You probably don't want to know where your coworkers are going on the Web. But sometimes you have no choice. Nancy Hand knows this, well, firsthand.
Several years ago, Hand was a network engineer for a large public utility in the Southwest. When any of that site's 3,000 employees got a malware infection, Hand received an alert. She was then called in to investigate by remotely combing through the employee's browser cache, looking for the source of the attack.
Along the way, Hand got to see where these employees had been surfing while they were allegedly working. Most of the time what she found was benign -- a lot of sites devoted to cooking, fashion, cars, and day trading. Inevitably, though, she'd encounter the darker side.
Like the employee who swore it was a spam email that caused his browser to visit that members-only bondage site, though how that email also managed to create a member profile for him was less clear. Or the company vice president whom Hand discovered had been spending work time visiting TeenageVirginSluts.com. Naturally, he was the VP of IT.
"He was my boss's boss's boss," she says. "After I found this I contacted my manager and said, 'We have a zero-tolerance policy for this kind of thing, so I am officially notifying you of what I found.' To my knowledge nothing was ever done. About a year later that VP got fired for another sexually related infraction."
Some employees ended up being escorted from the facility by armed guards, though Hand never knew whether it was due to something she had found.
"Sometimes it was a little unsettling to be on the machine of someone I'd met in another part of my job who seemed like a very toe-the-line type of person, only to discover it wasn't true," she said.