Remix.run Logo
lcnPylGDnU4H9OF 6 days ago

> Cisco Umbrella

My current employer was somewhat recently purchased by a large, publicly-traded company and I had this installed on my work machine. Suddenly DoH was forced off by administrator policy and I had to use some specific internal IP for DNS. Which isn't strictly less secure but let's just say I would, even for my large, publicly-traded business, trust Mullvad more than Cisco.

TechnicalVault 4 days ago | parent [-]

The stupidity of the whole thing is that by creating these MiTM servers, they're creating a single point of security failure. Anyone who then compromises one of those servers, can with a little care, trick the entire organisation into downloading compromised executables from what they think is a trusted site.

Also when you're snooping on a conversation between myself or one of my servers and one of your employees you are impersonating me and intercepting my communications too! I did not sign your AUP to agree to this. Also if I happen to be in a two-party consent state at the time, and you're intercepting a VoIP call/Teams/Zoom with me, that's a crime.

arghwhat 2 days ago | parent [-]

Imagine the legal consequences too, when the services you host make sent personal data to an (otherwise valid) data processor, but surprise the network-wide policy sent traffic went through a random third party that is not part of the Data Processing Agreement and privacy policy given to the end-user/data subject...