Logiciel buy saytu liggéeykat yi ("Bossware": Hubstaff, Teramind, ActivTrak) ñu samp ko ci sa ordinatër BYOD: Gis ay keylogger ak ay ekraŋ¶

Patroŋ bi wala kiliyaan bi daf lay digal nga samp ab agent produit wala ab agent de sécurité ci sa ordinatëru bopp, bu nekk ci sa kër (Bring Your Own Device / BYOD), wala nga gis ni kiliyaan biy saytu liggéeyukaay bu nëbbu (Teramind, ActivTrak, Hubstaff, Doktëru waxtu, Veriato/Sapience, InterGuard, Insightful/Workpuls, wala SneekBo*) dafay daw bu baax ci sa PC nëbbëtu dijital ak jafe-jafe kaaraange siber. Bi nga xamee ni patroŋ bi dafa am sañ-sañ bu yaatu ci wàllu yoon ngir saytu liggéey yi ci ordinatër portable bu liggéeyukaay bi moom bi ñu jëndoon ba noppi jox la ko, samp ab agent surveillance bu am kernel wala sertifikaa root ci sistemu operaasioŋ bare-metal bu sa ordinatëru kër bopp dafay may sa patroŋ administratër IT/4 kapte ay nataali sa bànk ci net bi, dugal ay tombu ngir bind sa portaalu pajum bopp wala baatu-jàll juuti ci 10:00 PM ci Samdi, enregistre audio néeg bi wala nataali webcam yu sa njaboot, ak jàpp encrypté HTTPS / TLS trafik web jaaraleko ci benn kilifag sertifikaa Root (MITM Root CA). Sudee dañuy jëfandikoo ab ndawu surveillance buñu mayul ndigal ngir topp nit ci anam wudul yoon, xañ nit, wala jaay doole ci kër, dakkal ordinatër bi ci internet ci saasi te jokkool ak sa dëkk nimero paj mu jamp. Ngir am jafe-jafe liggéey ci fu sori, xoolal sunuy tegtal ci kaaraange liggéey ci fu sori ci jamonoy jafe-jafe ak nëbbëtu done, Zscaler bu amul wóolu liggéeyukaay wala bootloops Falcon, ak Zoom ak Teams dañu séddoo ekraŋ ci anam wu jaarul yoon, ak fukki mikro yu tàng.

War nga tànn diggante ñàkka sa liggéey ci fu sori ak jox sa patroŋ caabi bu mag bi ci sa bànk, sa faju, ak sa njaboot. Soo defee benn audit forensique ci diiru 10 simili ci sa masin Windows wala macOS ngir gis agent yu nëbbu yi (svchost sarwis yuy maskeer, macOS Screen & System Audio Recording sañ-sañ yi, ak Sàrtifikaa Root TLS yiñ dugal), wëlbati bépp baatu-jàll buñ bind bi keylogger wala proxy TLS nekkee ci liggéey, ak toxal bépp losisel bu liggéeykat bi santaane ci biir Masinu Virtuel buñ tàqale ci hardware (Hyper-V, VMware Workstation, Parallels, wala UTM) wala ci benn $250 portable liggéey kese, mën nga satisfaire sa patroŋ liggéey-waxtu toppu boole ci tëye 100 pursaa ci sa dundu bopp physiquement ak cryptographiquement isolé.

Defal lii leegi¶

1. ** STOP dugg ci bànk sa bopp, imeel sa bopp, njiitu baatu-jàll, portaalu faju, wala kontu juuti ci ordinatër boobu ba nga matalee audit bi ci suuf.** Sudee ab tabax bu nëbbu Teramind, Veriato, wala InterGuard (wala sertifikaa root MDM) dañu ko samp ci sa sistem operaasioŋ host, dafay dox ni SYSTEM wala root daemon 24 waxtu ci bis bi, doonte danga tëj Slack, dindi VPN liggéeyukaay bi, wala nga dindi aplikaasioŋu reloj biy wane ci njeexte ayu-bis bi.
2. Tëj sa lensu webcam ak benn gliiseur mekanik wala buum bu opaque te nga dindi wala nga mute sa mikro USB saa yu nekkul ci woote buñ jàppale. Barina jumtukaayi ekip yu sori (Sneek, Teramind Hidden Agent, Time Doctor, InterGuard) jàppale jàpp nataalu webcam bu noppi (every 1 to 5 minutes) ak mikro wala streaming ci ekraŋ te du leeral benn banner buy yëgle losisel bi.
3. Xool ndax dugg ci sa liggéey Microsoft 365 (Teams / Outlook) wala kontu Google Workspace bi nga dugal sa ordinatër ci doxalinu aparey mobile (Microsoft Intune). Ci Windows, ubbil Settings -> Accounts -> Access work or school. Soo gisee kontu sa patroŋ buñu bind ci "Connect to [Company] MDM", klike ci "May sama mbootaay mu yor sama aparey" ci diir bi ngay dugg ci Outlook, loolu dina may sa patroŋ admin IT ndigalu remote ngir push losisel bu noppi, xool aplikaasioŋ yiñ samp, ak joxe ab remo sa PC.
4. Ci macOS, ubbil System Settings -> Privacy & Security -> Screen & System Audio Recording AK Accessibility leegi. Ci wàllu leer, nangu ak saytu bu Apple wara def (TCC) kaadar, **amul benn losisel buy saytu liggéeykat ci macOS bu mëna jàpp sa ekraŋ wala dugal tombi globaal yi fileek limu ñu ko bu baax ba noppi taal ko ci biir ñaari paane yooyu ** (wala ñu puus ko ci MDM buy wane Device Management profil).
5. Xool sa Màngasin Sàrtifikaa Root bu Windows ak macOS (certmgr.msc / Keychain Access) ngir ab kilifag sertifikaasu Root bu amul benn standard (CA). Sudee sa patroŋ dafa samp sertifikaa Root CA ci wetu Zscaler, Teramind, Netskope, wala FortiClient, seen serwër mën na dekode ak jàng limu bind bu leer ci bépp HTTPS sitweb bi nga dugg, boole ci say done bànk ak say done pajum.
6. Bul musa samp ab losisel buy toppe sa waxtu liggéeykat ci sa OS host; samp ko ci biir benn masin virtuel buñ tàqale (Windows Hyper-V, VMware, VirtualBox, wala UTM / Parallels) wala ci beneen aparey physique. Bi Hubstaff, Time Doctor, wala ActivTrak dawal ci biir palanteer Virtual Machine, mën na gis, screenshot, ak dugal li xew * ci biir palanteer desktop virtuel *, ci noonu sa navigateurs personnel ordinateur host, fichiers, ak bànk yi des 100 pursaa yu kenn gisu ci hypervisor.

Garab dogal: Xool ordinatëru BYOD bopp ak tàqale losisel biy saytu patroŋam¶

Toppal garabu dogal bii ngir xam ban niveau de surveillance la am ci sa masin bopp ak ni ñu koy xàjjale ci anam wu wóor.

flowchart TD
    A["Dañu ñaaw njortu wala ñu sant patroŋ bi di saytu ('Bossware') ci ordinatëru bopp BYOD"] --> B{"Ndax samp nañu losisel bi liggéeykat bi jox ci sa masin, wala dañu lay sant nga samp ko leegi?"}
    B -->|"LAAJ LAAJ NGIR INSTAL KO LEEG (Kaaraange bu njëkk instalaasioŋ)"| C{"Ban xeetu losisel lañu lay sant nga samp ci?"}
    C -->|"Toppukatu waxtu buy weccoo xalaat (Hubstaff, Doktëru waxtu, Toggl, Aplikaasioŋu biro Upwork)"| D["BULEEN sampaale ci OS host bu amul lenn ludul -> Sosal ab Windows Hyper-V / VMware / UTM masin virtuel (wala nga jëfandikoo ab ordinatër portable buñu jagleel $ 200) -> Sampaale toppukaay ci biir VM kese"]
    C -->|"MDM/Sertifikaa root (Teramind, ActivTrak, Veriato, Intune MDM)"| E["BULEEN MUSAA samp Stealth Agent wala MDM ci sa ordinatër -> Laaj ordinatër portable bu liggéeyukaay bi joxe wala dugg ci Azure Virtual Desktop (AVD / Citrix) -> Suñu ko forsee, daw ci ordinatër portable bu liggéey kese"]
    B -->|"DAÑU KO INSTAL CI PC PERSONAL (Kàtt ak Setal Forensik)"| F{"Ban sistem operaasioŋ la sa ordinatër biy doxal?"}
    F -->|"/ 10"| G["Xool 'Jekkal -> Dugg ci liggéey wala daara' ngir MDM -> 2. Xool Services.msc / Sysinternals Autoruns ngir ab ndawu liggéey bu nëbbu -> 3. Xool certmgr.msc ngir Root CA -> 4. Xool lëkkaloo TCP yiy génn"]
    F -->|"macOS (silikon / intel)"| H["Doxal 4 jéego ngir saytu macOS: 1. Xool 'Jekkal sistem bi -> Lépp -> Doxalal aparey' (Profil yi) -> 2. Xool 'Sàmm & Kaaraange -> Enregistrement ak Yokkateg Ekraŋ' -> 3. Xool / Bibliothèque / LaunchDaemons -> 4. Xool Certificates"]
    G --> I{"Ndax gis nga ab ndawu liggéey buy saytu lu nëbbu, bindu MDM, wala sertifikaa root buñ injecté?"}
    H --> I
    I -->|"WAAW: Gis nañu ab ndawu liggéey bu nëbbu / root CA / Intune MDM ci PC bopp"| J["CONTAINMENT: Toxal liggéey ci VM wala ñaareelu portable -> Dindi MDM / Dindi agent & Root CA ci PC bopp (wala set-install OS) -> Weer bépp bànk bopp, imeel, ak baatu-jàll-njiitu njiit ci telefon bu set"]
    I -->|"DEET: Benn toppukaay buy weccoo xalaat kese lañu samp (lu melni, Upwork / Hubstaff)"| K["Delloosi enregistrement ekraŋ / sañ-sañu jëfandikoo ci biti waxtu liggéey -> Bàyyi daemon ci ginaaw ci Task Manager / Activity Monitor sudee clock bi amul -> Migrate ko ci VM"]

Wàll 1: Li "Bossware" di jàpp (ak ni Agent Stealth yi di nëbbee ci sa sistem)¶

Ngir mëna saytu sa ordinatër bopp bu baax, fàww nga xam kàttanu xarala yi ak tur yi ñuy jëfandikoo ci juróom ñaari platform yiy saytu liggéeykat yi.

+-------------------------------------------------------------------------+
|  THE 5 SURVEILLANCE LAYERS OF ENTERPRISE "BOSSWARE" ON A BYOD HOST OS   |
|                                                                         |
|  [Layer 1: Visual]    -> Continuous Screen Recording (MP4) or periodic  |
|                          JPEG screenshots + OCR text indexing of screen |
|  [Layer 2: Input]     -> Kernel/API Keylogger (captures every password, |
|                          iMessage, & private email) + Clipboard history |
|  [Layer 3: Network]   -> Injected Trusted Root CA Certificate decrypts  |
|                          all HTTPS traffic (banking, medical portals)   |
|  [Layer 4: Hardware]  -> Silent Webcam snapshots, Microphone room audio,|
|                          GPS/Wi-Fi BSSID geolocation, & USB file copies |
|  [Layer 5: Telemetry] -> "Idle Score" (mouse jiggle detection), active  |
|                          window titles, & "Job Search / Attrition" AI   |
+-------------------------------------------------------------------------+

Emprent baraami xarala yu 7 Suites yu gëna mag yiy saytu liggéeykat yi¶

Doonte dañu ko dugal ci "Stealth / Hidden Mode" (fu jaaykat bi di nëbb app bi ci Mënu tàmbali Windows, dosiye Aplikaasioŋu macOS, ak luñuy jëfandikoo), bépp ndawu liggéey dafa wara doxal ab sarwis ci ginaaw, yab dawalkat, ba noppi mën toppatoo serwëru reso cloud bi encrypté ci its:

2ème partie: Audit forensique jéego par jéego ngir gis Bossware bu nëbbu ci sa PC Windows 11/10¶

Saytu 1: Saytu Windows "Dugg ci Liggéey wala Daara" ngir MDM Enrollment bu jaarul yoon¶

1. Ubbi Palanteer yi Settings (Win + I) -> Accounts -> Access work or school.
2. Bësal ci bépp adres email liggéey buñ lim. Soo gisee benn Info butoŋu (du Disconnect), sa ordinatëru bopp dafa dugg ci Microsoft Intune / Doxalal jumtukaayi mobile liggéeyukaay (MDM). Bësal Info nga wàcci ba ci Areas managed by [Company Name] ak Synced Policies / Installed Apps ngir gis bépp politik, sertifikaa, ak instalatëru MSI bu noppi bu sa patroŋ push ci sa masin bopp. Gunaaw boo toxalee sa liggéey ci masin virtuel ci pàcc 4, bësal Disconnect ngir dindi sa PC host bopp.

Saytu 2: rëbb ay sarwis stealth yu maske (scthost.exe, tsvchst.exe) Jëfandikoo PowerShell ak sistem bi ci biir Autoruns¶

1. Ubbi PowerShell ni njiit (Win + X -> Terminal (Admin)) nga doxal komand bii ngir lim bépp sarwis bu nekk ci ginaaw bu Microsoft siñewul ci anamu dijital:

   Get-WmiObject Win32_Service | Where-Object { $_.State -eq 'Running' -and $_.PathName -notmatch 'C:\\Windows\\servicing|svchost\.exe' } | Select-Object Name, DisplayName, PathName | Format-Table -AutoSize
   

2. Xoolal bu baax bépp serwiis bu jeex C:\ProgramData\, C:\Windows\SysWOW64\scthost.exe (AktivTrak), tmagent wala tsvchst (Xam-xam), winikus (Vériato), wala wscservice (Garde ci biir).
3. Yebbi Microsoft Autoruns64.exe**, defal ko ni Administratër, bësal Options -> Hide Microsoft Entries, nga saytu Services ak Drivers onglet ngir bépp keylogger bu nëbbu wala dawalkatu filtre buy jàpp ekraŋ (tmfilter.sys, vfilter.sys).

Saytu 3: Saytu Màngasin Sàrtifikaa Root bu Windows (certmgr.msc) ngir dekode HTTPS¶

Ngir gis li ngay bind ci biir HTTPS sitweb yi (lu melni sa bànk bopp, Gmail, wala portaalu faju), suite yiy saytu ak proxy web liggéeyukaay (Teramind, Zscaler, Netskope, Fortinet) samp ab Nit-ci-digg (MITM) Bañkat sertifikaa root ci sa PC:

1. Bësal Win + R, bind certmgr.msc, nga bës Enter.
2. Yaatalal Trusted Root Certification Authorities -> Certificates, tànnal ko ci Issued By, nga seet bépp sertifikaa bu tuddu sa Patroŋ, Teramind, Zscaler Root CA, Veriato, Netskope, Fortinet, wala Securly.
3. Saytu ci sa nawigatër Chrome wala Edge: ubbil google wala sa sitwebu bànk, bësal Ikonu Tune bi ci cammoy URL bi -> Connection is secure -> Certificate is valid. Sudee sertifikaa bi ngir google.com wala sa bànk bopp wax Issued By: [Your Employer Name] / Zscaler / Teramind Root CA, sa patroŋ mingi dekode ak saytu sa trafik HTTPS bopp.

pàcc 3: Audit forensic jéego-ci-jéego ngir gis Bossware bu nëbbu ci sa Mac bopp (macOS)¶

Saytu 1: Saytu Screen & System Audio Recording ak Accessibility Ndigal¶

Ci macOS, ba ci daemon root-level mënul enregistre sa ekraŋ ci noppi wala dugg ci butoŋu global yi ci yeneen aplikaasioŋ fileek mayu ñu ko ndigal ci ñaari paanelu Njaboot:

1. Ubbi System Settings -> Privacy & Security -> Screen & System Audio Recording. Soo gisee scthost, Teramind, ActivTrak, Hubstaff, Time Doctor, sfproc, Veriato, wala ndimbal buñu xamul toggled ON fii, aplikaasioŋ boobu amna sañ-sañu enregistre sa ekraŋ Mac. Bayi ko OFF ci saasi nga bës ci - ngir dindi ko.
2. Ubbi Accessibility ak Input Monitoring ci biir Privacy & Security. Bépp app buñu may Input Monitoring wala Accessibility sañ-sañ bi mën na lire bépp butoŋu butoŋu nga bind ci sistem bi ngay doxalee. Def te dindi bépp daemon buñu xamul wala toppukaayu liggéeykat ci ñaari lim yi.

Saytu 2: Saytu macOS Device Management (MDM Profiles) ak nëbbu LaunchDaemons¶

1. Ubbi System Settings -> General -> Device Management (wala System Preferences -> Profiles ci macOS bu yàgg). Ci sa MacBook, Device Management wàll wi dafa wara amul dara wala amul dara. Soo gisee ab Profil njiit bu sa patroŋ samp (Jamf, Kandji, Mosyle, Microsoft Intune, Rippling, Drata, Vanta), bësal ci ngir xool ban sertifikaa root, TCC bypass privacy, ak agents background yi muy dooleel ci sa Mac bopp.
2. Ubbi Terminaal (Cmd + Space -> Terminal) ak daw ls -la /Library/LaunchDaemons /Library/LaunchAgents ngir lim daemon root yi ak agent lansma yu jëfandikukat yiñ samp ci sa Mac. Seetal benn .plist fichier bi am teramind, activtrak, scthost, veriato, hubstaff, timedoctor, workpuls, insightful, wala awarenesstech.
3. Ubbi itam Access porte-clés (Cmd + Space -> Keychain Access) -> System Roots ak System porte-clés ak xool Certificates onglet ngir bépp CA Root buñ samp ngir dekode sa trafik HTTPS Safari ak Chrome.

4ème partie: Xàjjale losisel liggéeykat bi ci biir masin virtuel (VM) wala aparey buñ jagleel¶

Sudee sa liggéey ci fu sori wala sa kontraa demal sa bopp daf lay sàkku nga daw Hubstaff, Time Doctor, Upwork Desktop App, ActivTrak, Teramind, wala VPN liggéeyukaay ci waxtu liggéey, bul ko musa samp ci sa sistem operaasioŋ bopp.

+----------------------------------------------------------------------+
|  HOW VIRTUAL MACHINE (VM) ISOLATION CONTAINERS EMPLOYER BOSSWARE     |
|                                                                      |
|  +----------------------------------------------------------------+  |
|  | YOUR PERSONAL HOST COMPUTER (Windows 11 or macOS)              |  |
|  | * Personal Chrome (Banking, Medical, Personal Email, Taxes)    |  |
|  | * Personal Files, Photos, 1Password Vault, & Webcam            |  |
|  |   [ 100% INVISIBLE TO EMPLOYER ACROSS HYPERVISOR BOUNDARY ]    |  |
|  |   +--------------------------------------------------------+   |  |
|  |   | ISOLATED WORK VIRTUAL MACHINE (Hyper-V / UTM / VMware) |   |  |
|  |   | * Employer Bossware (Hubstaff / Teramind / ActivTrak)  |   |  |
|  |   | * Corporate VPN + Work Browser + Slack + VS Code       |   |  |
|  |   | * Bossware Can ONLY Screenshot & Log Inside This VM    |   |  |
|  |   +--------------------------------------------------------+   |  |
|  +----------------------------------------------------------------+  |
+----------------------------------------------------------------------+

Tanneef 1: Masin virtuel bu amul fayda (Hyper-V / VMware Workstation / UTM)¶

Soo sos benn masin virtuel guest ci sa ordinatër ba noppi nga samp bépp losisel liggéeykat ci biir VM bi:

• Isolation capture écran: Kañ Hubstaff wala Teramind jël benn screenshot ci biir VM, dafay jàpp **adaptatëru afisaas virtuel bu VM **, ci noonu la sa kontu bànkeer wala ñaareelu monitër ci OS biy jël nit ñi des 100 pursaa buñu dul gis ci peggu hypervisor bi.
• Keylogger ak clipboard: Def Clipboard buñ bokk (Bidirectional Clipboard: Off) ak Dossier yuñ bokk ci sa jekkal VM suko defee tombu yi nga bind ci sa nawigatër OS host duñu musa dugg ci tampon klaweer USB virtuel bu VM bi.
• Reseau & Sàrtifikaa HTTPS: Bépp VPN liggéeyukaay (Zscaler, Cisco AnyConnect) wala Sàrtifikaa Root MITM biñ samp ci biir VM bi du am njeexital ci trafik reso bi ci biir VM bi kese, bàyyi sa ordinatër bi lay jëfandikoo ngir lëkkaloo ak internet bi.
• Takk bu dëgër ci 5:00 ci ngoon: Soo noppee liggéey ci 5:00 ci ngoon, bësal Shut Down ci masin virtuel bi suko defee serwiisu background patroŋ bi du am ci RAM ba nga tàmbali VM bi suba ci suba.

Tanneef 2: Kiñ jagleel $200 to $300 Ordinatër portable buñ yeesal + aparey KVM Switch¶

Sudee ab ndawu liggeykaay xool na CPUID wala chaîne BIOS (VMware, VirtualBox, Hyper-V) ak di bloke masin virtuel yi, jënd benn lenovo Thinkpad T14 wala Dell Latitude ($180 to $250)** jagleel 100 pursaa ngir liggéey, boole ñaari ordinatër yi ci sa monitëru biro ak sa klaweer jëfandikoo $35 HDMI wala DisplayPort Hardware KVM Switch, nga boole ordinatëru portable bi ci sa routeur bi ci kër gi Reseau Wi-Fi Guest buñ tàqale suko defee mu baña scanner sa aparey LAN yi ci kër gi.

Nimero paj mu jamp ci diwaan yi ak protokolu agence yi (yori wattu ak déglu BYOD)¶

Def ci nëbbëtu ay keylogger, ay webcam, wala ay surveillance 24/7 ci bitti liggéey ci kaw liggéeykat bu moom boppam (BYOD) ordinatër te kenn xamul lu leer dafay xañ déglu ay done, aar done, ak sàrti liggéey ci réew yu bari:

• Union européenne ak Royaume-Uni (EU/UK GDPR, ECHR Article 8, & UK ICO Employment Practices Code): Bësal 112 (UE) wala 999 (UK) soo amee jafe-jafe yu jëm ci yaram. Ci wàllu GDPR article 5, 6, ak 35 ak tegtal yu bawoo ci Biro komisario biy saytu xibaar yi ci UK (ICO) (Njàngale ci saytu liggéeykat yi, 2023), saytu liggéeykat yi ci nëbbëtu daanaka amul benn yoon bu ko mëna gàllankoor, ak ** wéyal keylogging, saytu webcam Aparey BYOD bi nekk ci biir seen kër ** mënul jàll ci test GDPR ** Njaboot ak wàññi done **. Liggéeykat yi mën nañu joxe plainte ci UK ICO (ico.org.uk) wala seen Baŋxaasu Aar Done yu UE (CNIL, BfDI, AEPD, DPC).
• Etats Unis (ECPA, CFAA, ak sàrti yëgle yiy saytu liggéeykatu réew mi): Woowal 911 ngir jafe-jafe yaram. Sàrtu Njaboot ci Jokkoo Elektronik (ECPA) ak Sàrtu Njuuj njaaj ak Yaakaar ci Ordinatër (CFAA) yor wàllu jàpp nit te kenn mayul ndigal, ak Kuréel gi yor wàllu liggéey ci réew mi (NLRB Memo 23-02) dafay tere surveillance elektronik buy seddal liggéey buñ aar. New York (NY Civil Rights Law § 52-c), Konektikut (Conn. Gen. Stat. § 31-48dDelawar (19 Del. C. § 705), ak Kaliforñi (CCPA / CPRA) sàkku ci patroŋ yi ñu njëkka joxe yëgle ci bind** balaa ñuy dugg ci saytu elektronik.
• Canada, Australie, ak Nouvelle-Zélande: Sàrtu Liggéey ngir Liggéeykat yi ci Ontario ñoo ko jiite (dafay laaj ñu bind sàrti saytu elektronik ngir liggéeykat yi am 25+ liggéeykat), Québec Law 25, ak Gal de Sud bu Bees Workplace Surveillance Act 2005 (dafay laaj nga yëgal ko 14 fan ci kanam). xoolal nimero paj mu jamp ngir gox yépp.

Laaj yi ñuy faral di laaj¶

Ndax sama patroŋ mën na gis li may def ci sama ordinatër wala telefon ndax dafa boole sama Wi-Fi ci kër gi, fekk sama ordinatëru portable itam mingi ci benn Wi-Fi bi ci kër gi?¶

Dédeet, lépp bëgg losisel biy saytu sa patroŋ ak VPN bi nekk ci ordinatëru liggéeyukaay bi liggéeyukaay bi joxe, duñu ko samp ci sa ordinatër wala sa telefon. Benn ordinatër portable bu lëkkaloo ak sa Wi-Fi kër dafay jëfandikoo tunnel VPN encrypté dellu ci biro liggéeyukaay bi te mënul decrypter wala gis HTTPS web navigation, bànk, wala apps yiy dawal ci sa ordinatër portable wala iPhone ci benn routeur Wi-Fi kër (ba tay ngir gëna cet reso GuFi 'reso ordinatër portable).

Ndax dugg ci sama liggéeyukaay Slack, Gmail, wala Microsoft Teams ci biir benn onglet navigateur web dafay may sama patroŋ mu gis sama yeneen onglet navigateur wala jël nataali sama biro?¶

Déedet. Ndax navigateur web yi leegi dañuy tëral Same-Origin Sandbox, xët web bi dafay ubbeeku ci benn onglet navigateur (lu melni `app.slack.com` wala `outlook.office.com`) motëru nawigatër bi daf ko tere jàng URL yi, kukiis yi, wala pixel yi ci sa yeneen onglet nawigatër wala sa biro, fileek duggoo ci Nawigatër Chrome bi ci boppam ak Profil Liggéey buñu Yorandi ba noppi nga bës "Taalal Senkronise" (liy may sa patroŋ Google Chmeroons Admin ngir push). Deel ubbi aplikaasioŋu web yi ci biir benn profil navigateur buñu synchronisewul te amul benn extension liggéeyukaay.

Ndax Hubstaff, Time Doctor, wala ActivTrak mën nañu xam ndax damay jëfandikoo "Jigler Jiné" mekanik wala USB?¶

Waaw, xeetu ActivTrak yu bees yi, Teramind, Time Doctor, ak Hubstaff dañuy jëfandikoo masin buy jàng, ñu tàggat ko ngir màndargaal jiggler yu mekanik ak yu USB. Suite yu bees yi dañuy jàngat entropi trajectoire yi ci jiné (di màndargaal oscillations 1-pixel yu baamtu, bouclage circulaire yu gaawaay bu dul soppeeku, wala diiru 45 simili yu wéy di doxantu jiné bu ànd ak benn klike ci jiné, benn coppite ci palanteer bu Jiggler ak dugal ci klawieer otomatik) tablo patroŋam.

Sudee damay jëfandikoo PC Windows bu am ñaari kontu jëfandikukat (benn duggu Windows "Liggéey" ak benn duggu Windows "Bopp"), ndax loolu dina tere Bossware biñ samp ci duggu Liggéey bi di xool sama duggu Bopp?¶

Dédeet, kontu jëfandikukat yu Windows wala macOS yu wuute ci benn sistem bi duñu tàqale agent yiy saytu sistem bi (`Teramind`, `ActivTrak`, `Veriato`, `InterGuard`, `CrowdStrike`, `Intune MDM`). Ndax agent yooyu dañuy samp ni `NT AUTHORITY\SYSTEM` sarwis yi, dawalkatu filtre kernel yi, wala `/Library/LaunchDaemons` ak Sàrtifikaa Root yiñ Wóolu ci masin bi yépp, dañuy dox ci sistem bi yépp, ak kontu jëfandikukat bu dëkk bi nga dugg. Masin Virtuel kese (`Hyper-V / VMware / UTM`), benn disk encrypté bu Dual-Boot, wala benn portable physique bu wuute dafay joxe isolation dëgg.

Ndax losisel biy saytu liggéeykat bi mën na gis sitweb yi ma dugg ci Chrome "Mode Incognito" wala Safari "Navigation privée"?¶

Waaw, 100 pursaa. Mode Incognito Chrome ak Navigation privé Safari duñu tere navigateur bi denc jaar-jaar ak kukiis ci sa disk dur ginaaw boo tëjee palanteer bi; defu ñu dara ngir nëbb sa ekraŋ, say tëf, say seetlu DNS, wala sa trafik HTTPS ci ab ndawu liggéeykat buy saytu (`Teramind`, `ActivTrak`, `InterGuard`, `Veriato`) wala CA Root bu liggéeyukaay buy dox ci benn sistem jëfandikoo.

Sama patroŋ daf ma sant ma samp aplikaasioŋu Microsoft wala Okta Verify 2FA ci sama telefonu iPhone wala Android. Ndax aplikaasioŋ boobu mën na xool samay nataal, samay mbind wala samay nawigaasioŋ ci web bi?¶

Deet. Ab aplikaasioŋ buy defar kodu xam-xam bu bari (MFA) (**Xam-xam Microsoft**, **Xam-xam Okta**, **Duo Mobile**, **Xam-xam Google**) buñ samp ci Apple App Store wala Màngasin Google Play dafay daw ci biir benn aplikaasioŋ mobile bu dëgër buy jëfandikoo sa sandbox, aplikaasioŋ yi. Moytul samp ab doxalinu aparey mobile bu mat sëkk (`MDM`) Profil bindu aparey ci telefonu bopp sudee dafay laaj root aparey-management ak ndigalu sertifikaa.

Gid yu jëm ci loolu¶

• Kaaraange liggéey ci fu sori ci jamonoy jafe-jafe ak nëbbëtu done
• VPN ray-kommutatëru njuumte wala liggéeyukaay bu amul wóolu Zscaler / CrowdStrike Falcon bootloop quarantaine
• Séddoo ekraŋ bu jaarul yoon ci këyitu saleer bu nëbbu, njiitu baatu-jàll, wala limu ñiy dàq ci Zoom wala Teams
• Nomade numérique wala liggéeykat bu sori buy liggéey ci réew muñu mayul ndigal: IP flag ak tëjug saytu export
• Barabu liggéeyandoo, otel, wala aéroport, jacking jus USB, surf ci mbagg yi, ak kaaraange DMA bu sedd

Boroom yi ak tegtali ofisel¶

• Biro Komiseer bi yor Xibaar ci UK (ICO): Jëf ci Liggéey ak Aar Done: Njàngalem Liggéeykat yiy Xool (2023) (Tegtal yu tar ci saytu bu nëbbu, jàpp butoŋu/webcam bu wéy, ak sàrti méngoo ci aparey BYOD yi ci këri UK GD).
• European Done Protection Board (EDPB) / Artikle 29 Grupp Liggéey: Xalaat 2/2017 ci Doxal Done ci Liggéey (WP 249) (Tere bu leer ci topp liggéeykat bu jaarul yoon ak tàqale bu mënul ñàkk ci barabi BYOD yu privé ci EU GDPR).
• Biro biy Aar Konsomatër yi ci wàllu Xaalis (CFPB) & Kuréel gi yor Jokko ci Liggéeykat yi (NLRB): Circulaire CFPB 2024-06 (Dossier yi ci ginaaw ak poñ yi algorithm yi am ci liggéeykat yi) & NLRB Memo Conseil General GC 23-02 (Njëfandikoo ak saytu elektronik
• Fondation Frontière Electronique (EFF): Ci biir Bossware: Jàngat xaralay losisel biy saytu liggéeykat yi, Keylogger yi, ak jàpp sertifikaa root TLS.
• NIST (Daara bu mag biy saytu ni ñuy doxalee ak xarala yu bees): NIST SP 800-114 Rev. 1 (Gidu jëfandikukat ci Teletravail ak indi sa bopp kaaraange BYOD) & NIST SP 800-46 Rev. 2.