Skip to content

Comment on Ask HN: My company installed chef on all of our machines, should I be worried?

Comments

chef is nothing. My company is completely locked down with Forcepoint and Crowdstrike. Every PC has it installed or it doesn't get to stay plugged in.

Unless you own the company, you're not really going to change policy. Get a personal VPN in place (hint: they're watching your DNS queries too), tether to your LTE phone, or just stick to company business on their machines.

Interesting... I'm not a networking expert, but I thought if you use a VPN, DNS is routed through the ISP of the VPN's DNS resolver?

Is there a way for me to check this assumption?

Yeah, that's what happens. I wrote that sentence badly. A lot of times I used to just fire up Linux on Virtualbox and thought that would circumvent any web filter on the Windows host, but the DNS still ran through the same place.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.