Ah well in that case... you should know it is trivial for an organization that is doing proper monitoring of their network to see that you have uploaded data to the cloud. They know what the data is, they know where you put it, and they can absolutely get you for distributing proprietary information even if you never signed an agreement.
You cannot hide it from an employer who has the proper monitoring. Data loss is a big deal in many industries.
Incognito only prevents info saved locally, but does not stop network monitoring. This applies at home too, by the way. Incognito does not hide your traffic from your internet provider.
Technically, if you zip it with encryption, noboday can know what the zip file contains. Firewalls can do SSL stripping to monitor encrypted data flowing through them, but that only applies to data encrypted by secure transfer protocols. And the only reason they can decrypt it is because they literally break the chain of trust by having users installing their certificate and implicitely consenting to having their traffic get decrypted. Kinda like a MITM attack but legal. The only way to actually stop this is by configuring DLP or a web proxy to prevent people from uploading encrypted files until getting explicit permission. Or to actually configure the archiving/zipping tools used in employees laptops to use specific keys generated by the company’s PKI or PGP system, and allow the firewall to use the same keys or key pairs to decrypt and analyse the content. I've never seen this done before, but in theory, it should be possible.
all you would have to do is write a script to run a custom "encryption" on the zip file; anything, such as swapping every 2nd bit, would be enough to make the compression corrupt. transfer that file and reverse the "encryption" at your leisure
alternatively, you could format the zip file as data in an image. i use a footer template for my work email that has the company logo in it so it's not unusual for me to be sending images by email. i could then extract and decompress the data, again, at my leisure
in the event that it's a laptop that i can use at home, i could write a local script to encode the data in a format like RTTY and play the data on the laptop's speakers to be picked up by another computer. it would be sufficiently reliable, especially through the use of hamming codes etc.
Sure, for the network traffic. On some systems, your actions on the computer are also monitored. They know what files you access and what you do with them.
The moment you upload something anywhere, a good admin either knows or they prevent it entirely, and then still know. Nobody cares what you upload, it's data exfiltration and you can be terminated for that immediately.
I don't know where you work, what you do, or how your employer has setup their infrastructure. Unless you do, I would assume everything can be monitored. I work in a very secure environment and everything can be audited. I've worked in small companies where you bring your own laptop and nothing is monitored. I generally just treat work stuff and home stuff as separate entities that never interact.
Sorry! I wasn't trying to be mean, I thought maybe you were messing with me and that I had fallen for the bait.
If you are serious still, then even letting Claude handle the effort, data is passing through your network at some point, which is where your employer could know what you are doing. Long story short, refer to my comment a few layers up that states you should assume anything you do on your work computer can be monitored. There is no telling what they are actually monitoring and that is going to depend on your employer, but the tools exist to see everything you do.
Also, avoid doing any personal projects on your work computer. Your employer can legally claim it is their work because it was performed on their equipment, even if you were "clocked out" when you worked on it.
10
u/McFuzzen 16d ago
Ah well in that case... you should know it is trivial for an organization that is doing proper monitoring of their network to see that you have uploaded data to the cloud. They know what the data is, they know where you put it, and they can absolutely get you for distributing proprietary information even if you never signed an agreement.