Logging on at a cafe? Privacy and security guidelines for remote workers

 


For digital nomads and remote workers, logging on from cafes, co-working spaces, or airport lounges is a way of life. High-speed internet and the pandemic have normalized this trend, whether for those whose companies lack local offices or those seeking an alternative to their home setup.

However, working in public presents significant privacy and security risks. Here is a quick reminder of essential precautions to take:

Consult Employer Guidelines

With hybrid and fully remote working so common, it is essential to check for specific guidance from your employer regarding working away from the office. Many organizations have internal guidelines, best practices for working in public, or even offer privacy and confidentiality training for staff.

Some employers may discourage working in crowded public places, like coffee shops, due to data privacy risks. For instance, the British government guidance for staff handling classified documents explicitly warns that these environments can be more freely accessible to people without appropriate clearance. If you plan to travel and work, also be aware that some employers may forbid working from certain countries.

Implement Visual Privacy Measures

Cafes and co-working spaces are often bustling with strangers. While most are minding their own business, you should avoid leaving yourself exposed.

Try to find a secluded spot to sit to prevent anyone from accidentally viewing your screen. It is much harder for someone to "shoulder surf" if you position yourself with your back to a wall. To further deter prying eyes, get a screen privacy filter—a thin film that uses tiny louvres to prevent visibility when your screen is viewed from an angle.

Exercise Caution with Public Wi-Fi

It is tempting to log on to free Wi-Fi in an airport lounge or hotel lobby to check email, but cybersecurity experts advise against it due to the high risks.

The National Security Agency warns against using public Wi-Fi networks that do not require a password, as any data sent over them is vulnerable to theft or manipulation. Even if a network does require a password, that does not guarantee the data will be encrypted.

The NSA warns of numerous cybersecurity risks, including rogue networks that trick users into joining. A malicious actor can set up a fake access point, or "evil twin," mimicking the expected public Wi-Fi, which would grant that actor access to all data sent over the network. Instead, use a mobile hotspot, which is more secure because it uses your cellphone signal to create a mini wireless network. Most modern smartphones have this capability.

For even greater security, use a Virtual Private Network (VPN). This software encrypts data traffic and routes it through private tunnels to secure servers, preventing unauthorized reading. While companies often provide VPNs for staff, you can also sign up for one independently.



Don’t Forget Fundamental Physical Measures

Finally, observe common-sense measures when working in public.

Be aware of your surroundings. Sitting in a public space with a laptop in plain sight makes it an attractive target for thieves. If you must leave your spot, even to go to the restroom, take your devices with you.

Additionally, avoid private conversations in public. On a noisy train or in a busy hotel lobby, talking on a Zoom call about a sensitive project, you might be tempted to raise your voice to be heard. However, you can never be sure who might be eavesdropping. British government guidance warns that in public areas, you should be aware of whether you can be overheard by unauthorized individuals or even smart listening devices.

Post a Comment

Previous Post Next Post