Somebody's Watching Me..

[MMock]

I am using VPN to connect to a client's network.

He just happened to mention that they video-capture everything vendors do on their network, in case they try something malicious.

I don't really care, but I always thought it was illegal to, for example, tape-record a conversation you were having with someone unless you asked their permission. Isn't this the same thing? Perhaps management knew this when they signed a contract, but I was a bit taken aback that I am just finding out.

[techgnome]

video capture? How do you video capture network traffic?

Anyways, yes typically most corporate networks have some kind of network monitoring tool. I think they tend to be more passive than active. using black lists, word filters, IP filters, things like that.

I know when I login into my work computer, I have to click that I acknowledge that I could be monitored and that I consent to it.

As for tape-recording a conversation... it depends on the circumstances. I mean a cop can record a conversation (wearing a wire) w/o notifying the other party (that would defeat the purpose) but a telemarketer has to tell you that the conversation may be recorded. On the other hand, id I'm having lunch w/ someone in public, there's no grounds for privacy and so the conversation could in theory be recorded by anyone. And that's why the law isn't black or white, but about 15 different shades of grey.

-tg

[MMock]

Oh, it's not network traffic. It's what I'm opening, copying, etc. when I'm on their machine.

I thought if you had an answering machine and wanted to record a caller, you had to get their permission first? It's just something I sort of remember.

[techgnome]

Oh... you're using remote desktop against a machine on their network.... interesting. Never seen a company go to that length before. Technically, since you are using their equipment, I suppose if they want to monitory what someone is doing on it, be it someone sitting there staring at the screen, or some automated capture process, that's really their perogative.

-tg

[MMock]

Creepy, but I guess it's like having a cleaning woman come do your housework, or a nanny taking care of your children, and you've got the web cam turned on...

[szlamany]

I thought if you had an answering machine and wanted to record a caller, you had to get their permission first? It's just something I sort of remember.

Each state has different laws on this subject - some allow for recording a phone call as long as ONE PERSON on the phone knows it's being done.

But auditing of user activity at a place of work - on a computer network - I would EXPECT that to be happening at every place I connect to.

[szlamany]

I remember back in the mid-80's - back in the "dumb" terminal VT100 days - we had one programmer that made like no progress every day at work...

The VT100's had a VIDEO out port - and we actually ran a wire from his desk to a television screen and watched him get into the code editor and simply scroll up and scroll down and scroll up for hours and hours and do absolutely nothing.

It was the person I ever had to fire...

[MMock]

What kind of a person could even do that without going nuts?!

[szlamany]

What kind of a person could even do that without going nuts?!

Guy thought he was promised to be a "partner" back when the firm started (couple years before I got there) and then didn't want to be working for me - oh well - he got exactly what he wanted...

[Shaggy Hiker]

but about 15 different shades of grey.

-tg

More like 50, actually, since every state can be different.

[FunkyDexter]

It's not illegal in the UK and you can record anyone you like, with or without their consent. The complexity is in how you use that recording.

Any recording you make can only be for your own use and it cannot be passed to a third party. So a company can record your conversation without bothering to tell you as long as they're only using it for internal use (monitoring, training etc). The reason they do tell you is that Offcom will have stipulated doing so as part of their licence to trade. Similarly, you are absolutely entitled to record your conversation with them... but you can't post it on you tube and it's unlikely to be usable as evidence in any legal action.

[SJWhiteley]

As already noted, laws are very different in each state (or country, etc.).

However, it is technically possible to record screens, and since it is a 'work device', there's no real stipulation that they cannot do it (assuming that equipment is in the US, of course).

Things can get a bit sticky when you start doing 'personal' things on a 'work' system (for example, checking your bank account to see if work paid you on time). An individual would have a reasonable expectation of privacy of such data, regardless of network monitoring or otherwise (extreme measures, possibly illegal, would need to be taken to decrypt the data stream negotiated between the client system and bank system).

I would agree that taping a conversation and recording a screen are very similar. But also I'm sure there are notices posted during login, for example, that ones computer activity 'may be recorded for quality purposes', which would cover almost every states laws regarding notification. Note that 'similar' and 'same' are not equivalent in the eyes of the law, however. While many find the wording of laws and edicts very dry and incomprehensible, they are (in the main) very clear and explicit in their wording.

A lot (some?) states have a 'single party notification', such that as long as one party consents to recording then it is perfectly legal. Also, In the US, the act of posting [such recording] is not illegal, does not violate any laws, slander and libel laws not withstanding.