Is weird these days how companies are talking about their employees as their best assets, but when it comes to treat the employees as the best assets nothing happens. Some times the opposite is happened. Why the company decide what is good and what is wrong for me on the internet if I am a valuable asset? Why the company is reading my email if I am a trustworthy person?
It is a problem of trust between the company and the employees. You can treat your employees as human beings and leave them decide for themselves what is good and what is wrong or you can try to force them into mechanical beings which are not allowed to think for themselves and who needs to obey the company regulations.
Below I will prove that with some free software you can bypass all the possible internet traffic shaping rules as designed by the company and implemented by the network administrator. Most of the software that I am going to talk about it is available both for windows and Linux.
So, search google for:
1. TorPark
2. Tor
3. Truecrypt
4. Eraser
5. Openpgp
6. Enigmail (Thunderbird extension)
Tor is a protocol and a toolset which allows you to bypass most of the firewalls that are available today. For an overview you should go to the tor website. It does have a weak point. If someone is really wants to get you, he can block the communication from the company external ip to the ips that are the exit nodes from the tor network. If a company is at this level of paranoia, I do not think is the most appropriate place to have a job anyway.
TorPark is combining together the Portable Firefox and the Tor toolset. These 2 together will allow safe browsing without leaving any trace behind.
Truecrypt allows you to have an encrypted partition, and I mean encrypted, where you can store whatever files you want. Again on the truecrypt website you can find a detailed explanation of what truecrypt does and how.
You moved all the files to the truecrypt partition. Now you need to make sure that you really deleted the files. Now Eraser comes to help. You can use this software to permanently erase those files. Again if a company or a government really wants to get you they can, but it will cost them a lot of money.
If you want to have confidential emails you should use Thunderbird + Enigmail. Make sure you store the emails on the truecrypt partition. This combination will allow safe email exchange between people which are using some sort of encryption based on OpenPGP.
The tools that I presented here make your life in a corporate environment a little more private. These tools are not infallible but will make the life of a network admin (company security officer) difficult.
They can still read and monitor your internet traffic, but it will cost them too much money and time to be efficient.
Most of the companies have installed on the user computers key logger software which monitors the key strokes and takes screenshots when specific events are happening. These tools do not protect you against key loggers. I am still trying to find a freeware which is good enough. Maybe you guys can help.
Follow Me