I-Employer Monitoring Software ("Bossware": Hubstaff, Teramind, ActivTrak) Ifakwe kukhompyutha yomuntu siqu ye-BYOD: Ithola ama-Keylogger kanye nokuthwebula isikrini¶

Ukuyalelwa umqashi noma iklayenti ukuthi ufake ukukhiqiza komsebenzi noma i-ejenti yezokuphepha kukhompyutha yakho*yakho, ephethwe ngasese (Bring Your Own Device / BYOD)**, noma ukuthola ukuthi iklayenti lokuqapha ibhizinisi elinobuqili (Teramind, ActivTrak, Hubstaff, Dokotela Wesikhathi, Veriato / Sapience, InterGuard, Insightful / Workpuls, noma Sneek) isebenza ngokuyimfihlo, i-Mac yakho iyimfihlo futhi ingemuva kwe-PC ephuthumayo izimo eziphuthumayo ze-cybersecurity. Nakuba umqashi ngokuvamile enegunya elibanzi elingokomthetho lokuqapha umsebenzi kwikhompuyutha ephathekayo ephethwe yinkampani abayithenge futhi bakunikeze yona, efaka i-ejenti yokugada yezinga le-kernel noma isitifiketi sezimpande ngokuqondile ohlelweni lokusebenza olungenalutho lwe-khompuyutha yakho yasekhaya kunikeza abalawuli be-IT bomqashi wakho ukuthi baqhubeke behlola impilo yakho yangasese 24/7: 7 ukuchofoza izinkinobho lapho uthayipha ingosi yakho yezokwelapha noma amaphasiwedi entela ngo-10:00 PM ngoMgqibelo, uqopha izifinyezo zomsindo wegumbi elizungezile noma izifinyezo zekhamera yewebhu ngezikhathi ezithile zomndeni wakho, futhi ubamba ngokubethela HTTPS / TLS ithrafikhi yewebhu nge-Root Certificate Authority ejovwe (MITM Root CA). Uma i-ejenti yokugada engagunyaziwe isetshenziselwa ukugada okungekho emthethweni, ukweqa, noma ukuphoqelela ekhaya, nqamula ikhompuyutha ku-inthanethi ngokushesha bese uthinta indawo yangakini. izinombolo eziphuthumayo. Ukuze uthole izimo eziphuthumayo ezihlobene eduze nomsebenzi okude, bheka imihlahlandlela yethu ku ukuphepha komsebenzi okude kwesimo esiphuthumayo kanye nobumfihlo bedatha, corporate zero-trust Zscaler noma CrowdStrike Falcon bootloops, futhi Sondeza kanye namaQembu ukwabelana kwesikrini ngephutha nokuvuza kwemakrofoni okushisayo.

Awudingi ukukhetha phakathi kokulahlekelwa umsebenzi wakho okude nokunikeza umqashi wakho izikhiye eziyinhloko zokubhanga kwakho siqu, ukunakekelwa kwezempilo, nobumfihlo bomndeni. Ngokwenza ucwaningo lwe-forensic lwemizuzu eyi-10 lomshini wakho we-Windows noma we-macOS ukuze uthole ama-stealth agents afihliwe (svchost izinsiza zokuzenzisa, i-macOS Screen & System Audio Recording izimvume, kanye nezitifiketi ze-Root TLS ezijovwe), ukushintshanisa noma imaphi amagama ayimfihlo omuntu siqu athayiphiwe ngenkathi i-keylogger noma ummeleli we-TLS usebenza, futhi uhambisa yonke isofthiwe egunyazwe umqashi ngaphakathi komshini Obonakalayo Oyedwa wezingxenyekazi zekhompyutha (Hyper-V, VMware Workstation, Parallels, noma UTM) noma ungene esizinikezele $250 I-laptop yomsebenzi kuphela, ungakwazi ukwanelisa izidingo zokulandelela amahora okusebenza zomqashi wakho kuyilapho ugcina amaphesenti angu-100 empilo yakho yomuntu siqu ehlukanisiwe ngokomzimba nangokwemfihlo.

Yenza lokhu manje¶

1. YEKA ukungena ngemvume kumabhange akho, i-imeyili yomuntu siqu, izimenenja zephasiwedi, izingosi zokunakekelwa kwempilo, noma ama-akhawunti entela kuleyo khompyutha uze uqedele ukuhlola okungezansi. Uma ukwakhiwa okuyimfihlo Teramind, Veriato, noma InterGuard (noma isitifiketi sempande ye-MDM) sifakwe ngqo ohlelweni lwakho lokusebenza lomsingathi, lusebenza njenge SYSTEM noma root daemon amahora angu-24 ngosuku, ngisho noma uvala i-Slack, nqamula i-VPN yebhizinisi, noma uvale i-app ebonakalayo ye-timer ngempelasonto.
2. Zimboza ngokoqobo ilensi yekhamera yakho yewebhu ngesilayidi esisetshenziswayo noma itheyiphu ekhanyayo bese ukhipha ipulaki noma ihadiwe-thulisa umbhobho wakho we-USB noma nini lapho ungekho ocingweni oluhleliwe. Amathuluzi amaningi okuba khona kweqembu akude (Sneek, Teramind Hidden Agent, Time Doctor, InterGuard) sekela ukuthwebula isifinyezo sekhamera yewebhu ngezikhathi ezithile (every 1 to 5 minutes) kanye nemakrofoni ebukhoma noma ukusakazwa kwesikrini ngaphandle kokukhanyisa isibhengezo sesaziso sesofthiwe.
3. Hlola ukuthi uyangena yini emsebenzini wakho iMicrosoft 365 (Teams / Outlook) noma i-akhawunti ye-Google Workspace ibhalise ngephutha i-PC yakho ku-Corporate Mobile Device Management (Microsoft Intune). Ku-Windows, vula Settings -> Accounts -> Access work or school. Uma ubona i-akhawunti yomqashi wakho esohlwini lokuthi "Ixhumeke ku-[Inkampani] MDM", ngokuchofoza "Vumela inhlangano yami ukuthi iphathe idivayisi yami" phakathi nokungena ngemvume kwe-Outlook okujwayelekile kunikeze umlawuli we-IT womqashi wakho imvume yokuphusha isofthiwe yangemuva ethule, ahlole izinhlelo zokusebenza ezifakiwe, futhi akhiphe ukusula kwasefekthri okukude kwe-PC yakho yomuntu siqu.
4. ** Ku-macOS, vula System Settings -> Privacy & Security -> Screen & System Audio Recording KANYE Accessibility khona manje.** Ngaphansi kwesibopho sokubonisa ngale, Imvume, kanye Nokulawula kwe-Apple (TCC) uhlaka, ayikho isofthiwe yokuqapha isisebenzi ku-macOS engathwebula isikrini sakho noma ifake amakhiya okhiye omhlaba ngaphandle kwalapho ibhalwe ngokucacile futhi yashintshwa YAVULA ngaphakathi kwalawo mafasitelana amabili (noma iphushwe nge-MDM ebonakalayo Device Management iphrofayili).
5. Hlola isitolo sakho sesitifiketi esithembekile se-Windows ne-macOS (certmgr.msc / Keychain Access) yenkampani engajwayelekile yesitifiketi se-Root Certificate (CA). Uma umqashi wakho efake isitifiketi sangokwezifiso se-Root CA eceleni Zscaler, Teramind, Netskope, noma FortiClient, iseva yabo ingakwazi ukususa ukubhala futhi ifunde ukulayishwa kombhalo ongenalutho kukho konke HTTPS iwebhusayithi oyivakashelayo, okuhlanganisa namarekhodi akho ebhange namarekhodi ezokwelapha.
6. Ungalokothi ufake isofthiwe yokulandela isikhathi yomqashi noma yokuqapha ngokuqondile ku-OS yakho yomuntu siqu yomsingathi; ifake ngaphakathi komshini ongabodwa we-Virtual Machine (Windows Hyper-V, VMware, VirtualBox, noma UTM / Parallels) noma kudivayisi ephathekayo ehlukile. Nini Hubstaff, Time Doctor, noma ActivTrak isebenza ngaphakathi kwewindi Lomshini Obonakalayo, ingabona kuphela, ithwebule isithombe-skrini, futhi ibhale okwenzekayo ngaphakathi kwalelo windi ledeskithophu ebonakalayo, kuyilapho iziphequluli zomuntu siqu zekhompuyutha yakho engusokhaya, amafayela, nokubhenka kuhlala kungabonakali ngamaphesenti angu-100 kuwo wonke umngcele we-hypervisor.

Isihlahla sesinqumo: Ukuhlola ikhompuyutha yomuntu siqu ye-BYOD nokuhlukanisa isofthiwe yokuqapha umqashi¶

Landela lesi sihlahla sesinqumo ukuze uthole ukuthi yiliphi izinga lokuqapha elikhona emshinini wakho siqu nokuthi ungawuhlukanisa kanjani ngokuphepha.

flowchart TD
    A["Ukuqapha Umqashi Osolwayo noma Ogunyaziwe ('Bossware') Kukhompyutha yomuntu siqu ye-BYOD"] --> B{"Ingabe isofthiwe yomqashi isivele ifakiwe emshinini wakho siqu, noma ucelwa ukuba uyifake manje?"}
    B -->|"IYACWA UKUYIFAKA MANJE (Ukuvikela Kwangaphambi Kokufaka)"| C{"Iluphi uhlobo lwesofthiwe abacela ukuthi ulufake?"}
    C -->|"I-Interactive Time Tracker (I-Hubstaff, Udokotela Wesikhathi, i-Toggl, Uhlelo Lokusebenza Lwedeskithophu ye-Upwork)"| D["UNGAFAKI ku-OS ye-bare-metal host -> Dala iWindows Hyper-V / VMware / UTM Virtual Machine yamahhala (noma sebenzisa ikhompuyutha ephathekayo ezinikele engu-$200) -> Faka i-tracker ngaphakathi kwe-VM kuphela"]
    C -->|"I-Stealth Surveillance / MDM / Root Cert (Teramind, ActivTrak, Veriato, Intune MDM)"| E["UNGALOKOTHI ufake i-Stealth Agent noma i-MDM ku-PC yomuntu siqu -> Cela ikhompuyutha ephathekayo ekhishwe yinkampani noma ukungena ngemvume kwe-Azure Virtual Desktop (AVD / Citrix) -> Uma uphoqelelwe, sebenzisa ngokuqinile ikhompuyutha ephathekayo ehlukile yokusebenza kuphela"]
    B -->|"SEKUNGEYIFAKWE KU-PC YOMUNTU (I-Forensic Audit & Cleanup)"| F{"Iluphi Uhlelo Lokusebenza olusetshenziswa ikhompuyutha yakho?"}
    F -->|"Windows 11/10"| G["Qalisa Ukuhlolwa Kwe-Windows Kwezinyathelo Ezi-4: 1. Hlola 'Izilungiselelo -> Finyelela emsebenzini noma esikoleni' ku-MDM -> 2. Hlola i-Services.msc / Sysinternals Autoruns ukuze uthole ama-ejenti afihliwe -> 3. Hlola i-certmgr.msc ye-Root CA -> 4. Hlola ukuxhumana kwe-TCP okuphumayo"]
    F -->|"macOS (Apple Silicon / Intel)"| H["Qalisa Ukuhlolwa Kwe-macOS Okuyizinyathelo Ezi-4: 1. Hlola 'Izilungiselelo Zesistimu -> Okujwayelekile -> Ukuphathwa Kwedivayisi' (Amaphrofayili) -> 2. Hlola 'Ubumfihlo Nokuphepha -> Ukuqoshwa Kwesikrini Nokufinyeleleka' -> 3. Hlola /Library/LaunchDaemons -> 4. Hlola Izitifiketi ze-Keychain"]
    G --> I{"Ingabe uthole i-Stealth Monitoring Agent, Ukubhaliswa kwe-MDM, noma Isitifiketi Sezimpande Esijovwe?"}
    H --> I
    I -->|"YEBO: Itholwe I-Stealth Agent / Root CA / Intune MDM ku-PC yomuntu siqu"| J["OKUQUKETHWE: Hambisa umsebenzi ku-VM noma kwi-laptop yesibili -> Khipha i-MDM / Susa i-ejenti & I-Root CA ku-PC yomuntu siqu (noma i-OS yokuhlanza) -> Zungezisa zonke iziqinisekiso zebhange, i-imeyili, kanye nomphathi wephasiwedi ocingweni oluhlanzekile"]
    I -->|"CHA: I-tracker ebonakalayo kuphela (isb., Upwork / Hubstaff) efakiwe"| K["Hoxisa izimvume zayo Zokuqopha Isikrini / Ukufinyelela ngaphandle kwamahora okusebenza -> Yeka i-daemon yangemuva ku-Task Manager / Umsebenzi Monitor uma ungekho ewashini -> Yithuthele ku-VM"]

Ingxenye 1: Yini "i-Bossware" ethwebulayo ngempela (nokuthi ama-Stealth Agents acasha kanjani kusistimu yakho)¶

Ukuze uhlole ikhompuyutha yakho ngendlela efanele, udinga ukwazi amakhono obuchwepheshe aqondile kanye namagama enqubo afihliwe asetshenziswa izinkundla eziyisikhombisa ezivame kakhulu zokuqapha abasebenzi.

+-------------------------------------------------------------------------+
|  THE 5 SURVEILLANCE LAYERS OF ENTERPRISE "BOSSWARE" ON A BYOD HOST OS   |
|                                                                         |
|  [Layer 1: Visual]    -> Continuous Screen Recording (MP4) or periodic  |
|                          JPEG screenshots + OCR text indexing of screen |
|  [Layer 2: Input]     -> Kernel/API Keylogger (captures every password, |
|                          iMessage, & private email) + Clipboard history |
|  [Layer 3: Network]   -> Injected Trusted Root CA Certificate decrypts  |
|                          all HTTPS traffic (banking, medical portals)   |
|  [Layer 4: Hardware]  -> Silent Webcam snapshots, Microphone room audio,|
|                          GPS/Wi-Fi BSSID geolocation, & USB file copies |
|  [Layer 5: Telemetry] -> "Idle Score" (mouse jiggle detection), active  |
|                          window titles, & "Job Search / Attrition" AI   |
+-------------------------------------------------------------------------+

Izigxivizo zeminwe zobuchwepheshe Zezindawo Eziphezulu Eziyisi-7 Zokuqapha Izisebenzi¶

Ngisho noma isetshenziswe kokuthi "Imodi Yokufihla / Efihliwe" (lapho umthengisi efihla khona ngamabomu uhlelo lokusebenza ku-Windows Start Menu, ifolda yezicelo ze-macOS, kanye nethreyi yesistimu), yonke i-ejenti yokuqapha kufanele iqhube isevisi yangemuva, ilayishe umshayeli, futhi igcine uxhumano lwenethiwekhi oluphumayo olubethelwe kuseva yayo yokungenisa ifu:

Ingxenye 2: Isinyathelo ngesinyathelo Ukuhlolwa Kwe-Forensic ukuthola i-Bossware efihliwe kumuntu siqu Windows 11/10 I-PC¶

Hlola 1: I-Windows Audit "Finyelela Umsebenzi noma Isikole" Ukuze Ubhalise Ngengozi Yenkampani Ye-MDM¶

1. Vula IWindows Settings (Win + I) -> Accounts -> Access work or school.
2. Chofoza kunoma yiliphi ikheli le-imeyili lomsebenzi elisohlwini. Uma ubona Info inkinobho (hhayi nje Disconnect), ikhompuyutha yakho siqu ibhaliswe ku- Microsoft Intune / Corporate Mobile Device Management (MDM). Chofoza Info bese uskrolela phansi ukuze Areas managed by [Company Name] futhi Synced Policies / Installed Apps ukubona yonke inqubomgomo, isitifiketi, nesifaki esithulile se-MSI umqashi wakho asiphushele emshinini wakho siqu. Uma usuthuthele umsebenzi wakho emshinini Obonakalayo Engxenyeni yesi-4, chofoza Disconnect lapha ukuze uvule i-PC yakho yomuntu siqu.

Hlola 2: Hunt for Masked Stealth Services (scthost.exe, tsvchst.exe) Ukusebenzisa i-PowerShell ne-Sysinternals Autoruns¶

1. Vula PowerShell njengomlawuli (Win + X -> Terminal (Admin)) bese usebenzisa lo myalo ukuze ufake ohlwini yonke isevisi yasemuva esebenza eceleni engasayinwanga ngokwedijithali yi-Microsoft:

   Get-WmiObject Win32_Service | Where-Object { $_.State -eq 'Running' -and $_.PathName -notmatch 'C:\\Windows\\servicing|svchost\.exe' } | Select-Object Name, DisplayName, PathName | Format-Table -AutoSize
   

2. Bhekisisa noma iyiphi isevisi ephelayo C:\ProgramData\, C:\Windows\SysWOW64\scthost.exe (ActivTrak), tmagent noma tsvchst (Izwi), winikus (Veriato), noma wscservice (InterGuard).
3. Landa mahhala esemthethweni ye-Microsoft Sysinternals Autoruns64.exe, yigijime njengoMphathi, chofoza Options -> Hide Microsoft Entries, bese uhlola Services futhi Drivers amathebhu wanoma iyiphi i-keylogger eyimfihlo noma umshayeli wesihlungi sokuthwebula isikrini (tmfilter.sys, vfilter.sys).

Hlola 3: Hlola Isitolo Sesitifiketi Sezimpande Esethembekile se-Windows (certmgr.msc) Ye-HTTPS Decryption¶

Ukuze ubone ukuthi uthayipha ini ngaphakathi HTTPS amawebhusayithi (afana nebhange lakho siqu, i-Gmail, noma ingosi yokunakekelwa kwempilo), izindawo zokugada kanye nama-proxies ewebhu ezinkampani (Teramind, Zscaler, Netskope, Fortinet) faka inkambiso Indoda-Ephakathi (MITM) I-Root Certificate Authority ku-PC yakho:

1. Cindezela Win + R, thayipha certmgr.msc, bese ucindezela u-Enter.
2. Nweba Trusted Root Certification Authorities -> Certificates, Hlunga nge Issued By, futhi ubheke noma yisiphi isitifiketi esiqanjwe ngegama lakho Umqashi, Teramind, Zscaler Root CA, Veriato, Netskope, Fortinet, noma Securly.
3. Hlola kusiphequluli sakho se-Chrome noma se-Edge: vula https://www.google.com noma iwebhusayithi yebhange lakho, chofoza okuthi Shuna isithonjana kwesokunxele se-URL -> Connection is secure -> Certificate is valid. Uma isitifiketi se google.com noma ibhange lakho siqu lisho Issued By: [Your Employer Name] / Zscaler / Teramind Root CA, umqashi wakho ususa ukubhala futhi uhlola ithrafikhi yakho yomuntu siqu ye-HTTPS.

Ingxenye 3: Isinyathelo ngesinyathelo I-Forensic Audit ukuthola i-Bossware efihliwe ku-Mac yomuntu (macOS)¶

Hlola 1: Hlola Screen & System Audio Recording futhi Accessibility Izimvume¶

Ku-macOS, ngisho ne-daemon yezinga lempande ayikwazi ukurekhoda buthule isikrini sakho noma ingene kokhiye bomhlaba kuzo zonke ezinye izinhlelo zokusebenza ngaphandle uma inikezwe imvume kumafasitelana Obumfihlo amabili:

1. Vula System Settings -> Privacy & Security -> Screen & System Audio Recording. Uma ubona scthost, Teramind, ActivTrak, Hubstaff, Time Doctor, sfproc, Veriato, noma umsizi ongaziwa ovulwe lapha, lolo hlelo lokusebenza lunemvume esebenzayo yokurekhoda isikrini sakho se-Mac. Iguqule okuthi VALE ngokushesha bese uchofoza inkinobho - inkinobho ukuze uyisuse.
2. Vula Accessibility futhi Input Monitoring ngaphakathi Privacy & Security. Noma yiluphi uhlelo lokusebenza lunikeziwe Input Monitoring noma Accessibility imvume ingakwazi **ukufunda konke ukuchofoza kokhiye okuthayiphayo ohlelweni lokusebenza **. Khubaza futhi ususe noma iyiphi i-daemon engaziwa noma isilandeleli somqashi kuzo zombili izinhlu.

Bheka i-2: Bheka i-macOS Device Management (MDM Profiles) futhi Efihliwe LaunchDaemons¶

1. Vula System Settings -> General -> Device Management (noma System Preferences -> Profiles kuma-macOS amadala). Ku-MacBook yomuntu siqu, i Device Management ingxenye kufanele ingabi nalutho ngokuphelele noma ingabi khona. Uma ubona Iphrofayili Yokuphatha efakwe umqashi wakho (Jamf, Kandji, Mosyle, Microsoft Intune, Rippling, Drata, Vanta), chofoza kuyo ukuze uhlole ukuthi yiziphi izitifiketi zezimpande, izindawo zokudlula zobumfihlo ze-TCC, nama-ejenti angemuva ewaphoqelela ku-Mac yakho siqu.
2. Vula Itheminali (Cmd + Space -> Terminal) bese ugijima ls -la /Library/LaunchDaemons /Library/LaunchAgents ukuze ufake kuhlu wonke amadamoni angemuva ezimpande zenkampani yangaphandle kanye nama-ejenti okuqalisa abasebenzisi afakwe ku-Mac yakho. Bheka noma yikuphi .plist ifayela eliqukethe teramind, activtrak, scthost, veriato, hubstaff, timedoctor, workpuls, insightful, noma awarenesstech.
3. Futhi vula Ukufinyelela kwe-Keychain (Cmd + Space -> Keychain Access) -> System Roots futhi System keychains bese uhlola Certificates ithebhu yanoma iyiphi i-Root CA yangokwezifiso efakwe ukuze isuse ukubhala ngemfihlo kwe-Safari yakho yomuntu siqu kanye nethrafikhi ye-Chrome HTTPS.

Ingxenye 4: Ukuhlukanisa Isoftware Yomqashi Ngaphakathi Komshini Obonakalayo (VM) noma I-Hardware Ezinikele¶

Uma umsebenzi wakho okude noma inkontileka ozisebenzelayo idinga ukuthi usebenze Hubstaff, Time Doctor, Upwork Desktop App, ActivTrak, Teramind, noma i-VPN yebhizinisi ngesikhathi somsebenzi, ungalokothi uyifake ohlelweni lwakho lokusebenza lomsingathi wakho.

+----------------------------------------------------------------------+
|  HOW VIRTUAL MACHINE (VM) ISOLATION CONTAINERS EMPLOYER BOSSWARE     |
|                                                                      |
|  +----------------------------------------------------------------+  |
|  | YOUR PERSONAL HOST COMPUTER (Windows 11 or macOS)              |  |
|  | * Personal Chrome (Banking, Medical, Personal Email, Taxes)    |  |
|  | * Personal Files, Photos, 1Password Vault, & Webcam            |  |
|  |   [ 100% INVISIBLE TO EMPLOYER ACROSS HYPERVISOR BOUNDARY ]    |  |
|  |   +--------------------------------------------------------+   |  |
|  |   | ISOLATED WORK VIRTUAL MACHINE (Hyper-V / UTM / VMware) |   |  |
|  |   | * Employer Bossware (Hubstaff / Teramind / ActivTrak)  |   |  |
|  |   | * Corporate VPN + Work Browser + Slack + VS Code       |   |  |
|  |   | * Bossware Can ONLY Screenshot & Log Inside This VM    |   |  |
|  |   +--------------------------------------------------------+   |  |
|  +----------------------------------------------------------------+  |
+----------------------------------------------------------------------+

Inketho 1: Umshini Obonakalayo Wamahhala Ohlukanisiwe (Hyper-V / VMware Workstation / UTM)¶

Ngokwenza isivakashi Umshini Obonakalayo ekhompyutheni yakho futhi ufake yonke isofthiwe yomqashi ngokuqinile ngaphakathi kwe-VM:

• Ukuhlukaniswa kwesikrini sokuthwebula: Nini Hubstaff noma Teramind ithatha isithombe-skrini ngaphakathi kwe-VM, ithwebula i-adaptha yokubonisa kuphela ye-VM, kuyilapho i-akhawunti yakho yasebhange yomuntu siqu noma imonitha yesibili ku-OS yomsingathi ihlala ingabonakali ngamaphesenti angu-100 kuwo wonke umngcele we-hypervisor.
• I-Keylogger & Clipboard Isolation: Khubaza Ibhodi yokunamathisela eyabiwe (Bidirectional Clipboard: Off) kanye nokuthi Amafolda Abelwe kuzilungiselelo zakho ze-VM ukuze izinkinobho ezithayiphiwe kusiphequluli sakho somuntu siqu se-OS esisingethe zingalokothi zifake ibhafa yekhibhodi ye-USB ebonakalayo ye-VM.
• Ukuhlukaniswa Kwesitifiketi Senethiwekhi Ne-HTTPS: Noma iyiphi i-VPN yebhizinisi (Zscaler, Cisco AnyConnect) noma i-MITM Root Certificate efakwe ngaphakathi kwe-VM ithinta ithrafikhi yenethiwekhi kuphela ngaphakathi kwe-VM, okushiya uxhumano lwe-inthanethi oluqondile lwekhompuyutha yakho yokuhlala lungathintwa.
• Instant 5:00 PM Hard Off-Switch: Uma uqeda umsebenzi ngo-5:00 PM, chofoza Shut Down Emshinini Obonakalayo ukuze isevisi yangemuva yomqashi iphele ku-RAM uze uqalise i-VM kusasa ekuseni.

Indlela yesi-2: Abazinikezele $200 to $300 I-Laptop Yomsebenzi Elungisiwe + I-Hardware KVM Switch¶

Uma i-ejenti yebhizinisi ihlola CPUID noma izintambo ze-BIOS (VMware, VirtualBox, Hyper-V) futhi ivimbe imishini ebonakalayo, thenga evuselelwe kabusha ehlanzekile I-Lenovo ThinkPad T14 noma iDell Latitude ($180 to $250) ezinikezelwe amaphesenti angu-100 ukusebenza, xhuma womabili amakhompyutha kuziqaphi zedeski lakho nekhibhodi usebenzisa $35 I-HDMI noma i-DisplayPort Hardware KVM Switch, futhi uxhume ikhompuyutha ephathekayo yomsebenzi kumzila wakho wasekhaya Inethiwekhi Ye-Wi-Fi Yesivakashi Esodwa ukuze ingakwazi ukuskena amadivayisi akho e-LAN yasekhaya.

Izinombolo eziphuthumayo zesifunda kanye nezinqubo ze-ejensi (imithetho yokugada ye-BYOD ne-wiretap)¶

Ukufaka ngokuyimfihlo ama-keylogger, ukuthwebula ikhamera yewebhu, noma ukugadwa okungu-24/7 ungekho emsebenzini ku- isisebenzi esiphethwe ngasese (BYOD) ikhompuyutha ngaphandle kokudalula okusobala yephula i-wiretap, ukuvikelwa kwedatha, nezimiso zabasebenzi ezindaweni eziningi:

• I-European Union ne-United Kingdom (EU/UK GDPR, ECHR Article 8, & UK ICO Employment Practices Code): Dayela u-112* (EU) noma 999 (UK) ngezimo eziphuthumayo ezingokomzimba. Ngaphansi kokuthi Izindatshana ze-GDPR 5, 6, no-35 kanye nesiqondiso esivela ku-Ihhovisi Likakhomishana Wolwazi Wase-UK (ICO) (Isiqondiso Sezisebenzi Zokuqapha, 2023), ukuqapha okuyimfihlo kwabasebenzi cishe akuthetheleleki ngokomthetho, futhi ukungena ukhiye okuqhubekayo, ukuthwebula ikhamera yewebhu, noma ukuqapha amahora angekho emsebenzini wedivayisi ye-BYOD kanye nedivayisi yabo yangasese ye-BYOD kanye ne-GDPR Ukuhlolwa kokunciphisa idatha. Abasebenzi bangafaka isikhalazo sokulawula ne-UK ICO (ico.org.uk)* noma izwe labo EU Data Protection Authority (CNIL, BfDI, AEPD, DPC).
• I-United States (ECPA, CFAA, kanye Nemithetho Yezaziso Zokuqapha Izisebenzi Zombuso): Shayela u-911* ngezimo eziphuthumayo zomzimba. Umthetho Wobumfihlo Bezokuxhumana Ngogesi (ECPA) kanye noMthetho Wokukhwabanisa Nokuhlukunyezwa Kwekhompyutha (CFAA) ilawula ukungenela okungagunyaziwe, kanye Nebhodi Likazwelonke Lezobudlelwano Kwabasebenzi (NLRB I-Memo 23-02) iyakwenqabela ukugada nge-elekthronikhi okuvikela umsebenzi ohlangene. ** ENew York (NY Civil Rights Law § 52-c)**, Connecticut (Conn. Gen. Stat. § 31-48d), Delaware (19 Del. C. § 705), kanye ne-California (CCPA / CPRA)* idinga ngokuqinile ukuthi abaqashi banikeze isaziso esibhaliwe sangaphambilini ngaphambi kokuzibandakanya ekuqapheni nge-elekthronikhi.
• I-Canada, Australia, ne-New Zealand: Ibuswa Umthetho we-Ontario Wokusebenzela Abasebenzi (odinga Inqubomgomo ebhaliwe Yokuqapha I-Electronic yabaqashi abanabasebenzi abangu-25+), Quebec Law 25, kanye ne-New South Wales Workplace Surveillance Act 2005* (idinga isaziso esibhaliwe ngaphambi kwezinsuku eziyi-14). Bheka izinombolo eziphuthumayo kuzo zonke izifunda.

Imibuzo evame ukubuzwa¶

Ingabe umqashi wami angakwazi ukubona engikwenzayo kukhompuyutha yami yomuntu siqu noma ocingweni ngenxa nje yokuthi ixhumeke ku-Wi-Fi yami yasekhaya kuyilapho ikhompuyutha yami ephathekayo yomsebenzi nayo ikuyo le-Wi-Fi yasekhaya?¶

Cha, inqobo nje uma isofthiwe yokuqapha yomqashi wakho kanye ne-VPN kufakwe kuphela kukhompuyutha ephathekayo ekhishwe yinkampani hhayi kukhompuyutha yakho yomuntu siqu noma ocingweni. Ikhompuyutha ephathekayo yebhizinisi exhunywe ku-Wi-Fi yasekhaya isebenzisa umhubhe we-VPN obethelwe emuva ehhovisi lenkampani futhi ayikwazi ukususa ukubhala ngekhodi noma ukubona ukuphequlula kwewebhu ye-HTTPS, ukubhanga, noma izinhlelo zokusebenza ezisebenza kukhompuyutha yakho ephathekayo ehlukene ehlukene noma i-iPhone kumzila ofanayo we-Wi-Fi yasekhaya (nakuba ngokuhlanzeka kwenethiwekhi okungcono kakhulu, xhuma ikhompuyutha ephathekayo yakho yokusebenza kunethiwekhi ye-Wi-Fi yesivakashi somzila wakho wasekhaya).

Ingabe ukungena enkampanini yami i-Slack, i-Gmail, noma i-Microsoft Teams ngaphakathi kwethebhu yesiphequluli sewebhu kuvumela umqashi wami ukuthi abone amanye amathebhu esiphequluli sami noma athathe izithombe-skrini zedeskithophu yami?¶

Cha. Ngoba iziphequluli zewebhu zesimanje zisebenzisa i-Same-Origin Sandbox eqinile, ikhasi lewebhu livuleka kuthebhu eyodwa yesiphequluli (njenge `app.slack.com` noma `outlook.office.com`) inqatshelwe injini yesiphequluli ekufundeni ama-URL, amakhukhi, noma amaphikseli esikrini amanye amathebhu esiphequluli sakho noma ideskithophu yakho, ngaphandle uma ungena ngemvume Esipheqululini Se-Chrome ngokwaso Ngephrofayela Yomsebenzi Ophethwe bese uchofoza okuthi "Vula Ukuvumelanisa" (okuvumela Umphathi We-Google Workspace womqashi wakho ukuthi asunduze Izandiso ze-Chrome kuleyo phrofayela yesiphequluli). Njalo vula izinhlelo zokusebenza zewebhu yomsebenzi ngaphakathi kwephrofayela ehlukile yesiphequluli engavumelaniswanga enezandiso zebhizinisi eziyiziro.

Ingabe i-Hubstaff, Udokotela Wesikhathi, noma i-ActivTrak ingathola uma ngisebenzisa umshini noma i-USB "Mouse Jiggler"?¶

Yebo, izinguqulo zesimanje ze-ActivTrak, Teramind, Time Doctor, kanye ne-Hubstaff zisebenzisa ama-heuristics okokufaka okufunda ngomshini aqeqeshelwe ukuhlaba umkhosi ama-jigglers omshini kanye ne-USB. Amasudi esimanje ahlaziya i-entropy yama-trajectories egundane (ukuhlaba umkhosi okuphindaphindwayo kwephikiseli elingu-1 oscillation, amaluphu ayindilinga anesivinini esingashintshi, noma izikhathi ezingu-45 zemizuzu yokunyakaza kwegundane okuqhubekayo okuhambisana nokuchofoza kwegundane elinguziro, izinguquko zokugxila kwewindi elinguziro, nokokufaka okuyiziro kwekhibhodi) bese uthumela Isexwayiso Somphathi We-Jiggler Igundane elizenzakalelayo.

Uma ngisebenzisa i-Windows PC yomuntu siqu enama-akhawunti amabili omsebenzisi (owodwa "Ukungena ngemvume" kwe-Windows neyodwa "yomuntu siqu" yokungena kwe-Windows), ingabe lokho kumisa i-Bossware efakwe ekungeneni komsebenzi ukuze ihlole ukungena kwami ​​Komuntu Siqu?¶

Cha, ama-akhawunti ahlukene weWindows noma we-macOS kuhlelo lokusebenza olulodwa awahlukanisi ama-ejenti okuqapha izinga lesistimu (`Teramind`, `ActivTrak`, `Veriato`, `InterGuard`, `CrowdStrike`, `Intune MDM`). Ngoba lawo ma-ejenti afaka njenge `NT AUTHORITY\SYSTEM` amasevisi, izishayeli zokuhlunga i-kernel, noma `/Library/LaunchDaemons` Ngezitifiketi Zezimpande Ezithenjwayo ezigcwele umshini wonke, zisebenza kulo lonke uhlelo lokusebenza kungakhathaliseki ukuthi iyiphi i-akhawunti yomsebenzisi wasendaweni engene kuyo. Umshini Obonakalayo Kuphela (`Hyper-V / VMware / UTM`), idrayivu ebethelwe ehlukene ye-Dual-Boot, noma ikhompuyutha ephathekayo ephathekayo ehlukile inikeza ukuhlukaniswa kwangempela.

Ingabe isofthiwe yokuqapha yomqashi ingakwazi ukubona amawebhusayithi engiwavakashela ku-Chrome "Imodi ye-Incognito" noma "Ukuphequlula Okuyimfihlo" kwe-Safari?¶

Yebo, ngamaphesenti angu-100. Imodi ye-Chrome Incognito kanye Nokuphequlula Okuyimfihlo kwe-Safari kuvimbela kuphela isiphequluli ekulondolozeni umlando namakhukhi kusigcinalwazi sakho sasendaweni ngemva kokuvala iwindi; abenzi lutho ukufihla isikrini sakho, izinkinobho zakho, ukubheka i-DNS yakho, noma ithrafikhi yakho ye-HTTPS kumenzeli wokuqapha umsebenzi (`Teramind`, `ActivTrak`, `InterGuard`, `Veriato`) noma i-Corporate Root CA esebenza ohlelweni olufanayo lokusebenza.

Umqashi wami ungicele ukuthi ngifake i-Microsoft Authenticator noma i-Okta Verify 2FA app ku-iPhone yami yomuntu siqu noma ifoni ye-Android. Ingabe lolo hlelo lokusebenza lungahlola izithombe zami siqu, imibhalo, noma ukuphequlula iwebhu?¶

Cha. Uhlelo lokusebenza oluzimele lwe-Multi-Factor Authentication (MFA) code generator app (**Microsoft Authenticator**, **Okta Verify**, **Duo Mobile**, **I-Google Authenticator**) efakwe kusukela ku-Apple App Store noma i-Google Play Store isebenza ngaphakathi kwe-sandbox yohlelo lokusebenza oluqinile futhi alikwazi ukufinyelela kumilayezo yakho siqu yombhalo, izithombe, omunye umlando wokuphequlula. Gwema kuphela ukufaka Ukuphathwa Kwedivayisi Yeselula ngokugcwele (`MDM`) Iphrofayela Yokubhaliswa Kwedivayisi kufoni yomuntu siqu uma icela ukulawulwa kwedivayisi okuyizimpande nezimvume zesitifiketi.

Iziqondiso ezihlobene¶

• Ukuphepha komsebenzi okude kwesimo esiphuthumayo nobumfihlo bedatha
• Ukwehluleka kwe-VPN ukubulala-switch noma inkampani zero-trust Zscaler / CrowdStrike Falcon bootloop quarantine
• Ukwabelana ngesikrini ngengozi kweshidi lomholo eliyimfihlo, umphathi wephasiwedi, noma uhlu lokudilizwa ku-Zoom noma Amathimba
• I-Digital nomad noma isisebenzi esikude esisebenza sisuka ezweni elingagunyaziwe: Ifulegi le-IP nokukhiya kokulawula ukuthekelisa
• Indawo yokusebenza ndawonye, ​​ihhotela, noma isikhumulo sezindiza i-USB-jacking, ukuntweza ehlombe, nokuvikela i-DMA ye-cold boot

Imithombo neziqondiso ezisemthethweni¶

• Ihhovisi Likakhomishana Wolwazi Lase-UK (ICO): Imikhuba Yokuqashwa Nokuvikelwa Kwedatha: Ukuqapha Isiqondiso Sezisebenzi (2023) (Imikhawulo eqinile yokuqapha okuyimfihlo, ukuthwebula ukhiye/ikhamera yewebhu okuqhubekayo, kanye nezimfuneko zokulinganisa kumadivayisi e-BYOD ezindlini ezizimele ngaphansi kwe-UK GDPR).
• Ibhodi Lokuvikelwa Kwedatha YaseYurophu (EDPB) / I-Article 29 Working Party: Umbono 2/2017 Ngokucutshungulwa Kwedatha Emsebenzini (WP 249) (Ukwenqatshelwa okucacile ngokulandela umkhondo kwabasebenzi okungalingani kanye nokwehlukaniswa okuyisibopho kwezikhala eziyimfihlo ze-BYOD ngaphansi kwe-EU GDPR).
• I-Consumer Financial Protection Bureau (CFPB) kanye Nebhodi Likazwelonke Lezobudlelwano Kwabasebenzi (NLRB): CFPB Circular 2024-06 (Amadokhumenti Angemuva kanye ne-Algorithmic Scores Yabasebenzi) kanye Ne-NLRB General Counsel Memo GC 23-02 (Ukuphathwa Kwe-elekthronikhi kanye Nokubhekwa Kwe-algorithmic).
• I-Electronic Frontier Foundation (EFF): Ngaphakathi kwe-Bossware: Ukuhlaziywa Kobuchwepheshe Kwesofthiwe Yokuqapha Abasebenzi, Ama-Keylogger, kanye Ne-TLS Root Certificate Interception.
• I-NIST (Isikhungo Sikazwelonke Samazinga Nobuchwepheshe): NIST SP 800-114 Rev. 1 (Umhlahlandlela Womsebenzisi ku-Telework futhi Ulethe Eyakho Idivayisi BYOD Security) & NIST SP 800-46 Rev. 2.