How Google Spies on Its Employees (theinformation.com) 32
At Google, a seemingly innocuous action can earn an employee the attention of the company's corporate security department. The Information: For example, when Google wants to find out who has been accessing or leaking sensitive corporate information, the company often homes in on employees who are thinking about leaving it. In the past, its security teams have flagged employees who search an internal website listing the cost of COBRA health insurance -- which gives workers a way to continue their coverage after leaving their employer -- for further investigation, according to a person with direct knowledge of its tactics. Employees who draft resignation letters or seek out internal checklists that help workers plan their departures from Google have also faced similar scrutiny, the person said. It has even looked at who has taken screenshots on work devices while running encrypted messaging services at the same time, according to current and former employees with knowledge of the practices. Bulk transfers of data onto USB storage devices and use of third-party online storage services can also raise eyebrows among Google's security staff.
Re: CORBA (Score:3)
I know right... need some SOAP to wash it off and take a Rest with Jason.
Re: (Score:2)
so it's like the 90's again? (Score:2, Redundant)
Many stories of people giving their two weeks and being fired right away and given their two week checks shortly after. or being refused access to company info.
If someone is leaving of course you want limit access to sensitive data. kids are so naive these days
Re: (Score:2)
Of course?
That's total bullshit no you don't. I don't think I've ever left a job without months of notice. What are they going to do? Give me a free 3 month holiday and no chance to hand over my work?
Places with actual important secrets covered by security clearance don't pull this bullshit.
Re: (Score:2)
Re: (Score:2)
Things have changed a lot in the workplace depending on where you work. Even in places with security clearances, I've known guys that were told to hand over their CAC and were then escorted off base with no warning (It was a HUGE fuckup). It really boils down to how much you know, and how well you're liked.
So for me it depends on where I'm working. I worked for a place that I knew wouldn't give me 2 weeks when firing me, so I showed up in the AM, handed HR my gear and a sheet full of passwords. I bailed w
Re: (Score:2)
Re: (Score:2)
what i want to know is why we need to be logged in to post, but can still post anonymously.
If slashdot removed the post anonymously stuff, we would be able to recognise the shitposters/propagandists.
seems the system is being setup to allow it.
Time to screw with the security types (Score:5, Funny)
Search of COBRA... but then GI Joe.
Download massive amounts of linux distributions at work and load them onto your flash drives.
Take screenshots of puppies while the encrypted app is in the background.
Talk about leaving and then go out for lunch.
If only security types had senses of humor.
Now that's what I call Social Justice! (Score:5, Insightful)
Given that Google's employees are spying on everyone else, color me unsympathetic. What goes around, comes around.
All very common (Score:5, Insightful)
Everything described in this post is common at basically any Fortune 500 company with a capable cybersecurity department. This is standard risk analysis.
Re: (Score:3)
Bulk transfers of data onto USB storage devices and use of third-party online storage services can also raise eyebrows among Google's security staff.
We'll never have another Snowden again.
Re:All very common (Score:5, Insightful)
yeah we will - there will always be staff at the top of the security tree who know how to get around it.
Re:All very common (Score:5, Insightful)
Sure, if you're writing resignation letters, searching for COBRA info, or looking at job boards ON COMPANY COMPUTERS, the company is perfectly in the right to start checking you out under the microscope. THIS is why you do that kind of stuff ON YOUR EQUIPMENT, AT HOME or somewhere else besides work...
Re: (Score:2)
Everything, EXCEPT the COBRA searching, should be fair game.
Information on COBRA is on your internal HR site/portal and ranks up with other benefits related items that organizations aren't supposed to act upon.
Yes, HR is to act in the benefit of the employer, not the employee - but there are limits dictated by Dept. of Labor (hiring/firing), SEC (401K), ERISA (Pensions & health plans), etc. Basically, the company shouldn't act on an employee's attempt to understand their benefit package, or decisions m
Re: (Score:1)
Re:All very common (Score:4, Funny)
Re: (Score:2)
They can almost certainly identify an employee searching for COBRA information, irrespective of which computer they use.
Re:All very common (Score:5, Insightful)
Everything described in this post is common at basically any Fortune 500 company with a capable cybersecurity department. This is standard risk analysis.
Indeed, and Google employees are regularly reminded that they have no expectation of privacy on corporate computers. My corporate phone (I work for Google) says "This device belongs to your organization" on the lockscreen and regularly pops up a notification with a more thorough explanation that my device and everything on it may be monitored.
Re: (Score:2)
Indeed, and Google employees are regularly reminded that they have no expectation of privacy on corporate computers. My corporate phone (I work for Google) says "This device belongs to your organization" on the lockscreen and regularly pops up a notification with a more thorough explanation that my device and everything on it may be monitored.
What are you expected to use the phone for (and when)? That level of monitoring would make me think hard about carrying the device and using it outside of business hours.
I use it for everything. I have no concerns about it.
A lot of this is fairly common (Score:5, Insightful)
The screenshot part is kind of creepy but encrypted messaging apps would raise security flags regardless of a person leaving or not. Most of these actiities, save the Cobra search, are not things I'd be doing on a work computer though. In a world with ubiquitous smart phones with data capabilities, it doesn't make much sense to use your work laptop which is tied to an acceptable use policy and all sorts of monitoring / security limitations.
Re: (Score:2)
Most of these actiities, save the Cobra search, are not things I'd be doing on a work computer though.
For some, they may only have the work issued computer, and even the work issued phone. The over mixing of work/life is common for a certain generation of employee, and it can easily come back to bite them at some future point.
Accessing the "Sharks with lasers" file is a no-no (Score:2)