Why would you not separate personal devices from school devices? If you can afford a personal device, do so; it won't be the last time.
this post was submitted on 18 Aug 2023
90 points (84.6% liked)
Privacy
31882 readers
608 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
Because they want to play games at school.
Actually I can install things on it and only installed a better browser and office suite. I would simply prefer not to be spied on at school, and I don’t think that that is unreasonable.
Just don't use school property for things you want to be private. It works the exact same way with anything owned by any organization you may work for in the future.
I want my schoolwork to be private. I don’t want a proprietary network enabled keylogger on my computer even though I only use it for schoolwork. I am legally required to go to my school, I am legally required to use their computer, I am legally required to give up my privacy. I don’t understand why people think privacy isn’t a reasonable expectation at school. I am okay with the school having my information but they use proprietary keyloggers and network monitoring tools that can do whatever the fuck they want with it.
But unfortunately your schoolwork isn't private, it is likely considered property of the school. You will encounter this in both academia and any job you acquire basically. Work you do for them, or as a part of an assignment they hand you (schoolwork, research in university or whatever task at a job) is their property, that is something you unfortunately need to accept.
Couple that with performing it on a device that is also not yours, but 100% theirs, they are allowed to do whatever the hell they want with it. Even if you did the work on a private device, they sill still own the work and the results you produce.
load more comments
(4 replies)
This is the right attitude, my friend, for real.
I'm a teacher and have guided students down this path before. Tech rights are important, don't let anyone tell you otherwise. Surveillance is not security.
Buying that cheapo Linux lappy and running it on the down-low sounds like the best bet. Don't draw attention to it and you'll be fine.
The ethics of what you use it for is up to you: choose wisely. But simply wanting privacy is not a crime.
How will they grade your work if you keep it private? Isn't the entire point of school assignments to show them to someone?
load more comments
(3 replies)
Yeah this is exactly the way it works in the workplace.
And yet so many people store personal files on their corporate devices...
load more comments
(2 replies)
Don't have any expectation of privacy on a device you do not own, this applies with school & work-supplied devices.
They own the device, they set the terms.
A reasonable request, but I doubt the school's going to back down from the position of "we're allowed to monitor the hardware we own".
Honestly man use the device to submit assignments, and get yourself another laptop for everything else.
It’s a laptop owned by your school, so they can install spyware if they want to. More importantly the school likely has policies against removing or otherwise tampering with it. You would be wise to find out what they will do if you violate this policy. It could be anything from a slap on the wrist to expulsion.
Any decent IT department will eventually figure out if you disable it. They’ll know fairly quickly if it stops “phoning in” if the spyware is any good.
Like all school rules, they are incredibly vague and the punishment is whatever they see fit. I kid you not, “no hacking” is one of the rules.
load more comments
(3 replies)
I work for a school and I provision these types of devices. You do not want to modify or change anything about them, as it probably breaks your acceptable use policy. If they allow you to bring your own device, then do that. But do not change the device they give you in any manner. Just don’t use school property for things you want to be private. It works the exact same way with anything owned by any organization you may work for in the future. They own the device, they set the terms. And your excuse of 'it does not break policy' or 'it is not against the law' is ridiculous, as policy is intentionally broad for this reason, and the law requires you to not interrupt normal classroom activities. If the school lets you, bring your own device. Otherwise, tough luck, seems like you won't be able to play your games.
i would like to add on to this, do not bring your own device, just simply keep school/work and personal stuff entirely separate. simple as that.
all work and schools that allow you to use a personal device that I'm aware of will require you to have whatever software for surveillance that they have on provisioned devices, you'll likely end up messing up and leaking something private, and it just takes up storage space.
it's the organization's device, they can put whatever nonsense they want on it, just be sure that you only ever use accounts from them on the device. never a personal account of any kind.
load more comments
(5 replies)
Don't tamper with hardware that somebody else owns. If you get caught, you could be fined a lot more than 50€ and expelled. School administrators often like to "make an example" of kids that they think are "hackers" even if you're just booting Linux from USB. They don't understand the difference between that and real hacking, so don't risk it.
You can only achieve true privacy on hardware that you own. A cheap laptop to boot Linux isn't a bad idea.
load more comments
(16 replies)
Know your school handbook and acceptable use policy inside and out. Same with any other published guidelines they provide. My bet is that their AUP says something about not circumventing their security and monitoring tools. Booting into a live OS would certainly fall into that category. But knowing what the rules actually say is probably the first thing you should do since you don't own the hardware or network. From there, you can decide how far you really want to go and if there are any defenses or loopholes in the rules.
Getting your own hardware is probably your best option in this case if you can do so.
Not using the school given device is the best course of option unfortunately. Second hand ones are good, but the specs will be pretty bad
I don’t mind bad specs. I actually just want to use it for school. I was hoping not to spend money on this though.
load more comments
(1 replies)
They can't detect if you boot into Linux; but they can detect the presence of external storage devices and scan their contents. It is best if you do not plug in your LiveUSBs or disks while the system is [ONLINE] (Meaning while the device is booted into any default operating system)
Chances are if your hardware has not changed; the capabilities have also not changed. I do however have a few tips for you:
- DO NOT MODIFY THE DEFAULT OS OR SPYWARE! It sounds like they are now monitoring the files for the software and will now notice if you have disabled it; as your machine will probably be sending heartbeats to a centralized server. You must accept this spyware when operating the machine as intended to interface with your school environment; but you can limit yourself to submitting schoolwork only on it
- Boot into a Live(CD/USB/Media) environment of Linux with Persistence. Google it. They can't detect this without BIOS tampering.
- Do Not plug your Live Media into the system when booted into it's default mode. Your drives are probably being scanned.
- Keep a separate media storage device for storing your documents and such.
- You can boot into your Linux key to work on school things and browse the web privately. Remember though that you are [OFFLINE] and may be unable to access the school network and will be required to save your work on a different piece of media, shut back down and boot into the default OS again to submit your work.
- You may be unable to complete assignments in Linux [OFFLINE] that require you to respond to questions interactively [ONLINE] or otherwise require that you be interactively [ONLINE].
They can't detect if you boot into Linux
It depends what they use for monitoring. If they use Intel vPro then they can technically take over from any operating systems since it runs at the TPM/firmware level.
I'm assuming that unless told otherwise; they have no such capability in the BIOS. It IS probably a public school and IT department that isn't that clever/resourced.
load more comments
(6 replies)
Hate to break it to you, but jobs are doing this as well. I am a teacher, and we just got GoGuardian for students, but it has been watching / blocking things for teachers since I started a couple years ago. If you have a work-issued device, your work will most likely monitor it, and same goes with school-issued devices. I get that you want to hack it and do what you want, but that could get you fired some day.
that could get you fired some day.
Among other ways it might make you better off, a tendency to boot linux on school-issued devices could also very much help get you hired some day. Although perhaps not in the education system. Seeing a teacher discourage it is even more depressing than seeing a student fear he'll be punished for it. So long as you're not breaking any laws, it seems like a fine idea.
So long as you're not breaking any laws
In the US, basically anything you are not authorized to do on someone else's computer is illegal and can be prosecuted under the CFAA.
I point this out only to highlight that it's a terrible law that needs to be changed, I'm not disagreeing with anything that your said.
load more comments
(2 replies)
When I was in high school I had my school laptop and my Linux laptop, if I needed to do work I would download the file on the school laptop and use a USB to move it to my Linux laptop to work on it. It was tedious but was the only way as we had latitude 2 in 1s that had a soldered in ssd. So I couldnt swap hdd, I ran zorinOS on a Lenovo t450 and it worked really well for school work
---edit Light speeds a bitch
I got in trouble for getting into the schools network I'm 6th grade. They kept asking who in the group was involved in remotely shutting down computers and that they had logs and would find out anyway. I called their bluff and didn't get in as much trouble as the rest of us.
are you in europe/EU? (judging by currency symbol)
what about talking to the relevant GDPR authority?
there should be a clear route of complaint.
start by submitting a subject access request
" what infomation do you hold about me, or that you can link to me?"
"give me a copy"
" what procesing are you doing with it"
" have you shared it? with whom?"
so this process in iself should reveal all processing that they think youve consented to - gives you a basis to challenge.
if they lie to you, that's anothet offence.
Disregard whatever you've heard about installing Linux on the device, find the agreement given with it and see what it says. If no reference is made to doing your thing then returning it with the same setup, I'd say you're in the clear. I'd bet the agreement covers damage, lost and stolen aspects plus returning it good condition, yet if you reinstall the software like it was provided they'd have to be very explicit about not loading Linux. If they do, you could use linux on a USB without installation. This could get you off the spyware while not breaking the rules if they are in writing.
Basically this. I'd just buy a used disk, swap them out and install Linux. That or use a USB.
When it comes time to return it, put the old hard drive in it and return it. I can't think of a way for them to tell you did this aside from the lack of logs they keep from trying to track you.
Yeah, that’s not spyware, it’s called mobile device management and if the school owns it, they have every right to monitor it.
load more comments
(9 replies)
Start a protest or go to different school
Some universities are worse than others
view more: next ›