network monitoring

[Manuel Arostegui Ramirez]

On Wednesday 06 June 2007 12:41:55 Andy Green wrote:
> > As someone remarked about the US, employers here are legally responsible
> > for the actions of their employees.  I can't tell you any specific
> > circumstances where companies would decide that it is necessary.  I
> > believe that companies where a lot of employees have Internet access do
> > sometimes put this into their policy, not to use routinely, but in case
> > they need to investigate a problem.  The key point is that employees must
> > have been told in their contract that they can be monitored.  It cannot
> > be legally done without the knowledge of the employee in question.
>
> Another practical issue is that most IM traffic is encrypted nowadays
> anyway.  You can run vnc to see their actual chat session visually or
> turn on their chat logging and check the files on the client it but it
> doesn't sound like it makes for a good work environment... it sounds
> like the kind of thing they'll be wanting to complain about on IM...

Here in Spain the most popular IM system is MSN Messenger and it's not 
encrypted.
Just a man-in-the-middle attack you'll be able to read all the conversations
And it's almost impossible to defend yourself against those type of 
attacks :-)
Manuel


-- 
Manuel Arostegui Ramirez.

Electronic Mail is not secure, may not be read every day, and should not
be used for urgent or sensitive issues.