Every data packet going through company network is fair game

Password encryption itself does not encrypt all the data after you log in, unless you use https:// link after you login to your private online account, instead of http:///

In the past, I can use a tool to sniff all the facebook cookies in a wifi hotspot, and assume a session of any facebook whose owner is nearby, because even though facebook is password protected, all the traffic after login is not encrypted and only identification / protection is a cookie string.  I think facebook fixed that long time ago.

Therefore, if you login to your private account, pay attention subsequent URL is https://my.acmebank.com/, not http://my.acmebank.com/ Because the former sends open, non-encrypted data through your company's network, and the company can look at anything they chose going through their network.

The lesson is, use your private account on your smart phone.

所有跟帖： 

• 如果你想做FBI或者hijack，办法当然很多 -慧惠- ♀ (203 bytes) () 09/19/2014 postreply 12:02:25

• 任何经过公司网络的数据，公司都有权利看。公司能不能看，该不该看，想不想看，爱不爱看。。。是公司自己的事情，你的数据已经不是你的了 -lexm5- ♂ (0 bytes) () 09/19/2014 postreply 12:53:27

• 可是你给的link也说的不可以的。。。 -慧惠- ♀ (680 bytes) () 09/19/2014 postreply 13:31:53

• 不要吵了，如果用gmail，Google都能看的。他们总裁讲了，除了他和G的CEO，大家都没隐私。 -N.- ♀ (0 bytes) () 09/19/2014 postreply 17:00:44

• gmail不是铁板一块 -lexm5- ♂ (384 bytes) () 09/19/2014 postreply 19:35:51