My employer had us install a software called “fleet osquery”, they said it’s a first step toward inventory management of all the devices for IT. I guess it also adds a layer of safety by making sure nobody installs any dangerous software/malware on their work devices.
Looking at the docs , it looks like this can be used to remotely execute scripts on my laptop, should I be worried about my employer spying on me during work hours ? Or logging information about what I’m doing ?
Work laptop of course, if it was my personal device I wouldn’t even care what they say. I think I’m going to isolate my work laptop from my home network now though.
This is always a good idea. Your work IT department doesn’t trust you, and you shouldn’t trust them.
Hey I don’t know your technical capability, but Steve Gibson pointed out the lowest knowledge way to get an isolated network just by buying two more cheap NAT routers. Your current router stays routing internet, but in LAN1 you plug in one of the new routers, let’s call it your home network, and LAN2 of your internet router plug in the other router and call it insecure. Plug in your WiFi access points into home and your devices. Plug in work laptop and other IoT to insecure. Home won’t be able to talk to insecure, and insecure can’t talk to home. This is all because of NAT. Just make sure the home network range is a different range to the insecure.
Otherwise it’s just a vlan on router and switches and access points with no firewall rules that allow INSECURE to HOME.
You might already know all this in which case never mind!
https://www.grc.com/nat/nat.htm
Thanks, I did know that but I’m glad it is here for anyone else who may need to know.