

Does Your Employer Ban Skype? 154
neutralino asks: "This morning, we received an company-wide email stating that the Max Planck Society (a German government funded research organization) has outlawed the use of P2P software at all of its institutes (including ours). The statement specifically singled out the use of Skype for internet telephony. The reasons given for this were that 'the exchanged data cannot be controlled' (therefore it might be illegal) and that 'Max-Planck or research resources in general might be abused, if "only" for commercial purposes.' This caught us by surprise, since many of us use VoIP to communicate with friends and family and collaborators, in our respective home countries. Is it now standard practice for companies, government organizations, and universities to outlaw Skype? Should it be?"
Of course they do ... (Score:5, Insightful)
On top of that, I don't have administrative rights to install anything on my computer. I have to go through a large control process to achieve that which requires me to explain what the software will be used for (and it better be a company resource). Therefore, it's almost out of the question to ask for it to be installed.
My company (and I have the feeling that many others are like this, too) would far rather throw truck loads of money at AT&T rather than risk something going wrong with the P2P aspects of Skype.
Furthermore, any kind of free software scares my employer. Big time. I know Skype isn't necessarily free so this is about other software I may want to use. They have this fear that they would be a large target if whoever wrote said software decided to take legal action upon discovering that employees of company X all used it to complete their daily jobs.
Not even stadiums full of lawyers claiming that, due to some software licenses, there's nothing to worry about could convince them otherwise.
Re:Of course they do ... (Score:4, Funny)
Did the temperature just drop in here, or is it just me?
My employer *requires* skype (Score:2, Interesting)
Last year, we started recommending that employees use Skype for most routine meetings (most sensitive meetings are still recommended to use phone lines since people questioned Skype's author's previous company's business model).
Why skype? It was the best cross-platform (Mac & Windows & Linux) voice conference system we could find.
Re:My employer *requires* skype (Score:3, Interesting)
End result: Huge savings.
We could ofcourse have used some other VOIP solution for the actual communication inside the company, but with the large partnernetwork needed a solution that people will be happy to adopt.. as they can use it for other communications too not only with us.
Gizo Project. (Score:2)
I'm not affiliated with SIPPhone, but I'm a very satisfied cust
Re:Gizo Project. (Score:2)
Why is this modded Funny? (Score:3, Funny)
Re:Of course they do ... (Score:1)
where i work also has the same irational fear of free or open source software
(also you cant install anything unless its from an approved list, and getting anything on that list, even if its free and totally mission critical is nearly impossible)
Re:Of course they do ... (Score:2)
Hmm...so, you must be working on an NMCI network, right?
Re:Of course they do ... (Score:3, Interesting)
This is exactly the reason we're banning Skype because it takes up Way too much bandwidth. The largest company is using it and they say it saves them a lot of money on phone bills, but thanks to them we spend all those savings on data communication lines.
Skype can save money, but only if it's more than what you need to pay for increased bandwidth.
Re:Of course they do ... (Score:2)
Re:Of course they do ... (Score:5, Insightful)
I guess it works for you. I personally couldn't work at a place that didn't treat me like a responsible adult. I do Oracle admin, and the good sign of a good DBA is when things are working, and you have some 'free time'. I often use this free time to not only surf for Oracle related topics, but, other general topics that interest me. Often, these topics are technical in nature, and have led to suggestions to try new things for our group or project...such as trying linux on our test computers. And this has been on DoD computers!! Someone that IS anal about security.
Also, if I can take some time during the day, when you have to get things done...pay a bill here or there, or contact people for personal reasons, it helps to allow the use of company/gov. computers to do this. I can do this there quickly, or I can take time off from work, leave, or stay home to do this, and that time away is time I'm missing to do work related things. I mean sure, if you're surfing porn and such at work, yeah, you should be canned. And if you're not responsible enough to not do something stupid like bring in a worm or virus (not a problem so far, as that I rarely use windows on my workstations, usually on my Linux boxes.
I guess my philosophy, is treat people like adults, if someone blows it, can them, but, don't penalize everyone just 'in case' someone might do something wrong or naughty.
Re:Of course they do ... (Score:2)
Here's where I respectfully disagree with your position, which I hear quite often. Don't punish (or penalize if you prefer) people before they do anything wrong.
(1) I don't agree that not being able to do non-work related tasks on your work computer is a punishment or penalty.
(2) If we wait for you to fuck up your computer by downloading
Re:Of course they do ... (Score:3, Funny)
Re:Of course they do ... (Score:2)
No reason for Skype. (Score:4, Insightful)
You want to talk to friends or family do it on your time.
If it is work related use their phone system.
And make sure to keep it to work. (Score:1)
Your right to privacy just about disappears when you walk into your employer's offices.
Re:And make sure to keep it to work. (Score:2, Funny)
Just sort of like your sleezy cousin Vinny, it waits outside for you to get off work
Re: (Score:3, Interesting)
Re:And make sure to keep it to work. (Score:3, Informative)
So someone spending all day chatting with friends about things is in clear violation of this policy, but someone checking in on a sick mother or to arrange something that requires then to call some place "during office hours", is ok.
Re: (Score:3, Informative)
Re:And make sure to keep it to work. (Score:2)
Hmm...I know that it has been decided in court that your computer transactions, email and the like can be monitored by the company. However, I do think it is STILL illegal for them to tap your phone conversations or listen into them. I think phone taps come under another established law.
IANAL, but, that's they way I've always understood it from what I'd read in the past. A private employer cannot tap a phone anymore than a neighbor ca
Re:And make sure to keep it to work. (Score:2)
Ok...I'll grant you that. But, as others have mentioned, what about cell phones and blackberries?
They can't monitor those, and I'd dare say there would be a pretty big uproar if they tried to ban everyone bringing a cell phone in with them to work.
Your own time? (Score:2)
While that's true for an hourly wage type in an office building, it certainly isn't true for everyone, especially at a government lab.
At least around here, it isn't too uncommon for people to work many dozens of more hours than they're officially paid for in a week. In situations like that, allowing them to do something personal with the network that has negligable impact on anyone else is a no-brainer. Restricting it w
Yes no maybe. (Score:2)
A good example happened at my office.
We are a small software development company. We used to let the support techs install what they wanted on their systems.
One day a support tech wanted to try his hand a programing. We told him that he could write a little utility that he wanted but NOT to give it to the other techs until it was test
Re:Your own time? (Score:2)
In many cases, that's true. It's not obviously true when it comes to students and post-docs who often submit monthly time cards with explicit hours listed on them and work a whole lot more than gets listed. One could probably make a ca
Nope (Score:2, Funny)
Not being allowed to execute any
Re:Nope (Score:2)
Re:Nope (Score:2)
I have a DS and an extensive collection of games for downtime, so its not really worth it.
Skype for business. (Score:4, Interesting)
Re:Skype for business. (Score:2)
Same here, I wish it weren't. (Score:3, Insightful)
Skype is gratis, not libre.
Re:Same here, I wish it weren't. (Score:1)
Skype... (Score:1)
The explanation we got... (Score:2, Insightful)
Kinda makes sense from that point of view.
Re:The explanation we got... (Score:2)
I'm not sure what my employers reasons are for not banning Skype, but I figure it saves them money in the long run. Most of my calls are skype-to-skype and it doesn't cost a penny when I spend a couple hours talking to someone in Hon
Re:The explanation we got... (Score:1)
Folly (Score:2)
employers reacted strongly against the possibility that their employees might phone home on company time. Of course that was similarly wrong-headed.
Re:Folly (Score:1)
Really, though, if enough of your contacts would be using Skype but not telephone or email, chances are that your office would be one of those supporting Skype.
Of course (Score:4, Insightful)
Skype eats network traffic, and when you multiply a Skype call by several hundred that's a lot of resources being consumed. Not to mention the impact on productivity and the security risk that is presented by unverified software.
Also, any corporate lawyer will tell you that no company wants to risk legal problems caused by employee misconduct. They certainly don't want to get blindsided because of a Skype call that they have no way of monitoring, tracking, or keeping record of.
Re:Of course (Score:4, Interesting)
As far as eating traffic if you only freeload (no local P2P supernodes) it eats 10-20% less traffic compared to an OpenVPN or IPSEC tunnel with a G729 call with VAD turned on. So if it is only one conversation Skype is more economical. Problem is elsewhere. If there are multiple conversations between people from the same company they traverse the company NAT to the sometimes different supernodes as relays and back. This is what wastes bandwidth.
On top of that Skype especially in a NAT environment is horrible to QoS. If you are obliged to provide a working VOIP environment this is the worst possible protocol. There is no protocol spec, there is no documentation, there is no way to keep state, there is no way to kill specific conversations to keep within bandwidth limits, so on so fourth.
To add to that, in a company environment it is important to have the VOIP integrate cleanly with the company directory, possibly CRM, voicemail, etc. You do not get anything even close with Skype. You get that from any VOIP PBX. Even Asterisk has that on offer. On top of that in many cases you are obliged to keep at least call records for compliance (if not the entire conversations). Nothing like that with Skype.
It is a good toy for the end-user masses. It should be banned in a company. If a company allows Skype this means that the sysadmin has no clue on all of the following counts - security, compliance, telephony, network/QoS.
Re:Of course (Score:2)
So what exactly are your technical means to check that with Skype? Can you please enlighten us the unfettered and ignorant sysadmins out there?
Regarding network/QoS, if you're running a decent network, skype traffic even with quite a few simultaneous calls is pretty minimal.
Really? Once everyone in a company of 200 employees starts using Skype you
Re:Of course (Score:2)
That, and tie-ins to CRM, etc. are all PBX functions. I don't think anyone here has been advocating dumping the PBX for Skype. Think of Skype as more akin to IM than to a telephone replacement.
Now, if you have a fairly large number of employees using Skype and a limited pipe, then sure, you have a concern.
Today we're
Re:Of course (Score:2)
If you are a commercial entity - you should have been using a VOIP PBX for that. In some cases you will be even legally obliged to do so to have a track of who, what and how (and record the call if necessary).
By the way - the original article on Slashdot is about "Does your employer ban skype". It is about company and usage of Skype (and alternatives) in a company. So you are not proving a point by providing an example which does not deal with usage in a
Re:Of course (Score:2)
Re:Of course (Score:2)
Of course? What do you mean, "of course"? Let me finish that "of course": "It might be a security risk, but of course we also have an internal customer to service."
As opposed to your "of course", let me repeat some things that the sysadmins said at the place where I work:
If Skype went evil (Score:5, Interesting)
The perfect spyware would punch through firewalls. Skype does just that for its legitimate purposes.
The perfect spyware would encrypt its outgoing communication. Skype does also.
The perfect spyware would be a program with plausible-sounding reasons to connect to unknown computers without notice. Skype has to do just that to take advantage of its supernode system.
The perfect spyware would be hard to reverse engineer. Skype refuses to run under SoftICE (apparently to inhibit development of competing clients).
In our own real world, Skype's been minding its own business. Nobody's lost a machine due to having Skype on it (at least not since the callto: buffer overflow). Nobody's reported suspicious activity in filemon while Skype was running. By normal standards it's trustworthy. But to a business which lives by "you can EXpect what you INspect" Skype is a terrifying unknown.
Re:If Skype went evil-Why No SoftICE? (Score:2)
Just how does an application know when it's running under a good emulator?
Re:If Skype went evil-Why No SoftICE? (Score:2)
SoftICE isn't really an emulator - it's really an advanced debugger, and carefully written applications can detect that they're being run under a debugger (either by hooking the debug interrupt, scanning Windows memory, instruction timing, or even just making a few deft software calls which end up returning distinct results whether or not it's running on a debugger). A book called "Crackproof your Software" (No Starch Press) details s
Thanks B.S. (Score:2)
All non free software is this way. Why pick on Skype?
The only thing you missed in your "perfect spyware" specification was this: the perfect spyware does nothing useful for the victim. Removing the program that installed the spyware often leaves the spyware.
The reason given by the company against Skype and P2P, "the exchanged data cannot be controlled" makes no sense. Do they think they can control the po
Re:If Skype went evil (Score:2)
Runs fine under GDB though. It also can't do anything about ktrace.
compliance (Score:1)
Re:compliance (Score:2)
Of course they prohibit it. (Score:3, Insightful)
Banned in certain countries (Score:5, Interesting)
Re:Banned in certain countries (Score:2)
Re:Banned in certain countries (Score:4, Interesting)
Re:Banned in certain countries (Score:2)
Thanks,
Matt
Ban? No! Embrace: yes! (Score:2)
I don't see how Skype is any different from ANY other Internet traffic! If you're communicating to the net, you could potentially be sending secrets out. Better Skype than SSH.
Re:Ban? No! Embrace: yes! (Score:2)
Requires some competence in the sysadmin I guess. Especially to make it work reliably and all the time. QoS on low bandwidth links is a pain in the arse.
Alternatively, if you are incompetent you give him Skype which has none of that. And both of you enjoy it until he sees another boss which has a competent sysadmin.
And that is the day when you s
On principle (Score:2)
I'm happy to interact with systems based on unencumbered open protocols and open source implementations.
This means I like Free World Dialup with the Asterisk gateway, and I like asterisk and its inter-asterisk protocols. Nice.
But skype can go to hell.
Sam
Yes, primarily due to security (Score:4, Funny)
It might also have something to do with the fact that we're a phone company.
Not ban but discourage (Score:2)
Why only Skype? (Score:1)
Yes and no (Score:3, Interesting)
Ban it? We require it. (Score:4, Interesting)
Re:Ban it? We require it. (Score:1)
Re:Ban it? We require it. (Score:2)
I don't understand your comment at all. As if we have control over the regular phone system? What exactly should we know better? That we should be paying huge $ to some long distance phone company when a newer, better technology provides
Re:Ban it? We require it. (Score:1)
My Employer forces us to use Skype (Score:2, Interesting)
(We have offices in three countries, so we make a LOT of overseas calls just within the company.)
Legal implications of Skype's EULA (Score:5, Informative)
Since our users cannot agree to the EULA, our organization has banned Skype. While I dislike the traffic, the deciding issue for administration was that the license was totally inappropriate.
EULA Double Standards? (Score:2)
What EULA can your employees agree to? I'd say none and that no non-free software of any kind could be installed by end users. Surely, you would not consider an employee's installation of WMP [bsdvault.net] or other M$ "upgrades" that make M$ root [theregister.co.uk]?
Do you monitor your network for bandwith wastage by spy and malware?
Re:EULA Double Standards? (Score:2)
It really isn't that complicated. There are really only two types of computer/network use allowed by policy: use in direct support of our organization's business and incidental personal use. While inexpensive voice connections to other sites could meet a business need, that isn't what Skype does. Once you are a supernode, your bandwidth is being used in support of other people so the "business use" doctrine doesn't apply.
That leaves "incidental personal use." Here again, there is a lot of bandwidth be
WTF? (Score:2)
Mobile/cell (Score:1, Insightful)
Heck, take a camera phone picture of a document and sent it to someone using MMS. completely untracable by company audit logs.
Absolutely (Score:2)
1. Bandwidth. We only have a T1 for our office Internet connection, because that's all we need to run our business. Streaming media crushes it pretty quickly with 100 employees sharing 1.544 MBit.
2. No valid business purpose. This is a business. People are paid to do a job. They don't need Skype, AIM, RealPlayer, etc etc to do that job. We run WebSe
Oposite (Score:3, Informative)
Short answer: yes (Score:1, Interesting)
Because of our bandwidth -- we have a very large pipe to the Australian network, and most of our desktops have gigabit ethernet -- any desktop running Skype is going to become a supernode. Because of our connection, we get charg
Fortune 500 former employer doesn't ban.... (Score:2)
No ban, but strongly advised against. (Score:3, Insightful)
The lack of control is the #1 reason, since we can't ensure confidentiality (not that the probability of eavesdropping is worth discussing, but risk management demands a level of due diligence here,) and bandwidth was another concern, not because of the supernode issue, our network would wreck that, but rather because we have enough crap to deal with and didn't need another "free product" to muck up our works with issues of code validation, accountability, confidentiality and service availability.
I don't like the way things have gone, but at least in Corporate America, I don't have enough peers to cover all the bases and management above me is expecting risks to be minimized, and even that is a huge challenge with just the stuff we paid for.
Hey, at least you have IM!
Re:No ban, but strongly advised against. (Score:2)
I can't help thinking about other software such as Microsoft Office which is proprietary, closed source, can't validate code, unreliable (proven with viruses), etc.
How on earth did MS Office (and most of the other software you use) ever get approved? ... or are there different standards?
Also interesting all of the small, nimble companies that have adopted Skype and ar
Should it be? (Score:2)
If so, it shouldn't be banned.
Collaborators? For work? Then use the phone.
Skype Banned (Score:2, Informative)
Re:Skype Banned (Score:2)
The problem with Skype is when it becomes a supernode. There are two reasons, bandwidth and the content of calls being relayed.
On the bandwidth side, because the University is on a high bandwidth connection, the host would become a prefered relay and get huge amounts of data directed through it.
On the content side, the JANET (Joint Academic NETwork) regulations st
Re:Skype Banned (Score:2)
Nope (Score:2)
There is, however, a general policy not to abuse computer resources, although I doubt they'd go after anyone for this. They're quite liberal, and someone running Skype off their desktop wouldn't be considered abuse unless it seriously affected their work.
I'd say the experiences are on the opposite side, for instance we have several starving post-docs from foreign countries who routinely
Exchanged data can't be controlled (Score:2)
Germany is cracking down on Alqueda .
not banned here... (Score:2)
Not only is Skype not banned, its use is encouraged. There is a requirement to use a company-specific modified client (IIRC we paid Skype to produce a variant for us) - I think it adds VLAN tags to prioritize the traffic.
It isn't oficially supported by IT, rather there's a "you
With us, Skype is required (Score:2)
Nope (Score:2)
Not where I work (Score:2)
definition of illegal (Score:1, Offtopic)
definition of outlawed (Score:1)
Re:definition of illegal (Score:1)
Not legal or lawful; contrary to, or forbidden by, law.
Re:controlled data exchange? (Score:2)
Re:controlled data exchange? (Score:1)
Because, chances are, far fewer people send those amounts of FTP data on as regular a basis.
Re:controlled data exchange? (Score:2)
Hmm...sure would make it difficult to download those quarterly Oracle updates we need for our servers.
Certainly this isn't the only application that you need to ftp to sites for updates and upgrades is it?
Re:No different than banning SSH (Score:2)
Hint, hint
Definately. (Score:3, Insightful)
No need to explicitly ban Skype, even without corporate policies, Skype wouldn't be able to get through many firewalls. It's designed to do NAT traversal, not punch through firewalls that block everything and only allow through whatever the proxy machine lets through. (Plus even if Skype could fake the proxy into thinking it was one of the allowed protocols, the
Re:Using skype for business is against the EULA (Score:2)
"For the avoidance of doubt, You are allowed to use Skype Software at work",