xoder: (Default)
xoder ([personal profile] xoder) wrote2006-10-02 02:23 pm
Entry tags:

Posted using LJTalk...

If you were a sysadmin, and the network policy expressly forbid installing an IM client, what would you say about a JavaScript-based IM web page being loaded by a local web browser?

[identity profile] belcantin.livejournal.com 2006-10-02 06:42 pm (UTC)(link)
How about SSHing to a remote server where a text-based aim client is installed? So, it looks like you're doing actual work in a terminal from far away. Would that be against policy?

[identity profile] stoneliongrowl.livejournal.com 2006-10-02 06:48 pm (UTC)(link)
Using AJAX? Then techinically you did nothing wrong as the code that communicates to IM happens remotely... all you did was send xml information in a http request, just like any other webpage call.

[identity profile] doomkitty.livejournal.com 2006-10-02 07:28 pm (UTC)(link)
It all depends on the reason why they dont want the IM Client. If it's cause of the talking, then that's bad, but if's cause of security, well, do it.

[identity profile] mughi.livejournal.com 2006-10-02 09:38 pm (UTC)(link)
Since the primary intent of the policy is likely to forbid personal activity on company time, sites such as meebo.com must be blocked as well.

One can circumvent this policy by using some remote desktop service (vnc, pcanywhere, gotomypc, microsoft terminal services, etc etc), but you would still only be circumventing the technical restriction of the policy, not the intent - that you are on the clock and being paid to work, not play around.

[identity profile] xoder.livejournal.com 2006-10-02 11:28 pm (UTC)(link)
Actually, the Policy and Standard Procedure document says the policy is in place to prevent data leak to uncontrolled sources (as well as downtime due to malware/viruses). (As in, the same reason I leave my flash drive at home and have to leave my phone at the front desk.) A JavaScript-based client (run within a secure JS engine, like Gecko's) circumvents these issues.

FYI, meebo is not blocked (in fact, its how I posted the entry).

[identity profile] mughi.livejournal.com 2006-10-03 01:16 am (UTC)(link)
If security is an issue (as is evidenced by your cell-phone and thumb drive restriction), then all outgoing methods of communication should be blocked or heavily monitored and controlled as well.

Luckily, the worst I have to do is block myspace and related pages at my clients...

[identity profile] riot-siren.livejournal.com 2006-10-02 11:48 pm (UTC)(link)
I'd say...CUPCAKES FOR EVERYONE!!!

[identity profile] xoder.livejournal.com 2006-10-03 12:02 am (UTC)(link)
I knew there was a reason I picked up cupcakes at lunch!

(Anonymous) 2006-10-03 10:42 am (UTC)(link)
Fuck the man! Down with network policies! Down with networks, in fact!

*ahem*

Still A Policy Violation Most Likely

[identity profile] mrwendel.livejournal.com 2006-10-04 01:49 am (UTC)(link)
If they were smart they would just block the URL at the hosts level and call it day.

[identity profile] mephkewe.livejournal.com 2006-10-09 08:20 pm (UTC)(link)
:) well....there is that little form we had to sign (and will have to sign each year) stating that we won't use the internet for any personal purposes...

but who am i to talk, really?



and sometimes, honestly in this lab, there really are long periods of banging your head b/c theres nothing to do, or nothing for the human to do... i think no one will mind so long as you aren't imming instead of working. imming instead of banging your head, well, that might just be better for the company... but don't quote me on that.