., a CBS Company. All rights reserved. | Privacy Policy | Terms of Use