Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
E-Mail Privacy in the Workplace
Mark Rasch, 2006-07-31

Even with a well-heeled corporate privacy policy stating that all employee communications may be monitored in the workplace, the legality of e-mail monitoring is not as clear cut as one might think.

Comments Mode:
E-mail privacy in the workplace 2006-07-31
Hans Gruber
And what about our private email accounts? Does work "own" our email that we may access, using corporate resources, on a corporate network, during corporate business hours?

Also, the stipulation of who owns what (to me) is stil "fuzzy", and the logic going behind it makes almost no sense any more. This further stipulates that in the years ahead, we as "end users" WILL NOT be "data owners". No... We, as "end users" will be "data users". Corporations and governments alike will "own" ALL of the data; every time you enter your report into your word processor, define your spreadsheet, the government, along with corporate business, will scan, process, and make sure that your data is "OK". To them, they will (effectively) "own" your data, not you.

This might come under the guise of other issues, such as surveillance of the networks -- which is clearly happening. Something to note to everyone out there if "TV Land", is that it may very well be the case of the fact that each and every piece of email is being monitored. How do I know this?

Take a look at this network traceroute and tell me if I am crazy or not (I've left out the first 4 address, which indicate my network and the gateways that they go thru, so it has been "sanitized" a bit, but the remainder of the trace is intact):

1 ...
2 ...
3 ...
4 ...
5 unknown.Level3.net (209.247.34.161) 19.247 ms 19.998 ms 33.460 ms
6 ge-7-0-0-51.edge2.Chicago1.Level3.net (4.68.101.14) 20.413 ms ge-7-0-0-53.edge2.Chicago1.Level3.net (4.68.101.78) 20.491 ms ge-6-0-0-56.edge2.Chicago1.Level3.net (4.68.101.174) 19.730 ms
7 asn3356-level3.eqchil.sbcglobal.net (4.68.111.14) 20.007 ms asn3356-level3.eqchil.sbcglobal.net (4.68.127.226) 21.488 ms asn3356-level3.eqchil.sbcglobal.net (4.68.111.14) 20.308 ms
8 bb2-p6-0.chcgil.ameritech.net (151.164.42.148) 21.026 ms 20.774 ms 22.126 ms
9 bb1-p5-1.chcgil.ameritech.net (151.164.191.181) 21.375 ms 22.169 ms 22.876 ms
10 core1-p2-0.crchil.sbcglobal.net (151.164.42.183) 22.684 ms 25.411 ms 23.593 ms
11 core1-p3-0.crcloh.sbcglobal.net (151.164.188.182) 36.977 ms 37.783 ms 36.585 ms
12 core1-p3-0.crhnva.sbcglobal.net (151.164.240.122) 123.374 ms 229.538 ms 89.379 ms
13 bb1-p4-1.hrndva.sbcglobal.net (151.164.242.70) 36.629 ms 37.719 ms 37.881 ms
14 ded1-g8-1.hrndva.sbcglobal.net (151.164.40.149) 36.740 ms 37.231 ms 35.654 ms
15 66.10.17.2 (66.10.17.2) 44.308 ms 46.681 ms 48.750 ms
16 207.115.49.41 (207.115.49.41) 45.104 ms 43.667 ms 45.773 ms

NOTE LINE ITEMS #12 THROUGH #14. That's Virginia, folks. And line items #13 and 14 say "bb1-p4-1.hrndva.sbcglobal.net" and "ded1-g8-1.hrndva.sbcglobal.net". That's Herndon, VA. Any bets that your email isn't being monitored? This was the traceroute for "sbcmx1.prodigy.net". You'd get the same for "sbcmx2" through "sbcmx4"; "sbcmx5" and "sbcmx6" go through Pleasantton, CA, probably something along the west coast that's similar there, too. Anyone who has a DSL account through AT&T goes this route.

So, the next question is, how soon before ALL EMAIL goes through VA or CA "taps"???

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/412/33850#33850
E-mail privacy in the workplace 2006-07-31
Mike Smith (1 replies)
E-mail privacy in the workplace 2006-07-31
Anonymous
E-mail privacy in the workplace 2006-08-02
Craig S Wright (2 replies)
Re: E-mail privacy in the workplace 2006-08-02
Mark D. Rasch (2 replies)
Re: E-mail privacy in the workplace 2006-08-03
Todd Knaarr (2 replies)
Contracts and the Law 2006-08-04
Mark D. Rasch
E-mail privacy in the workplace 2006-08-02
Anonymous
E-mail privacy in the workplace 2006-08-02
Anonymous (1 replies)
Re: E-mail privacy in the workplace 2006-08-04
Mark D. Rasch
E-mail privacy in the workplace 2006-08-02
Ian Yates
E-mail privacy in the workplace 2006-08-09
Anonymous
Ever heard of sniffing? 2006-08-14
Anonymous
E-Mail Privacy in the Workplace 2006-10-28
Anonymous (1 replies)
E-Mail Privacy in the Workplace 2007-01-16
Anonymous
E-Mail Privacy in the Workplace 2007-02-26
Anonymous
E-Mail Privacy in the Workplace 2007-04-09
Anonymous
E-Mail Privacy in the Workplace 2007-06-07
Anonymous
E-Mail Privacy in the Workplace 2007-11-05
Anonymous
E-Mail Privacy in the Workplace 2009-02-20
Anonymous
E-Mail Privacy in the Workplace 2009-07-17
Anonymous







 

Privacy Statement
Copyright 2009, SecurityFocus