Get a Pentest and security assessment of your IT network.

Cyber Security

Employer Monitoring Public Site Posts

TL;DR

Yes, your employer can see what you post on public sites if you’re using their network and hardware. They have tools to monitor internet traffic and can track your activity. Protecting your privacy means avoiding sensitive posts on work equipment or networks.

Understanding the Risks

When you use your employer’s computer, Wi-Fi, or mobile data, you’re generally subject to their policies. These policies often allow for monitoring of internet usage. Here’s a breakdown:

  • Network Monitoring: Your employer can see the websites you visit (like Facebook, Twitter/X, Reddit, etc.).
  • Hardware Tracking: They can log keystrokes, track browsing history, and even access files stored on company devices.
  • Data Logging: Internet Service Providers (ISPs) keep records of your online activity, which employers may be able to access with a warrant or through their service agreements.

How Employers Monitor

Employers use various methods:

  • Proxy Servers: All internet traffic goes through a central server where it can be logged and inspected.
  • Firewalls: These can block certain websites but also record access attempts.
  • Content Filters: Similar to firewalls, these monitor the content you’re accessing.
  • Keyloggers: Software that records every keystroke you make (less common due to privacy concerns, but still possible).
  • Monitoring Software: Dedicated programs installed on your computer can track activity and send reports back to the employer.

Steps to Protect Your Privacy

  1. Use Personal Devices & Networks: The simplest solution is to use your own phone, tablet, or computer with your home internet connection for personal browsing and posting.
  2. Avoid Sensitive Posts on Work Equipment: Don’t share anything you wouldn’t want your employer to see while using their network or hardware. This includes opinions, confidential information, or anything that could damage your reputation.
  3. Use a VPN (Virtual Private Network): A VPN encrypts your internet traffic and hides your IP address, making it harder for your employer to track your activity. However, some employers prohibit the use of VPNs on their networks – check your company policy first.
    # Example: Connecting to a VPN using OpenVPN (command line)
  4. Use HTTPS Websites: Look for “https” in the website address. This encrypts the data transmitted between your computer and the website, protecting it from eavesdropping.

    Most major websites now use HTTPS by default.

  5. Clear Your Browsing History (But It’s Not Foolproof): Clearing history on a work computer doesn’t erase all traces of your activity. Employers can still access logs on the server side.
    # Example: Clearing browsing history in Chrome

    Press Ctrl+Shift+Delete, select ‘All time’ for the time range, and choose what to clear (browsing history, cookies, cached images/files).

  6. Read Your Company’s Policies: Understand your employer’s rules regarding internet usage and data privacy. This is crucial.

Important Considerations

  • Legal Implications: Employers generally have the right to monitor their networks, but there are limits. Check local laws regarding employee monitoring.
  • Trust & Transparency: If you’re unsure about your employer’s monitoring practices, ask HR for clarification.
Related posts
Cyber Security

Zip Codes & PII: Are They Personal Data?

Cyber Security

Zero-Day Vulnerabilities: User Defence Guide

Cyber Security

Zero Knowledge Voting with Trusted Server

Cyber Security

ZeroNet: 51% Attack Risks & Mitigation