ISoftware yokuJonga uMqeshi ("Bossware": Hubstaff, Teramind, ActivTrak) iFakelwe kwiKhompyutha ye-BYOD yoMntu: Ukukhangela ii-Keyloggers kunye ne-Screen Capture¶

Ukuyalelwa ngumqeshi okanye umxhasi ukuba afakele imveliso yomqeshwa okanye iarhente yokhuseleko kwiyakho, ikhompyutha yasekhaya yabucala (Bring Your Own Device / BYOD), okanye ukufumanisa ukuba umxhasi wokubeka iliso kwishishini elifihlakeleyo (Teramind, ActivTrak, Hubstaff, Ugqirha weXesha, Veriato / Sapience, InterGuard, Insightful / Workpuls, okanye Sneek) isebenza ngokuthula kwi-digital eyimfihlo okanye i-PC yeWindows ukhuseleko lwe-intanethi olungxamisekileyo. Ngelixa umqeshi ngokubanzi unegunya elisemthethweni lokubeka iliso kwi-*laptop yenkampani ** abayithengileyo kwaye bayikhuphe kuwe, ukufaka i-kernel-level okanye i-root-certificate arhente yokucupha ngokuthe ngqo kwinkqubo engenanto-yentsimbi yokusebenza ye ikhompyuter yakho yasekhaya inika abalawuli be-IT bomqeshi wakho ngokuqhubekayo ukukhangela i-24 yebhanki yakho yabucala, ukufikelela kwi-24 yebhanki yakho yabucala, ukufikelela kwi-intanethi ngokuqhubekayo izitshixo xa uchwetheza iphothali yakho yobuqu yezonyango okanye amagama ayimfihlo erhafu ngo-10:00 PM ngoMgqibelo, urekhoda iaudio yegumbi le-ambient okanye iisnapshots zekhamera yewebhu ngamaxesha athile osapho lwakho, kunye nokuthintela okufihliweyo. HTTPS / TLS itrafikhi yewebhu ngeGunya leSatifikethi seNgca etotshiwe (MITM Root CA). Ukuba iarhente yokucupha engagunyaziswanga isetyenziselwa ukuchwechwela ngokungekho mthethweni, ukutyhola, okanye ukunyanzeliswa ekhaya, qhawula ikhompyuter kwi-intanethi kwangoko kwaye uqhagamshelane nendawo ohlala kuyo. amanani kaxakeka. Ngonxunguphalo olusondeleleneyo lomsebenzi olude, bona izikhokelo zethu ukhuseleko lomsebenzi olukude olungxamisekileyo kunye nobumfihlo bedatha, corporate zero-trust Zscaler okanye CrowdStrike Falcon bootloops, kwaye Sondeza kunye neQela ukwabelana kwesikrini ngengozi kunye nokuvuza kwemic eshushu.

Akunyanzelekanga ukuba ukhethe phakathi kokuphulukana nomsebenzi wakho okude kwaye unike umqeshi wakho izitshixo eziphambili kwibhanki yakho yobuqu, ukhathalelo lwempilo kunye nobumfihlo bosapho. Ngokwenza uphicotho lwe-forensic lwemizuzu eli-10 kumatshini wakho weWindows okanye weMacOS ukubona iiarhente ezifihlakeleyo (svchost Iinkonzo zokuhlekisa, i-macOS Screen & System Audio Recording iimvume, kunye neZiqinisekiso zeNgcambu ezifakwe i-TLS), ukujikelezisa nawaphi na amagama agqithisiweyo obuqu achwetheziweyo ngelixa i-keylogger okanye i-TLS proxy yayisebenza, kwaye ihambisa yonke isoftware egunyaziswe ngumqeshi ngaphakathi kwe- hardware-yodwa ye Virtual Machine (Hyper-V, VMware Workstation, Parallels, okanye UTM) okanye kwindawo enikezelweyo $250 ilaptop yomsebenzi kuphela, unokwanelisa iimfuno zomkhondo weeyure zomsebenzi zomqeshi wakho ngelixa ugcina i-100 lepesenti yobomi bakho bobuqu ngokwasemzimbeni kunye ne-cryptographically.

Yenza oku ngoku¶

1. YEKA ukungena kwiibhanki zobuqu, i-imeyile yobuqu, abaphathi begama eliyimfihlo, iiphothali zezempilo, okanye iiakhawunti zerhafu kuloo khompyuter ude ugqibezele uphicotho ngezantsi. Ukuba ulwakhiwo oluyimfihlo Teramind, Veriato, okanye InterGuard (okanye isatifikethi sengcambu ye-MDM) ifakwe ngokuthe ngqo kwindlela yokusebenza yenginginya yakho, isebenza njenge SYSTEM okanye root daemon iiyure ezingama-24 ngosuku, naxa uvala iSlack, qhawula iVPN yeshishini, okanye uphume kwi-timer app ebonakalayo ngempelaveki.
2. Zigqume ngokwasemzimbeni ilens yakho yewebhu khamera ngesilayidi esingoomatshini okanye iteyiphu evaliweyo kwaye ukhuphe iplagi okanye ihardware-thulisa imayikrofoni yakho ye-USB nanini na ungekho kumnxeba ocwangcisiweyo. Izixhobo ezininzi zobukho beqela elikude (Sneek, Teramind Hidden Agent, Time Doctor, InterGuard) xhasa ikhamera yewebhu ethe cwaka ngamaxesha athile (every 1 to 5 minutes) kunye nemakrofoni ephilayo okanye ukusasazwa kwesikrini ngaphandle kokukhanyisa ibhena yesaziso sesoftware.
3. Jonga ukuba uyangena na emsebenzini wakho Microsoft 365 (Teams / Outlook) okanye iakhawunti kaGoogle Workspace ibhalise ngempazamo iPC yakho kuLawulo lweSixhobo seMobile (Microsoft Intune). KwiWindows, vula Settings -> Accounts -> Access work or school. Ukuba ubona iakhawunti yomqeshi wakho idweliswe nge "Iqhagamshelwe kwi [Company] MDM", ucofa "Vumela umbutho wam ukuba ulawule isixhobo sam" ngexesha lokungena kwi-Outlook yesiqhelo wanika umqeshi wakho umlawuli we-IT ekude imvume yokutyhala isoftware yangasemva ethe cwaka, jonga ii-apps ezifakiweyo, kwaye ukhuphe ukosula kwefektri ekude kwiPC yakho yobuqu.
4. ** Kwi-macOS, vula System Settings -> Privacy & Security -> Screen & System Audio Recording KUNYE Accessibility kanye ngoku.** Phantsi kwe-Apple's mandatory Transparency, Imvume, kunye noLawulo (TCC) isakhelo, akukho software yokubeka iliso yabasebenzi kwi-macOS inokubamba isikrini sakho okanye ibhale izitshixo zelizwe jikelele ngaphandle kokuba idweliswe ngokucacileyo kwaye ikhutshelwe ON ngaphakathi kwezo zahlulo zimbini (okanye ityhale ngeMDM ebonakalayo Device Management iprofayile).
5. Phicotha iWindows yakho kunye neMacOS eThenjiweyo yeSatifikethi seNqaku yogcino (certmgr.msc / Keychain Access) kuGunyaziwe weSatifikethi seNqaku yeNqanaba elingekho mgangathweni (CA). Ukuba umqeshi wakho ufakele isiqinisekiso se-Root CA ngokwesiko ecaleni Zscaler, Teramind, Netskope, okanye FortiClient, umncedisi wabo unakho ukuguqulela kwaye afunde umvuzo wokubhaliweyo ongenanto yonke HTTPS iwebhusayithi oyindwendwelayo, kuquka ibhanki yakho yobuqu kunye neerekhodi zonyango.
6. ** Ungaze ufakele umqeshi ixesha lokulandela okanye ukubeka iliso kwisoftware ngqo kwi-OS yakho yobuqu yomamkeli; yifake ngaphakathi koMatshini weNgcombolo owahlukileyo (Windows Hyper-V, VMware, VirtualBox, okanye UTM / Parallels) okanye kwisixhobo esibonakalayo esahlukileyo.** Nini Hubstaff, Time Doctor, okanye ActivTrak ibaleka ngaphakathi kwefestile yoMatshini obonakalayo, inokubona kuphela, umfanekiso wekhusi, kwaye ubhale okwenzekayo ngaphakathi kulaa festile yedesktop enenyani, ngelixa iibhrawuza zobuqu zekhompyuter yakho, iifayile, kunye neebhanki zihlala ziyi-100 leepesenti zingabonakali kumda we-hypervisor.

Umthi wesigqibo: Ukuphicothwa kwekhompyuter yakho ye-BYOD kunye nokwahlula isoftware yokubeka esweni umqeshi¶

Landela lo mthi wesigqibo ukufumanisa ukuba leliphi inqanaba lokujonga elikhoyo kumatshini wakho wobuqu kunye nendlela yokuwahlukanisa ngokukhuselekileyo.

flowchart TD
    A["Ukujongwa koMqeshi orhanelwayo okanye ogunyazisiweyo ('Bossware') kwikhompyuter ye-BYOD yoBuntu"] --> B{"Ngaba isoftware yomqeshi sele ifakiwe kumatshini wakho wobuqu, okanye uyacelwa ukuba uyifake ngoku?"}
    B -->|"UKUBUZWA UKUBA UYIFAKE NGOKU (UKhuseleko lwaPhambi koFakelo)"| C{"Loluphi uhlobo lwesoftware abacela ukuba ulufake?"}
    C -->|"I-Interactive Time Tracker (Hubstaff, uGqirha wexesha, iToggl, i-Upwork Desktop App)"| D["SUKUFAKA kwi-OS ye-Bare-metal host -> Yenza iWindows Hyper-V / VMware / UTM Virtual Machine yasimahla (okanye usebenzise ilaptop yokusebenza eyi-$200) -> Faka i-tracker ngaphakathi kweVM kuphela"]
    C -->|"ULungelo lweStealth / MDM / Root Cert (Teramind, ActivTrak, Veriato, Intune MDM)"| E["UNGAZE ufake i-Agent ye-Stealth okanye i-MDM kwi-PC yakho-> Cela ilaptop ekhutshwe yinkampani okanye i-Azure Virtual Desktop (AVD / Citrix) yokungena -> Ukuba unyanzelisiwe, sebenzisa ngokungqongqo kwilaptop eyohlukileyo yomsebenzi kuphela."]
    B -->|"ESEYIFAKILE KWIPC YOMNTU (uPhicotho lweForensic & Coco)"| F{"Yeyiphi iNkqubo yokuSebenza eqhutywa yikhompyuter yakho?"}
    F -->|"Windows 11/10"| G["Qhuba i-4-Step Windows Audit: 1. Khangela 'Izicwangciso -> Ukufikelela emsebenzini okanye isikolo' kwi-MDM -> 2. Khangela i-Services.msc / Sysinternals Autoruns yee-arhente ezifihliweyo -> 3. Khangela i-certmgr.msc ye-Root CA -> 4. Khangela imidibaniso ye-TCP ephumayo"]
    F -->|"macOS (Apple Silicon / Intel)"| H["Qhuba i-4-Step macOS Audit: 1. Khangela 'Iisetingi zeNkqubo -> Ngokubanzi -> Ulawulo lweSixhobo' (IiProfayili) -> 2. Khangela 'uBucala kunye noKhuseleko -> Ukurekhodwa kweSkrini kunye nokuFikelela' -> 3. Khangela / iLibrary/LaunchDaemons -> 4. Khangela iziQinisekiso ze-Keychain"]
    G --> I{"Ngaba ufumene i-Agent Monitoring ye-Stealth, uBhaliso lwe-MDM, okanye iSatifikethi seNgcambu esiTofweyo?"}
    H --> I
    I -->|"EWE: Ifunyenwe i-Agent Stealth / Root CA / Intune MDM kwiPC yakho"| J["UMXHOLO: Hambisa umsebenzi uye kwi-VM okanye kwilaptop yesibini -> Ungabhalisi i-MDM / Susa iarhente kunye neRoot CA kwiPC yakho (okanye ucoce i-OS) -> Jikelezisa zonke iinkcukacha zebhanki zobuqu, i-imeyile, kunye nephasiwedi yomphathi kwifowuni ecocekileyo."]
    I -->|"HAYI: Kuphela i-tracker ebonakalayo ebonakalayo (umzekelo, i-Upwork / Hubstaff) ifakiwe"| K["Cima iSkrini sayo sokuRekhoda / iimvume zokufikeleleka ngaphandle kweeyure zomsebenzi-> Yeka i-daemon yangasemva kuMphathi woMsebenzi / isiHlomelo soMsebenzi xa ucime iwotshi-> Yifudusele kwiVM"]

Icandelo 1: Yintoni "iBossware" eyibambayo ngokwenene (kunye nendlela ii-Agents ezizifihla ngayo kwinkqubo yakho)¶

Ukuphicotha ikhomputha yakho yobuqu ngokufanelekileyo, kufuneka ukwazi ubuchule obuchanekileyo bobugcisa kunye namagama enkqubo efihliweyo asetyenziswa ngamaqonga asixhenxe okubeka iliso abasebenzi.

+-------------------------------------------------------------------------+
|  THE 5 SURVEILLANCE LAYERS OF ENTERPRISE "BOSSWARE" ON A BYOD HOST OS   |
|                                                                         |
|  [Layer 1: Visual]    -> Continuous Screen Recording (MP4) or periodic  |
|                          JPEG screenshots + OCR text indexing of screen |
|  [Layer 2: Input]     -> Kernel/API Keylogger (captures every password, |
|                          iMessage, & private email) + Clipboard history |
|  [Layer 3: Network]   -> Injected Trusted Root CA Certificate decrypts  |
|                          all HTTPS traffic (banking, medical portals)   |
|  [Layer 4: Hardware]  -> Silent Webcam snapshots, Microphone room audio,|
|                          GPS/Wi-Fi BSSID geolocation, & USB file copies |
|  [Layer 5: Telemetry] -> "Idle Score" (mouse jiggle detection), active  |
|                          window titles, & "Job Search / Attrition" AI   |
+-------------------------------------------------------------------------+

Iminwe yobuGcisa yeeNdawo eziPhezulu ezisi-7 zokuBeka iliso kuBasebenzi¶

Naxa ibekwe ku "Indlela efihlakeleyo / efihliweyo" (apho umthengisi efihla ngabom usetyenziso kwiMenyu yokuQala yeWindows, ifolda yeSicelo seMacOS, kunye netreyi yenkqubo), yonke iarhente yokubeka iliso kufuneka iqhube inkonzo yangasemva, ilayishe umqhubi, kwaye igcine uqhagamshelo lothungelwano olufihliweyo kwiseva yayo yokungenisa ilifu:

Icandelo 2: Inyathelo ngenyathelo loPhicotho lweForensic lokubona iBossware efihliweyo kumntu Windows 11/10 PC¶

Jonga 1: Uphicotho lweWindows "Ukufikelela kuMsebenzi okanye iSikolo" kuBhaliso lweMDM ngeNgozi¶

1. Vula IiWindows Settings (Win + I) -> Accounts -> Access work or school.
2. Cofa kuyo nayiphi na idilesi ye-imeyile yomsebenzi edwelisiweyo. Ukuba ubona i Info iqhosha (hayi nje Disconnect)MDM)**. Cofa Info kwaye uskrolele ezantsi ukuya Areas managed by [Company Name] kwaye Synced Policies / Installed Apps ukubona yonke ipolisi, isatifikethi, kunye nesifakeli esithe cwaka se-MSI umqeshi wakho asityhalele kumatshini wakho wobuqu. Nje ukuba ufudukele umsebenzi wakho kumatshini obonakalayo kwiSigaba 4, cofa Disconnect Apha ukuze ungabhalisi iPC yakho yobuqu.

Jonga 2: Hunt kwiinkonzo zeMasked Stealth (scthost.exe, tsvchst.exe) Ukusebenzisa i-PowerShell kunye ne-Sysinternals Autoruns¶

1. Vula PowerShell njengoMlawuli (Win + X -> Terminal (Admin)) kwaye usebenzise lo myalelo ukudwelisa yonke inkonzo yangasemva yomntu wesithathu engasayinwanga ngokwedijithali nguMicrosoft:

   Get-WmiObject Win32_Service | Where-Object { $_.State -eq 'Running' -and $_.PathName -notmatch 'C:\\Windows\\servicing|svchost\.exe' } | Select-Object Name, DisplayName, PathName | Format-Table -AutoSize
   

2. Jonga ngononophelo kuyo nayiphi na inkonzo ephelelwayo C:\ProgramData\, C:\Windows\SysWOW64\scthost.exe (ActivTrak), tmagent okanye tsvchst (Teramind), winikus (Veriato), okanye wscservice (InterGuard).
3. Khuphela iMicrosoft esemthethweni simahla Sysinternals Autoruns64.exe, yiqhube njengoMlawuli, cofa Options -> Hide Microsoft Entries, kwaye ujonge Services kwaye Drivers iithebhu zaso nasiphi na isitshixo esifihlakeleyo okanye umqhubi wesihluzi sesikrini (tmfilter.sys, vfilter.sys).

Jonga i-3: Hlola iVenkile yeSiqinisekiso seNgcambu yeWindows eThenjiweyo (certmgr.msc) ye-HTTPS Uguqulelo oluntsonkothileyo¶

Ukubona ukuba uchwetheza ntoni ngaphakathi HTTPS iiwebhusayithi (ezifana nebhanki yakho yobuqu, iGmail, okanye indawo yokhathalelo lwempilo), iisuite zokubeka iliso kunye neeproxi zewebhu zeshishini (Teramind, Zscaler, Netskope, Fortinet) faka isiko Umntu-kuMbindi (MITM) Igunya leSatifikethi seNgcambu kwiPC yakho:

1. Cinezela Win + R, uhlobo certmgr.msc, kwaye ucofe u-Enter.
2. Yandisa Trusted Root Certification Authorities -> Certificates, hlela nge Issued By, kwaye ujonge nasiphi na isatifikethi esibizwa ngegama lakho **UMqeshi **, Teramind, Zscaler Root CA, Veriato, Netskope, Fortinet, okanye Securly.
3. Vavanya kwiChrome yakho okanye isikhangeli se-Edge: vula https://www.google.com okanye iwebhusayithi yebhanki yakho, cofa i Tune icon ngasekhohlo kwe URL -> Connection is secure -> Certificate is valid. Ukuba isatifikethi se google.com okanye ibhanki yakho yobuqu ithi Issued By: [Your Employer Name] / Zscaler / Teramind Root CA, umqeshi wakho uguqulela kwaye uhlola itrafikhi yakho ye-HTTPS.

Icandelo 3: Inyathelo ngenyathelo loPhicotho lweForensic lokubona iBossware efihliweyo kwiMac yomntu (macOS)¶

Jonga 1: Hlola Screen & System Audio Recording kwaye Accessibility Iimvume¶

Kwi-macOS, kwanakwinqanaba le-daemon yengcambu ayikwazi ukurekhoda isikrini sakho ngokuthula okanye ukuloga izitshixo zehlabathi kuzo zonke ezinye ii-apps ngaphandle kokuba inikwe imvume kwiiphaneli ezimbini zaBucala:

1. Vula System Settings -> Privacy & Security -> Screen & System Audio Recording. Ukuba ubona scthost, Teramind, ActivTrak, Hubstaff, Time Doctor, sfproc, Veriato, okanye umncedi ongaqondwanga uQinisekile apha, loo app inemvume esebenzayo yokurekhoda isikrini sakho seMac. Yitshintshe ** OFF ** ngokukhawuleza kwaye ucofe i - iqhosha lokuyisusa.
2. Vula Accessibility kwaye Input Monitoring ngaphakathi Privacy & Security. Nayiphi na iapp enikiweyo Input Monitoring okanye Accessibility imvume ingakwazi ukufunda konke ukubetha kwezitshixo ochwetheza kuyo yonke indlela yokusebenza. Khubaza kwaye ususe nayiphi na i-daemon engaziwayo okanye umkhondo womqeshi kuzo zombini izintlu.

Jonga i-2: Jonga i-macOS Device Management (MDM Profiles) kwaye Sifihliwe LaunchDaemons¶

1. Vula System Settings -> General -> Device Management (okanye System Preferences -> Profiles kwi-macOS endala). Kwi-MacBook yobuqu, i Device Management icandelo kufuneka lingabi nanto ngokupheleleyo okanye lingabikho. Ukuba ubona i-iProfayili yoLawulo efakwe ngumqeshi wakho (Jamf, Kandji, Mosyle, Microsoft Intune, Rippling, Drata, Vanta), cofa kuyo ukuze uhlole ukuba zeziphi izatifikethi zengcambu, i-TCC yabucala yokudlula, kunye neearhente ezingasemva ezinyanzelisayo kwiMac yakho.
2. Vula Itheminali (Cmd + Space -> Terminal) kwaye ubaleke ls -la /Library/LaunchDaemons /Library/LaunchAgents ukudwelisa zonke iingcambu zeqela lesithathu iidaemon kunye neearhente zokusungula ezifakwe kwiMac yakho. Khangela nayiphi na .plist ifayile equlathe teramind, activtrak, scthost, veriato, hubstaff, timedoctor, workpuls, insightful, okanye awarenesstech.
3. Vula kwakhona UFikelelo lwesitshixo (Cmd + Space -> Keychain Access) -> System Roots kwaye System amakhonkco kwaye uhlole i Certificates ithebhu yayo nayiphi na i-Root CA yesiko efakwe ukucima iSafari yakho yobuqu kunye ne-Chrome HTTPS traffic.

Icandelo 4: Ukwahlulahlula iSoftwe yoMqeshi Ngaphakathi komatshini obonakalayo (VM) okanye i-Hardware eZinikezelweyo¶

Ukuba umsebenzi wakho ukude okanye ikhontrakthi ezimeleyo ifuna ukuba usebenze Hubstaff, Time Doctor, Upwork Desktop App, ActivTrak, Teramind, okanye i-VPN yenkampani ngexesha leeyure zomsebenzi, ** ungaze uyifake kwinkqubo yakho yokusebenza ye-host host.**

+----------------------------------------------------------------------+
|  HOW VIRTUAL MACHINE (VM) ISOLATION CONTAINERS EMPLOYER BOSSWARE     |
|                                                                      |
|  +----------------------------------------------------------------+  |
|  | YOUR PERSONAL HOST COMPUTER (Windows 11 or macOS)              |  |
|  | * Personal Chrome (Banking, Medical, Personal Email, Taxes)    |  |
|  | * Personal Files, Photos, 1Password Vault, & Webcam            |  |
|  |   [ 100% INVISIBLE TO EMPLOYER ACROSS HYPERVISOR BOUNDARY ]    |  |
|  |   +--------------------------------------------------------+   |  |
|  |   | ISOLATED WORK VIRTUAL MACHINE (Hyper-V / UTM / VMware) |   |  |
|  |   | * Employer Bossware (Hubstaff / Teramind / ActivTrak)  |   |  |
|  |   | * Corporate VPN + Work Browser + Slack + VS Code       |   |  |
|  |   | * Bossware Can ONLY Screenshot & Log Inside This VM    |   |  |
|  |   +--------------------------------------------------------+   |  |
|  +----------------------------------------------------------------+  |
+----------------------------------------------------------------------+

UKhetho loku-1: Umatshini weVirtual waMahla waMahla (Hyper-V / VMware Workstation / UTM)¶

Ngokwenza undwendwe uMatshini weVirtual kwikhompyuter yakho kwaye ufake yonke isoftware yomqeshi ngokungqongqo ngaphakathi kweVM:

• Futha iSkrini sodwa: Nini Hubstaff okanye Teramind ithatha umfanekiso weskrini ngaphakathi kwe-VM, ibamba ** kuphela i-adaptha yokubonisa ebonakalayo ye-VM **, ngelixa i-akhawunti yakho yebhanki yobuqu okanye i-monitor yesibini kwi-OS ye-host ihlala i-100 yeepesenti engabonakaliyo kumda we-hypervisor.
• Ilogger kunye nebhodi eqhotyoshwayo yodwa: Khubaza Ibhodi eqhotyoshwayo ekwabelwana ngayo (Bidirectional Clipboard: Off) kunye ne-Iifolda eKwabelwana ngazo* kwizicwangciso zakho ze-VM ukuze ii-keystrokes zichwethezwe kwisikhangeli sakho sobuqu se-OS ungaze ufake i-VM's virtual USB keyboard buffer.
• ** Inethiwekhi kunye ne-HTTPS yokwahlulwa kweSatifikethi:** Nayiphi na i-VPN yeshishini (Zscaler, Cisco AnyConnect) okanye i-MITM Root Certificate efakwe ngaphakathi kweVM ichaphazela kuphela itrafikhi yenethiwekhi ngaphakathi kweVM, ishiya uqhagamshelo lwe-intanethi yendawo yokuhlala ethe ngqo yekhompyuter yakho lungabanjwanga.
• Instant 5:00 PM Hard Off-Switch: Xa ugqiba umsebenzi ngo-5:00 PM, cofa Shut Down kuMatshini weVirtual ukuze inkonzo yangasemva yomqeshi iyeke ukubakho kwi-RAM de uqalise i-VM ngomso kusasa.

Ukhetho 2: Abazahluleleyo $200 to $300 ILaptop yoMsebenzi eHlaziyiweyo + I-Hardware KVM Tshintshela¶

Ukuba iarhente yeshishini ijongile CPUID okanye BIOS imitya (VMware, VirtualBox, Hyper-V) kunye neebhloko koomatshini ababonakalayo, thenga uhlaziyo olucocekileyo Lenovo ThinkPad T14 okanye iDell Latitude ($180 to $250) ezinikezelwe ** 100 ekhulwini ukusebenza **, qhagamshela zombini iikhomputha kwiimonitha zedesika yakho kunye nekhibhodi usebenzisa $35 I-HDMI okanye iDisplayPort Hardware KVM Tshintshela, kwaye uqhagamshele ilaptop yomsebenzi kumzila wakho wasekhaya Inethiwekhi yeWi-Fi yeeNdwendwe eLudwayo ukuze ingakwazi ukuskena izixhobo zakho ze-LAN zasekhaya.

Iinombolo zikaxakeka zengingqi kunye nemigaqo ye-arhente (ucupho lwe-BYOD & nemithetho ye-wiretap)¶

Ukusasaza ngokufihlakeleyo iiloga zezitshixo, ukuthwebula ikhamera yewebhu, okanye ucupho 24/7 ungekho emsebenzini kumnikazi womqeshwa wabucala (BYOD) ikhompyutha ngaphandle kokuchaza okucacileyo yophula i-wiretap, ukhuseleko lwedatha, kunye nemithetho yabasebenzi kwiindawo ezininzi:

• ** I-European Union kunye ne-United Kingdom (EU/UK GDPR, ECHR Article 8, & UK ICO Employment Practices Code):** Cofa 112 (EU) okanye 999 (UK) kwiimeko ezingxamisekileyo ngokwasemzimbeni. Ngaphantsi ** Amanqaku e-GDPR 5, 6, kunye ne-35 ** kunye nesikhokelo esivela kwi-I-Ofisi yoMkomishinala woLwazi wase-UK (ICO) (IsiKhokelo saBasebenzi sokuBeka iliso, 2023), ukubeka esweni okufihlakeleyo kwabasebenzi phantse akunakuthetheleleka ngokusemthethweni, kwaye ukulogging okuziintloko ngokuqhubekayo, ukuthathwa kwekhamera yewebhu, okanye ukubeka esweni iiyure ezingekhoyo kwisixhobo sabo sabucala se-ByoR kunye ne-GDP yabo yabucala. Unciphiso lweDatha uvavanyo. Abasebenzi banokufaka isikhalazo sokulawula kunye UK ICO (ico.org.uk) okanye ilizwe labo ** i-EU Data Protection Authority (CNIL, BfDI, AEPD, DPC)**.
• EUnited States (ECPA, CFAA, kunye neMithetho yeSaziso sokuBeka iliso kuBasebenzi bakaRhulumente): Fowunela 911 malunga neemeko ezingxamisekileyo ngokwasemzimbeni. UMthetho waBucala woNxibelelwano ngeKhompyutha (ECPA)** kunye noMthetho woBuqhetseba noBuqhetseba kwiKhompyutha (CFAA) ilawula ungenelelo olungagunyaziswanga, kunye neBhodi yeSizwe yoBudlelwane bezaBasebenzi (NLRB I-Memo 23-02) iyaluthintela uphononongo lwe-elektroniki olukhusela umsebenzi odibeneyo. ** ENew York (NY Civil Rights Law § 52-c)**, Connecticut (Conn. Gen. Stat. § 31-48d), Delaware (19 Del. C. § 705), kunye California (CCPA / CPRA) ifuna ngokungqongqo ukuba abaqeshi banike isaziso esibhaliweyo kwangaphambili phambi kokuba babandakanyeke ekubekeni iliso ngekhompyutha.
• IKhanada, iAustralia, neNew Zealand: Ilawulwa ngu-Ontario's Working for Workers Act (efuna i-Electronic Monitoring Policy ebhaliweyo kubaqeshi abanabasebenzi abangama-25+), Quebec Law 25, kunye ne New South Wales Workplace Surveillance Act 2005 (ifuna isaziso esibhaliweyo seentsuku ezili-14 ngaphambili). 'Yabona amanani kaxakeka kuyo yonke imimandla.

Imibuzo edla ngokubuzwa¶

Ngaba umqeshi wam angayibona into endiyenzayo kwikhompyuter yam okanye kwifowuni yam ngenxa yokuba iqhagamshelwe kwiWi-Fi yasekhaya ngelixa ilaptop yam yomsebenzi ikwakwiWi-Fi yasekhaya enye?¶

Hayi, okoko nje isoftware yokubeka iliso yomqeshi wakho kunye neVPN zifakwe kuphela kwilaptop yomsebenzi ekhutshwe yinkampani kwaye hayi kwikhompyuter yakho okanye kwifowuni yakho. Ilaptop yeshishini eqhagamshelwe kwiWi-Fi yasekhaya isebenzisa itonela ye-VPN efihliweyo ebuyela kwiofisi yenkampani kwaye ayinakukwazi ukuguqulela okanye ukubona iwebhu ye-HTTPS yokukhangela, iibhanki, okanye ii-apps ezisebenza kwilaptop yakho eyahlukileyo okanye i-iPhone kwi-Wi-Fi yendlu enye (nangona ungowona ucoceko lwenethiwekhi, qhagamshela ilaptop yakho yomsebenzi kwinethiwekhi yeWi-Fi yeeNdwendwe zendlu yakho).

Ngaba ukungena kwinkampani yam iSlack, iGmail, okanye iMicrosoft Teams ngaphakathi kwibhrawuza yewebhu ithebhu ivumela umqeshi wam ukuba abone ezinye iithebhu zam zebrawuza okanye athathe izikrini zedesktop yam?¶

Hayi. Kuba iibhrawuza zangoku zewebhu zinyanzelisa iSandbox yeSame-Origin engqongqo, iphepha lewebhu livula kumkhangeli zincwadi wethebhu omnye (ezifana ne `app.slack.com` okanye `outlook.office.com`) inqatshelwe yi-injini yomkhangeli zincwadi ekufundeni ii-URLs, iikuki, okanye iipixel zesikrini zezinye iithebhu zebhrawuza okanye idesktop yakho, ngaphandle kokuba ungena kwi-Chrome Browser ngokwayo ngeProfayile yoMsebenzi oLawulwayo kwaye ucofe u-"Layita u-Sync" (evumela uLawulo lweNdawo yokuSebenza yeGoogle yomqeshi wakho ukuba atyhale Izandiso zeChrome kulo mfanekiso womkhangeli zincwadi). Ngalo lonke ixesha uvule usetyenziso lwewebhu yomsebenzi ngaphakathi kweprofayile eyahlukileyo engadityaniswanga yesikhangeli enoziro izandiso zeshishini.

Ngaba i-Hubstaff, uGqirha weXesha, okanye i-ActivTrak ingabhaqa ukuba ndisebenzisa oomatshini okanye i-USB "Mouse Jiggler"?¶

Ewe, iinguqulelo zangoku ze-ActivTrak, iTeramind, uGqirha weXesha, kunye ne-Hubstaff zisebenzisa igalelo lokufunda ngomatshini i-heuristics eqeqeshelwe ukufaka iflegi yoomatshini kunye ne-USB jigglers. Iisuti zangoku zihlalutya i-entropy yeetrajectories zemouse (i-flag ephindaphindwayo ye-pixel 1-oscillations, isantya-isantya esijikelezayo esijikelezayo, okanye imizuzu engama-45 yamathuba okuqhubela phambili kwemouse ehamba nocofa zero zero, utshintsho lwefestile ye-zero, kunye ne-keyboard engu-0) kwaye uthumele iMouse erhanelwayo ezenzekelayo Isilumkiso somphathi wakho weJiggler.

Ukuba ndisebenzisa iPC yobuqu yeWindows eneakhawunti ezimbini zomsebenzisi (enye "yoMsebenzi" yokungena kwiWindows kunye neyokungena "yoBuntu" kwiWindows), ngaba oko kuyeka iBossware efakwe kwi-Login yomsebenzi ekuhloleni ukungena kwam koBuqu?¶

Hayi, ii-akhawunti zabasebenzisi beWindows okanye zeMacOS kwisistim efanayo azikhethi iiarhente zokujonga umgangatho wenkqubo (`Teramind`, `ActivTrak`, `Veriato`, `InterGuard`, `CrowdStrike`, `Intune MDM`). Kuba ezo arhente zifaka njenge `NT AUTHORITY\SYSTEM` iinkonzo, abaqhubi be-kernel filter, okanye `/Library/LaunchDaemons` ngomatshini obanzi weZiqinisekiso zeeNgcambu eziThenjiweyo, zisebenza ngapha kwenkqubo yonke yokusebenza nokuba yeyiphi iakhawunti yomsebenzisi yobulali engenileyo.`Hyper-V / VMware / UTM`), i-Dual-Boot eyahlukileyo efihliweyo idrayivu, okanye ilaptop yomzimba eyahlukileyo ibonelela ngenene.

Ngaba umqeshi ebeka iliso kwisoftware angabona iiwebhusayithi endizindwendwelayo kwiChrome "Imo ye-Incognito" okanye iSafari "Ukhangelo lwaBucala"?¶

Ewe, 100 ekhulwini. Imowudi ye-Incognito yeChrome kunye neSafari yaBucala ukhangelo lukhusela kuphela umkhangeli zincwadi ekugcineni imbali kunye neekuki kwihard drive yakho yasekhaya emva kokuba uvale ifestile; abenzi nto ukufihla isikrini sakho, izitshixo zakho, ukujonga i-DNS yakho, okanye i-HTTPS yakho yetrafikhi kwiarhente yokujonga umqeshwa (`Teramind`, `ActivTrak`, `InterGuard`, `Veriato`) okanye i-Root CA yenkampani esebenza kwinkqubo enye yokusebenza.

Umqeshi wam undicele ukuba ndifake iMicrosoft Authenticator okanye i-Okta Verify 2FA app kwi-iPhone yam okanye ifowuni ye-Android. Ngaba le app kuhlola iifoto zam zobuqu, imibhalo, okanye ukhangelo lwewebhu?¶

Hayi. I-Standalone Multi-Factor Authentication (MFA) code generator app (**Microsoft Authenticator**, **Okta Verify**, **Duo Mobile**, **Isiqinisekisi sikaGoogle**) efakwe kwi-Apple App Store okanye i-Google Play Store isebenza ngaphakathi kwe-sandbox ye-app yeselula engqongqo kwaye inofikelelo kwi-apps yobuqu, iifoto, enye imbali yokukhangela, okanye enye imbali. Kuphephe kuphela ukufaka uLawulo lweSixhobo esiXhobayo (`MDM`) Iprofayile yoBhaliso lweSixhobo kwifowuni yobuqu ukuba icela ulawulo lwesixhobo sengcambu kunye neemvume zesatifikethi.

Izikhokelo ezinxulumeneyo¶

• Ukhuseleko lomsebenzi olungxamisekileyo kunye nobumfihlo bedatha
• Ukusilela kwe-VPN ukubulala-ukutshintsha okanye i-zero-trust Zscaler / CrowdStrike Falcon bootloop quarantine
• Isabelo sesikrini ngengozi sephepha lomvuzo eliyimfihlo, umphathi wegama eliyimfihlo, okanye uluhlu lokuyeka emsebenzini kwiZoom okanye kwiQela
• I-Digital nomad okanye umsebenzi okude osebenza kwilizwe elingagunyaziswanga: iflegi ye-IP kunye nolawulo lokuthumela ngaphandle
• Indawo yokusebenzela, ihotele, okanye isikhululo seenqwelomoya ijusi ye-USB, ukusefa egxalabeni, kunye nokhuselo lwe-DMA olubandayo

Imithombo kunye nezikhokelo ezisemthethweni¶

• I-Ofisi yoMkomishinala weeNkcukacha zase-UK (ICO): IiNdlela zokuSebenza kunye noKhuseleko lweNkcukacha: UkuJonga iSikhokelo saBasebenzi (2023) (Izithintelo ezingqongqo ekubekeni iliso okufihlakeleyo, ukuthathwa kwe-keystroke eqhubekayo/ikhamera yewebhu, kunye neemfuno zokulingana kwizixhobo ze-BYOD kumakhaya abucala phantsi kwe-UK GDPR).
• ** IBhodi yoKhuseleko lweDatha yaseYurophu (EDPB) / iSiqendu 29 iQela eliSebenzayo: ** * Uluvo 2/2017 malunga nokuCwangciswa kweDatha eMsebenzini (WP 249) * (Ukuthintelwa okucacileyo malunga nokulandela umkhondo wabasebenzi abangalinganiyo kunye nokwahlulwa okunyanzelekileyo kweendawo zabucala ze-BYOD phantsi kwe-EU GDPR).
• I-Bureau yoKhuseleko lwezeMali yoMthengi (CFPB) kunye neBhodi yeSizwe yoBudlelwane bezaBasebenzi (NLRB): CFPB Isetyhula 2024-06 (Amanqaku angasemva kunye ne-Algorithmic Scores kubasebenzi) & NLRB General Counsel Memo GC 23-02 (Electronic Management and Algorithmic Surveillance).
• Isiseko se-Electronic Frontier (EFF): Ngaphakathi kweBossware: Uhlalutyo lobuGcisa lweSoftware yokuJonga i-Employee Monitoring, ii-Keyloggers, kunye ne-TLS Root Certificate Interception.
• ** I-NIST (iZiko leSizwe leMigangatho kunye neTekhnoloji): ** *NIST SP 800-114 Rev. 1 (Isikhokelo soMsebenzisi kwiTelework kunye nokuzisa isiXhobo sakho se-BYOD yoKhuseleko) * & * NIST SP 800-46 Rev. 2 *.