Hacker News Reader

Comment by st3fan | Hacker News Reader

It is incredibly risky to use your personal computer for work. If you are pwned by malware that could put the company at risk. Vice versa if the company gets in some legal situation and you need to submit your work laptop as evidence, that could be extended to your personal laptop. These are both extreme examples, but they do happen.

View on HN

This is the biggest risk. Even just a spurious lawsuit could result in a legal hold on your laptop, phone or any other device that touches the business.

The entire contents will be copied and everything will be reviewed by a human. By both the lawyers suing and your own company’s legal team.

In my ignorance of youth I used to use my company devices for personal use (within reason, nothing bad) but a long time ago I made a clean cut.

My work phone is boring as hell. Same with my laptop. Nothing but work related info.

This is the way

That could happen even for a byod phone? Wow.

I would definitely not give that up. If I did have to turn it in I'd wipe it first.

But I thought this couldn't happen because our phone apps are all cloud stored anyway so they can get to everything there. On my byod phone I'm not even able to download anything locally.

Ps: I'm not in the US but in Europe and we have pretty strong privacy protections so I couldn't imagine this would be a thing.

But even for legal holds in the US (which is incredibly much more litigious anyway) our company just freezes cloud assets afaik.

I just looked it up for Germany, because I was pretty sure you had to hand over your phone, but it’s a bit more complex. If you wipe your phone before handing it over, and you do it to protect your employer, that would be „Strafvereitelung“ which is illegal. If you do it to also protect yourself because the data on the phone would incriminate you, too, that would be legal because you don’t have to help the state to prosecute you. Since you wiped it, it would be hard to prove why you wiped the phone. Apparently, the fact that you wiped the phone can be used as an indication of guilt against you though, because it means you have something you want to hide.

I’m not a lawyer though, so I’m happy to be corrected if my understanding is inaccurate.

I would not do it to protect my employer (I don't care about them) but to protect my privacy, not to protect myself from any illegal actions because I'm not really doing any :)

But I'm very principled on this and I will never willingly give it up.

You don't "need" to wipe it, you probably won't remember the high entropy passphrase you used to encrypt it though and that should be good enough.

^ this is the biggest reason. Everything on a computer used for work can end up subject to court discovery. If there’s something you don’t want to discuss in court don’t say or do it on a computer used for work. They image the whole machine and both sides pour though it. Then there’s some back and forth as the lawyers decide what’s relevant to the case, but they review everything.

> gets in some legal situation and you need to submit your work laptop as evidence, that could be extended to your personal laptop. These are both extreme examples, but they do happen.

Can confirm this happens. And yeah, the "extra-curricular" images they find will make their rounds and everyone will know.

Dude, just hold your head high, give a wink and nod to the oldest & homeliest of the office ladies (it'll screw with the others), and wear the reputation with pride: you earned it King! :^)

To be clear, in case my wife reads this, I was on the other side of that investigation. I was not the investigatee. :-)

Reply on news.ycombinator.com