Comment on North Korean infiltrator caught working in Amazon IT department thanks to lag — 110ms keystroke input raises red flags over true location

• fonix232@fedia.io ⁨1⁩ ⁨month⁩ ago

  My employer does the same over a proxy. Luckily it can't breach HTTPS, but it was annoying to set all my APs and router and switches and other network nodes to HTTPS just because the damn thing would block the site the moment I sent my password in cleartext to a local device...

  source

  • Brkdncr@lemmy.world ⁨1⁩ ⁨month⁩ ago

    You’re sure they aren’t decrypting your traffic? Check the root cert of any site and see if it’s their own root.

    source

    • dan@upvote.au ⁨5⁩ ⁨weeks⁩ ago

      Larger companies that monitor for corporate passwords being entered on third-party sites usually use a browser extension that’s force-installed using Chrome Enterprise.

      source

      • Brkdncr@lemmy.world ⁨5⁩ ⁨weeks⁩ ago

        Why do you say usually? It’s not what I do. I MitM every machine.

        source

        • -> View More Comments
    • BrianTheeBiscuiteer@lemmy.world ⁨1⁩ ⁨month⁩ ago

      This is definitely a thing.

      source

      • EncryptKeeper@lemmy.world ⁨5⁩ ⁨weeks⁩ ago

        Only if the site they’re visiting isn’t using HSTS, but it’s possible

        source

        • -> View More Comments
    • fonix232@fedia.io ⁨5⁩ ⁨weeks⁩ ago

      Yep, they're not decrypting HTTPS, I've triple checked. But we do have an MDM forced proxy service that does check any non-encrypted traffic...

      source
  • Ghoelian@piefed.social ⁨5⁩ ⁨weeks⁩ ago

    set all my APs and router and switches and other network nodes to HTTPS

    What does that mean? HTTPS is a client-server thing, your APS and switches don’t really have anything to do with that.

    source

    • fonix232@fedia.io ⁨5⁩ ⁨weeks⁩ ago

      Web control panel. All my network runs OpenWrt and I prefer to manage it from the web UI instead of terminal tinkering.

      source

      • Ghoelian@piefed.social ⁨5⁩ ⁨weeks⁩ ago

        Ahh that makes sense. I thought you were claiming you somehow got all your traffic over HTTPS with some AP settings.

        source
    • Darkassassin07@lemmy.ca ⁨5⁩ ⁨weeks⁩ ago

      Setting their management interfaces to be accessed via https because the VPN blocks (after snooping on) http only access would be my guess

      source
  • porcoesphino@mander.xyz ⁨1⁩ ⁨month⁩ ago

    Annoying, but ideally it would have been the initial configuration

    source