this post was submitted on 30 Jun 2024
2250 points (99.4% liked)

Malicious Compliance

19503 readers
1 users here now

People conforming to the letter, but not the spirit, of a request. For now, this includes text posts, images, videos and links. Please ensure that the “malicious compliance” aspect is apparent - if you’re making a text post, be sure to explain this part; if it’s an image/video/link, use the “Body” field to elaborate.

======

======

Also check out the following communities:

[email protected] [email protected]

founded 1 year ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 8 points 4 months ago* (last edited 4 months ago) (1 children)

I would also never let corporate IT manage a device, e. g. a laptop connected to my private network at home.

If you ever must, buy a new laptop. And use it on a guest wifi network. Use it as you would a work laptop, nothing personal on it

[–] [email protected] 5 points 4 months ago (1 children)

No, have the company buy a laptop, and if necessary, also have them buy the hardware that allows for proper network separation, if not already available.

Just another thing to be aware of.

[–] [email protected] 2 points 4 months ago (1 children)

Not all companies will do that

[–] [email protected] 4 points 4 months ago

Surely not. But also many employees won't even ask for it, and change will only happen if people care about it.

So first, raise awareness, and naturally, implement those things at any companies you manage or own.

I'm not saying quit your job and become homeless if your employer won't corporate with you on the issue. Everyone should think about how this could potentially affect them and what they can do within the constraints they operate in, though.

As someone else in this thread said, a separate (VLAN, guest) network for work devices, reasonable access rules etc. can go a long way. Eventually, I would like this to become unacceptable though.