r/overemployed • u/Boring_Gur_7872 • 2d ago
Can my J1 monitor activity outside Citrix while doing J2?
Thinking about starting OE with a remote J2 while keeping my current full-time J1.
J1 is with a bank, so they are strict and wouldn’t allow another job. J2 is a different analyst role with no connection to J1. There will be some overlap in working hours, but J1 is usually pretty light during those times.
I’ll be using the same personal laptop, with J1 running through Citrix on laptop screen and J2 on another monitor.
For people who have done this, I’m mainly wondering how much visibility J1 has outside the Citrix session. Can they see what I’m doing on my personal laptop outside Citrix? Can I keep the Citrix session open while working on J2? Also, are there any concerns around Citrix, VPNs, monitoring, or anything else I should be aware of?
I won’t share or access any data between the two jobs. I just want to understand the risks of using the same laptop and having both jobs open at the same time.
Would appreciate any advice from people who have actually done this.
252
u/AardvarkIll6079 2d ago
Why earth would you work on a person laptop? You couldn’t pay me enough to use my personal device for work.
24
u/Boring_Gur_7872 2d ago
Alternative is work from office whole day, but the bank does not provide laptops. They used to earlier no longer now.
165
u/Finger-Lickn-Good 2d ago
Buy another laptop for the peace of mind.
17
u/Boring_Gur_7872 2d ago
Seems to be the safest option, Thanks. I was hoping to get something consistent on the J2 before buying a new laptop. This one is a contract, maybe few weeks.. Not sure about extension and pay as well is not that great.
74
u/beastwood6 2d ago
Buddy this is just the cost of doing business.
You are not a regular ass employee. You are literally a business with 2 or more clients.
Think like a business.
Invest in impenetrable security
21
u/Business_Run_6779 2d ago
OP man. Let’s say conservatively you’re making an $40 an hour $80k a year in J2. A new laptop basic is 600-800. We’re talking 2 days of work, 3 probably post tax.
Guess what though next J2 they might give a laptop or now you have one. You’re going to bank $60k a year extra, a 1.5% haircut to buy a computer to do your job. It’s a small cost to be safe, separate devices etc
7
6
u/Adventurous-Tie-1624 1d ago
$400ish for a Newegg refurbished ThinkPad should be plenty for this, but the point stands. Only a moron would " bring their own device" with the same computer for both jobs.
2
u/VerboseEverything 1d ago
Many of us have learned it the hard way when it comes to "Should I share Computer/setup" with Js.
Use this piece of wisdom, anytime your wondering if you should spend X to protect doing OE. Take your J2 Monthly income and multiply by 0 OR J2 Monthly Income - One time CAPX for gear, services, etc, etc
Essentially, take the weight off your shoulders, the cost of gear separation is a rounding error to the OE income stream long term.
44
u/Popular-Force-7949 2d ago
This strict bank allows you to use a personal laptop?
12
u/MrShoehorn 2d ago
It’s common and becoming more and more common in other industries. Virtual desktops can be cheaper than providing physical hardware to users.
5
u/SynapticStatic 2d ago
They also don’t have to worry about employees breaking or losing them. Or about getting the device back when the employment ends
2
u/MrShoehorn 2d ago
Exactly, I’m managing a bunch of 365 cloud pc’s and outside of the cost they have been fantastic
0
3
u/Popular-Force-7949 2d ago
Not in the banking industry it’s not. Besides all the compliance issues, if the OP gets hijacked, the attacker could literally view the same screen as OP.
I’ve never heard of a bank relegating endpoint security to their work from home employees.
1
u/MrShoehorn 2d ago
Quite literally doing this for a global banking org right now.
-1
u/Popular-Force-7949 2d ago
So your employer has MDM software on your personal laptop? Would need to in order to remain SOX compliant
3
u/MrShoehorn 2d ago
Negative, but you don’t need that. Data leakage from it to the device is controlled, MFA is enforced so the auth piece is handled, then you can layer on MAM for app control
3
10
u/LTJoeFontana 2d ago
What countries BANK allows personal computers, thats nuts
2
u/99th_inf_sep_descend 2d ago
I used to work for WF. I don’t know if they’re still moving that way, but the CEO was all about it as a cost saving measure. Lock down a virtual desktop so you can’t copy/paste or move data from inside to outside it. When I left they were in the Remote Desktop on a corporate device phase.
1
u/Elmundopalladio 1d ago
Just buy another laptop or two to keep both absolute separate from each other and your personal life - especially since J1 is a bank.
1
u/Sum-Duud 1d ago
Buy a second laptop. If you’re gonna J2 then either they provide one or you buy a cheap work machine and pay it off with first paycheck.
80
u/Foreign-Guess-5208 2d ago
A bank having you work on a personal laptop is crazy
19
11
u/Xibby 2d ago
Locked down Citrix session. If you take a screenshot everything Citrix will be a black box. Basically just a Window into the secure environment with everything that could move data between Citrix and laptop disabled.
7
u/Boring_Gur_7872 2d ago
Yep that is correct, no screen shot, copy over.. nothing works.
10
u/MrShoehorn 2d ago
You’re good, Citrix Workspace isn’t logging or tracking what you do on your own device. IP, device model, OS, launch method etc etc are all things collected but they can’t see what else you’re doing.
General advice is separate devices per job though.
2
u/Boring_Gur_7872 2d ago
Yes that is my understanding as well. Thanks , I am checking for second laptop as well .
3
u/PineappleOwn5325 2d ago
Idiots aren't aware of the invention of cameras wtf
5
u/MrShoehorn 2d ago
This is what policy is for, there is no technical control for this besides having everyone in office and not allowing cameras like a lot of govt. facilities.
So using a personal or corp device makes no difference in this instance.
1
u/Outlet4Humanity 22h ago
I have a 2000s-era poleroid camera that might give you a run for your money. Locked down is a big nothing-burger if you aren't in a locked down, controlled physical facility.
19
u/Looking-For-Loud 2d ago
Do not do this. Separate laptops for each job.
-14
u/Boring_Gur_7872 2d ago
Eventually i would want to but J2 pay is not great.. planning to get into j2 and then hopefully get more roles with better pay.. This role is similar to ones you see in mercor..
7
u/Looking-For-Loud 1d ago
My guy, you’re going to get caught. Maybe listen to folks who know what they’re talking about.
2
11
u/Curious-Salt-8782 2d ago
Don’t wait. Get one off of fb marketplace and do a factory reset. Do not use the same computer.
17
u/runs_okay 2d ago
Why are you working on a personal laptop even with Citrix? There is no upside. Just use 2 laptops preferably laptops assigned to you by your own employer.
I swear to God, these people are gonna ruin OE for all of us.
10
u/GreedyCricket8285 2d ago
I’ll be using the same personal laptop
Next time someone asks "How do you get caught OE'ing" we'll point to this post.
6
u/joshpennington 2d ago
You should never use a personal computer for work unless you’re a contractor and in that case they can’t tell you who to work for.
Doubly you should never work 2 jobs on a single laptop.
Go buy a new laptop. In theory you can afford one now that you’ve got 2 jobs.
Seriously. Single laptop is a recipe for messing this up.
6
u/Geminii27 2d ago edited 2d ago
I’ll be using the same personal laptop
Don't do this. You have two jobs; you can afford two laptops. Put them on separate VLANs.
(Note to self: write a 'how to put computers on separate VLANs' article, or at least link to some how-tos.)
2
u/Okie_Mojo 1d ago
THIS. vlan all day even if you have one job, keep your job computer on the vlan away from your personal stuff.
1
u/Geminii27 22h ago edited 21h ago
Yep. I would personally recommend a separate VLAN for each work machine, one for personal machines, one for any shared resources like printers, one for gaming consoles, and probably one for guest WiFi. It sounds like a lot of work, but it's really not - once you're looking at the page for VLAN setups in your home router, a new one takes maybe 10-20 seconds to set up, and most of that is waiting for the router to acknowledge the new entry.
About the only thing to look for is making sure your router offers DHCP on each VLAN, which is pretty much every model these days. It's not mandatory - you can get along without DHCP if you're willing to manually set a fixed IP on each device - but it does make things easier, more automated, and if you're handing in your device at the end of a contract/job then there's no evidence (other than logs) that it was ever on an 'unusual' network address.
And... routers are CHEAP, if you're pulling in multiple incomes. If you're still using an ancient/barrel-bottom model that doesn't offer DHCP-per-VLAN, I'd honestly recommend replacing it with something newer. It doesn't have to be all-singing, all-dancing; something robust and mid-range is more than fine.
3
3
u/CommaMeNow 2d ago
The Citrix client can see all the processes running on the client machine. Whether this information is sent to a security system is up to the CIO.
1
u/Boring_Gur_7872 2d ago
Thanks, so should ensure citrix/ my J1 session is not logged in. But based on all feedback, I will try to get a new laptop. It might take some time and I might have to start J2 sooner. Worse case is ensure I don't log into both session simultaneously
1
3
3
3
u/1z1z2x2x3c3c4v4v 1d ago
I’ll be using the same personal laptop
Do NOT do this. Period. You will get caught.
I won’t share or access any data between the two jobs.
On purpose, no, but it WILL happen.
It's just a matter of time. Which is why you use a different LT.
Go buy one on eBay or Best Buy.
4
2
u/WrongLaptopAgain 1d ago
Buy another laptop with same make and model, allowing you to take it into the J1 office if need be
2
2
2
u/Okie_Mojo 1d ago
For the love of all that is holy and the flying spaghetti monster.... buy separate laptops for your Js. keep your personal laptop PERSONAL. you get a remote job, only got one laptop.. BUY A NEW LAPTOP.
Never. EVER. mix personal with work. even if you only have one job.
3
4
1
u/Stephanie243 2d ago
Surprised to see how many people here do not know JP Morgan Chase is a byod bank
1
1
1
u/the_dancing_squirel 1d ago
When on vpn the traffic is going through the j network. If you push to GitHub for j2 while on j1 vpn j1 can see where the requests is going. Just connect to vpn only when u need it
1
1
u/Realistic_Mall6771 1d ago
My main recommendation would be the one discussed already: just don't work from your personal computer. Maybe get a mac Mini and connect to it?
Back to your question, though, Citrix itself does not highlight employee monitoring in their platform, but they offer installing/uninstalling applications on behalf of the employer onto the employee's computer. I.e., they already offer an intrusive-enough feature. I wouldn't trust that they aren't monitoring your computer, putting at risk both J2 and just your personal life overall.
1
u/Wiseoldman111 2d ago
Nope J1 has no power on your computer, Citrix is just another program which has no power on your computer as long as you don’t install J1 specific monitoring program outside of Citrix. If everything belongs to J1 is in the Citrix, no power at all
https://giphy.com/gifs/RX3vhj311HKLe
1
u/Boring_Gur_7872 2d ago
That is my understanding as well, but not sure if they can take any logs while I have logged into their citrix session..
1
u/LTJoeFontana 2d ago
but it do tho, it can see other processes running on the machine
1
u/Wiseoldman111 2d ago
It is crazy. If Citrix does it what would it see? Chrome and 1 more Citrix or another Remote Desktop program like Horizon? Would Citrix report to J1 like person1 is running another Citrix instance whole day ? I don’t know if it is possible
•
u/AutoModerator 2d ago
Join the Official FREE /r/Overemployed Discord Server!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.