points by WithinReason 4 days ago | 0 comments
wouldn't a VPN (on your phone or laptop) solve this?
[–] Daneel_ 4 days ago
[–] wolvoleo 4 days ago
What I do with my work laptop when I travel is just booting Linux from a usb stick. Then I can do whatever I want and they don't even know about it.
[–] Daneel_ 4 days ago
The same orgs I mentioned usually have their BIOS locked down with no booting from removable media. I know mine is like that.
[–] wolvoleo 4 days ago
Ah I see, we don't. I think they trust on bitlocker for that (and we have bitlocker with preboot PIN and TPM). Our BIOS doesn't even have a password.
Also we do need that option to reimage, we have a custom image that we install on each laptop. We don't use windows autopilot for reasons :P
[–] phil-martin 4 days ago
It would, but installing random vpn software on IT controlled hardware is a very much against policy
I also have to remember to turn the VPN on before I connect to the wifi, but only some wifis
Sure they are minor inconveniences, but configuring a device once and being confident I haven’t skipped a step or made a mistake and my network connection is secure - that’s a big deal for me.
[–] NikolaNovak 4 days ago
And not just "against policy but unenforced and whatever" - for most large orgs I've been with, it's a serious, "conditions of employment" issue. There ARE innocent usages of personal VPN on work computer, but the risk and impact of the nefarious ones massively outweighs them.
[–] jml7c5 4 days ago
I suppose if you've got a number of devices (phone, laptop, tablet), it's easier to enter Wi-Fi details and agree to any captive portal stuff once rather than three times.
[–] seanw444 4 days ago
Yeah I'm confused
There's other reasons too, such as not having to configure arbitrary wifi connections on your devices, as well as making sure there's zero traffic outside the VPN (eg, during the initial few seconds before an on-device VPN connects).