Printable View
Thread:
Search AO for Slarty's GenControl and d/l it.
Wait till an offender is doing the "dirty deed" and connect to their box. When you can see what they are doing, (without them knowing), do a:-
net send offending_computer Should I send the logs of this to your supervisor or have you some more surfing to do yet?
You'd be surprised how quickly they can close all those pr0n pop-ups..... :D
My famous words to our last employee
"you can delete, but you can't cover up" (well not really, but I thought it sounded good enough to post :p)
bottomline:
Just don't try to hide anything, theres more tools out there than you can imagine that records your internet activity, takes pictures of your desktop every 30 seconds, un-deleted temporary internet cache and cookies, remot control of your computer.
Trust me as we just fired one employee who thought she had hidden her tracks viewing sites against our policy, but a couple old surf throught the gateway logs, and a little looksie through here deleted cookies and voila!!!
this is actually really funny, shouldn't this thread be moved? :DQuote:
........ Just walked into the room so I pressed "Submit"....... ROFLMAO......
WebSense sees this too. We have users who constantly try to beat the system only to be busted before they get to search for their beloved pr0n.Quote:
Perhaps there is a good web anonymizer site out there that could cover his tracks, that would keep the admin from knowing the names of the sites he visits if all he logs is IPs, but he would have to find one that uses SSL or the admin could sniff the data and see what kind of content it is (and what site it was really going to).
:)
Question horse, if you have "users" that constantly try to beat the system, why are they still users ? ;)Quote:
Originally posted here by thehorse13
WebSense sees this too. We have users who try to beat the system only to be busted before they get to search for their beloved pr0n.:)
Cheers:
Not that easy sometime. :) Especially when no formal policy exists and they perfrom some critical function. Like it or not sometime you have to tolerate crap, assuming they aren't breaking a law.Quote:
constantly try to beat the system, why are they still users
If you leave my network and ssl is detected going to a site not on the A list, you go to the top of the list. Same with PGP, PGP emails are actually quarentined and they DO NOT leave the network except to specific addresses.Quote:
he would have to find one that uses SSL or the admin could sniff the data
Horse really doesn't strike me as the type to not have all the right policies in place. ;)Quote:
Cheers:
Me either, so he is being nice and warning them?
;)
I have a friend that worked in a small office with an admin that apparently didn't use any method for checking to see where people had surfed other than looking through files on the computer - so everyone would just delete cookies and history and stuff. The one day the admin found an uneraser utility where he could run it and bring up all the goodies that he wanted to see. My friend still didn't get caught tho b/c he was smart enough to use a real eraser that would make it impossible to bring up deleted files. If the admin got wise and used *any* kind of surf-logging program then everyone in that office would be screwed - including my friend.
I'd suggest that anyone in a business environment that allow employees to access the internet monitor everything, have policies in place stating what is acceptable use and what isn't along with the standard warning that states:-
Disciplinary action up to and including termination
or they are asking to be sued by an employee for creating a "hostile work environment" at a minimum.... The penalties the courts manage to come up with will break a lot of small businesses....
Is the hard work you put into you company worth the crap one money grabbing little minion can cause you compared to the relatively small cost of software that can report the activity and the time it takes to take a quick look through it every week?