[millak]

Indeed, I'm working at a bank at the moment. There are half a dozen "endpoint protection" agents installed on my laptop, and don't even mention the network filtering - the Docker, Nginx and Vagrant documentation websites are all blocked for example.

I try to work mostly on my own laptop using Citrix in a web browser to access the corporate network so that the personal data I generate in a day (for example, browsing HN during downtime) doesn't get caught up in all the monitoring but this has some obvious limitations. With the security regime in place they will actually ask you about every piece of software you have installed on your corporate laptop (on which you'll need to request temporary admin access to install most software, of course) or about why you visited x, y or z website or why you searched this or that on Google. Like the article says it's best to keep your head down and try not to get noticed - they collect so much information but nobody looks at it until they have a reason to do so.