You are here

IT Dept. concerns with my portable apps

6 posts / 0 new
Last post
tumbles dumbrowski
Offline
Last seen: 15 years 6 months ago
Joined: 2009-06-03 11:05
IT Dept. concerns with my portable apps

Hi folks,

I am in trouble with my IT department for using my USB to run Firefox at work. I am getting grilled tomorrow for disciplinary actions--anyone care to explain how running Firefox portable is not a security risk for the network so I have some ammunition? I work in a public library BTW.

Thanks a million.

T.D.

John T. Haller
John T. Haller's picture
Offline
Last seen: 7 hours 6 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Info

Well, for starters, you shouldn't use portable apps to break IT policy. That being said, most IT policy doesn't cover portable apps and only covers software installed to the local PC. Portable apps don't install to the local PC and don't leave anything behind in the way of personal info, settings, binary files, etc.

Firefox Portable can't get around a standard network firewall. It can be configured to use it. But it'll go through your standard network security setup just like a local browser will, so in that respect it's no more or less secure.

There is a risk of bringing a virus from one computer to another. But that risk is mitigated by using ClamWin Portable to scan for viruses and having antivirus software installed on the local PC with updated definitions (which I'm sure they must have if they are a public library... remember, lots of people use portable apps in libraries).

In the end, even if they won't let you use it going forward, you can still argue that you didn't know it wasn't allowed, since the policy doesn't mention it... and you're not installing anything.

Sometimes, the impossible can become possible, if you're awesome!

tumbles dumbrowski
Offline
Last seen: 15 years 6 months ago
Joined: 2009-06-03 11:05
thanks

Thanks for the reply.

I really wasn't trying to circumvent policy, so much as try out the tech introduced to me at a conference. It was seen as an attempt at trickery, however.

I also have ClamWin installed, and will mention that at the meeting.

Thanks for the tips!

Veazer
Offline
Last seen: 13 years 2 months ago
Joined: 2009-03-19 05:55
my 2 cents

As a former sys admin, i would not put the blame or control of what can be run and what can't in hands of the end users. It is the responsibility of the IT staff to lockdown the machines and limit what executables are whitelisted.

NathanJ79
NathanJ79's picture
Offline
Last seen: 4 years 9 months ago
Joined: 2007-07-31 15:07
What JTH said, plus...

What JTH said. Plus:

1. Firefox Portable can't really do anything bad on a network that IE can't. If your IT department blocks youtube.com at the server level, you won't be able to access it on any browser unless you use another proxy, but you could do that in IE as well.

2. Firefox Portable can be configured with extensions such as Adblock Plus that go above and beyond its security, which is for starters superior to that in IE. So Portable Firefox alone can help protect a computer, since you're not using IE, a potential security risk.

3. If they have a problem with Firefox, they can block the app from running. I do not know how to set this up, but I know winamp.exe can't be run on this workstation (but VLC can, heh heh). So if they block firefox.exe and portablefirefox.exe, they will stop people from using Firefox. This can probably be beaten, but you don't want to do that, because beating a lockout constitutes malice, and that goes with what JTH said about using portable apps to violate policy being a bad idea, but using Portable Firefox should not be lumped in with that.

I recommend you find an innocent site they block such as youtube.com, mtv.com, xbox.com, myspace.com, or something similar, if they block selective sites. Attempt to access it with IE, and then attempt to access it with Firefox. From home, bookmark a few pages on the blocked domain, and attempt to access those as well, to show them that Firefox can't get around the block. If they aren't blocking anything, nevermind this paragraph.

StephsOther
Offline
Last seen: 15 years 4 months ago
Joined: 2009-07-20 12:56
cliffhanger . . .

Please, TD, what happened?!?

I also wondered if the conference you referred to

"I really wasn't trying to circumvent policy, so much as try out the tech introduced to me at a conference."

was one your employer sent you to, or was related to your career.

Regardless, I hope things went well for you.

StephTech

Log in or register to post comments