7

I'm about to work with a company on a development project, but they first need to set up a pretty complicated environment, and suggested they use VPN to work on my machine to do this. Should I be concerned that somebody can just watch me work? It would be embarrassing, if somebody could witness my work habits (e.g. Asking questions on SO and researching all day is part of my daily work regiment, and makes me feel like a noob, but it keeps me sharp. I also listen to conspiracy videos all day, and RadioLab podcasts, :). Is VPN going to introduce this possibility, and if so, is there a way around it?

EDIT: Also, is there a way I can always tell when somebody is VPNed into my computer?

8
  • Does "... suggested they use VPN to work on my machine to do this" mean you would enable VPN on your machine and allow them to access it? And if so, would that be one time, for them to do some other kind of setup for you? Or does it mean they set up you machine to all VPN access to their network? In the latter case, they could probably monitor you in whatever ways they monitor their own employees' use of their network.
    – JRobert
    Dec 26, 2010 at 18:20
  • @JRober - I'm not sure which version they'd do. They said their server admins would setup my environment. I assume this means so that they can install the software they need to get a development environment working correctly. In either case (this, or the network monitoring, etc) will they be able to see the things I do on my computer? Note: I'm remote so I'm not using their network to access the internet, if that's what you're referring to.
    – orokusaki
    Dec 26, 2010 at 18:25
  • When in doubt don't do anything on your work PC you would not want anyone to see. Yes productivity monitoring is becoming popular with many companies, not actually spying on every little thing you do but monitor your activities on the corporate network, which can harvest a profile of what you spend your time on. Just do your job and don't waste corporate time and there will be no problems.
    – Moab
    Dec 26, 2010 at 19:32
  • @Moab - I don't waste time, but I prefer for the company to not know anything I do. I'm a contractor, not an employee. Also, I won't be working on their internet. Does this network monitoring still apply?
    – orokusaki
    Dec 26, 2010 at 19:34
  • 1
    If you VPN into their network from anywhere, Yes, otherwise no.
    – Moab
    Dec 26, 2010 at 19:54

3 Answers 3

3

Should I be concerned that somebody can just watch me work

The other way to see it that your company does not want OTHERS to look at what work you're doing.

is there a way around it?

Use proxies, perhaps. Then you raise suspicion even more.


In light of your comments, you seem to have confused VPN for VNC.

Assuming you're talking about VNC:

[...] if somebody could witness my work habit [...] Is VPN going to introduce this possibility, and if so, is there a way around it?

is there a way I can always tell when somebody is VPNed into my computer?

Both, depends on the way the VNC server is setup. It is completely possible to have someone look over your screen, and not. It is possible for you to be notified that someone has connected to your system, or not. As I said, depends on the way the client/server is setup.

6
  • Or just another VPN within a VPN. I'm leaving this as a comment because I don't know if at all, this is possible
    – Sathyajith Bhat
    Dec 26, 2010 at 21:43
  • @Sathya - I guess I'm confused. I thought VPN allowed them to see my screen, so that they could do things on my computer. I understand that a VPN is a virtual private network, but they said they'd VPN into my computer and set up some software for me. Is this totally incorrect usage of the term VPN?
    – orokusaki
    Dec 26, 2010 at 22:01
  • @Orukusaki You seem to have confused VNC / Remote desktop for VPN. VPN sets up a secure tunnel from your PC to the destination so that it cannot be intruded upon by others. VNC is an application which allows you to connect to another system and use it from wherever you are.
    – Sathyajith Bhat
    Dec 26, 2010 at 22:03
  • @Sathya - ah, haha, I thought I was going crazy or something. Ok, does VNC put me in a situation where they could spy then, or is it just during the session? Also, is it easy to detect if a VNC session is active?
    – orokusaki
    Dec 26, 2010 at 23:03
  • 2
    Often what will be done is to use a VPN to make a secure connection from your machine to their network, and the VNC can be used to allow remote access to your machine for the admins to setup, manage, etc. NORMALLY most VNC systems will have an icon in the tray which changes colour when there is an active VNC connection (on other words somebody is watching AND DRIVING your machine). Bear in mind your mouse and keyboard are also able to be remotely used, and (depending on how setup) the screen background can change. It's usually pretty obvious if VNC is active. Would their admins have time? Dec 27, 2010 at 0:31
3

When it comes down to it, remember that a VPN is (basically) the equivalent of going to their office and sticking a network cable in to their switch and the other end in to your computer.

For some items such as anti virus, domain and a few other features, it is much easier to simply enable VPN access rather than publish these services to the internet and work out authentication/security.

On the other hand, you are correct in saying that a company can spy on you. By connecting to their VPN, you will be using "their" internet, everything will be routed via the VPN endpoint at their office and you will be connecting to their router/proxy/logging service.

As for telling if someone is connecting/connected, it is pretty much the same as being on a wireless hotspot - unless you have a firewall or monitoring program, you will not be able to tell... that being said, they will not be able to "get in" unless you give them administration over your machine, or they have some sort of remote access program on your machine.

If you are worried / paranoid over this, another solution may simply be to set up a virtual machine and do your work/vpn through that.

0

If you trust them turn VNC on and watch what they are doing on screen and then turn it off completely.

If you don't trust them then just talk to them and set everything up yourself.

Problem solved.

1
  • If contracting to a company, the IT people usually set the required standard and have the ability to allow you to connect or not. If you don't cooperate, they'll just slam the door shut. So, there is no choice but to do what they want. Just understand the how and why. Dec 27, 2010 at 0:32

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .