ArsTechnica

Staff / From the minds of Ars

Of course blocking instant messaging at work makes sense

Chatting at work is non-negotiable to some employees.

After listening to our resident alien life form and cable industry sleuth Jon Brodkin lament yesterday evening that he hadn’t been invited to join Verizon’s funded cadre of tech writers over at SugarString, I popped over to the site and flipped through the articles, wondering what Brodkin was missing out on. SugarString's layout isn’t afflicted with what StackExchange developer Jeff Atwood once referred to as "Pinterest Cancer," so I scrolled through and clicked on a few things to get a feel for what kind of reporting—or possibly "reporting"—the Verizon-controlled site was producing.

This story caught my eye:

Enlarge / Not sure if entitlement or just hyperbole.

In the piece, author Meredith Haggerty reached out to three different professionals and gauged their reaction to the idea of being made to work in an office where the employer disallows the use of Google Chat (informally, "GChat"). Haggerty’s first interview subject drew a line in the sand, responding strongly in the negative when asked whether or not he would work in such an office:

Jason Oberholtzer, the co-founder of I Love Charts and a content strategist currently embedded at IBM Studios, emphatically would not. When asked if he would quit a job that blocked Gchat, he did not hesitate to say yes.

Meredith: just straight up quit? why?

Jason: because that’s f___ing garbage.

Oberholtzer’s vehemence boggled me, because in the corporate world I come from, blocking external instant messaging is par for the course. It's not the exception—it's the way things are.

Welcome to real life

Although the other two respondents (Buzzfeed’s Katie Heaney and freelancer Beejoli Shah) had a more balanced view, the idea that being able to use GChat is on someone’s make/break list of workplace requirements strikes me as incredibly short-sighted. Restricting access to external instant messaging is a basic security play for just about every Fortune 500 company out there; in fact, the bigger the company, the more stringent the restrictions tend to be.

Speaking from personal experience, none of the three companies I worked for from 2001 through 2012—Boeing, EMC, and Symantec—allowed external instant messaging. No Google Chat, no AIM, no YIM, no MSN, no nothing. You could work around the restrictions at each of the companies if you wanted to break the rules (tunnel your GChat traffic over ssh through your home computer, for example), but then you’re actively subverting a corporate policy and inviting punishment if you’re discovered. Is it worth breaking the rules so we can, as Haggerty puts it, "start our mornings GChatting about last night’s Homeland?"

Generally speaking, it's not. Large companies chronically suffer from policy ossification, especially in IT, which means that policies tend to get made in crisis and then retained long past the point of being outdated. This is one of many consequences that follow from treating enterprise IT purely as a cost center (a tragic mistake most large organizations make): IT is forced into a reactive mode. IT fixes problems as they arise and tries to keep the leaks plugged with what most reasonable people would consider overly restrictive computing policies. Such policies often include several of the following items: no personal devices, mandatory auditing software, mobile device management software, remote control software, antivirus/antimalware software, intrusion detection software, and mandatory whole-disk encryption.

And, of course, no outside instant messaging.

Disallowing external IM makes sense if you look at things from the perspective of a CIO with a lot on his or her plate: unmonitored and potentially encrypted instant messaging traffic is an avenue through which controlled, proprietary data can be rendered uncontrolled and then exfiltrated outside the company. There are plenty of ways to regulate external IM, usually with Data Loss Prevention software, but those methods cost time and money—it’s far easier to simply block the ports and be done with it.

I’d never work at a place that does this!

Wholesale disallowing of external IM is a nuclear option, but it’s the option many large companies have chosen. The attitude exhibited by Oberholtzer is either hyperbolic or highly privileged—if you can afford to quit a job because that job won’t let you use GChat, then you’re either swimming in job offers or you don’t need to work. Either way, good for him.

For the rest of us, it’s highly likely that at some point—especially if you work for a really big company—you’ll have to deal with not being allowed to fire up the instant messaging application of your choice and gab with your friends or family.

Oberholtzer’s defense is one I’ve heard echoed before by tons of overly entitled employees:

Beyond the issue of personal contentment, he considers the [IM] client to be an indispensable business tool: efficiency matters and employees need to be allowed to “run their days productively.” If a company was unable to understand the utility of GChat or the value of employee freedom, he says, “That’s not a relationship I would want to get into because it wouldn’t end well for either party.”

This shortsighted and ultimately selfish view misses a bunch of important points. There are often factors at play that go far beyond "I want to use my own IM app because I believe I should be able to." Some companies face legal discovery requirements or other regulatory compliance issues, and in those cases the potential cost of breaking the law by leaking uncontrolled information overbalances an individual employee’s feelings about what they should and shouldn’t be allowed to do.

Some people really do need externally accessible instant messaging as part of their jobs, of course—especially those who are primarily freelancers or contractors and who need to be able to talk to contacts who aren’t sitting in the same building. But on the other hand, "I need to use IM to talk to my spouse because I derive significant satisfaction from that" simply isn’t a good enough reason when pitted against security, legal, or regulatory requirements.

It’s not an outrage, and it’s not a matter of the company not "trusting" or "valuing" employees. Work, as with all things in life, can involve some compromise. Sometimes you don't get to play with the exact toy you want to play with, and rage-quitting a job isn't the mature reaction. Real companies—not fantasy SF-based startups or regional businesses with casual outsourced IT, but big blue-chip players with multi-billion dollar IT budgets—sometimes have crappy IT policies. And sometimes, putting up with them is the price for being able to pay your mortgage and have good insurance.

How can I work without instant messaging?

One issue is that Haggerty’s piece doesn’t distinguish between internal and external instant messaging, using GChat as a stand-in for all IMs and even attempting to augment GChat’s value proposition by noting that companies can use it for "intra-office communication" (although actually doing so would likely send many Fortune 500 IT security managers into pearl-clutching panic).

At every office job I’ve ever had, disallowing external instant messaging went hand-in-hand with an internal IM solution—usually Microsoft Communicator/Lync but also sometimes an XMPP server. I don’t think you could find a single person who disagrees that IM is a valuable tool, and therein lies the huge missed point of the SugarString story. Just because you’re throwing out the external instant messaging bathwater doesn’t mean you have to toss the entire internal IM baby into the trash with it.

Turning the mic over to you

But enough soap-boxing from me; I'm curious to hear your thoughts. Is the idea of a job that disallows external instant messaging in fact so repugnant that it would drive you to quit? Is disallowing external IM indicative of an unhealthy corporate culture or of other systemic problems that would interfere with having a career at a large company? Do any readers work at places that allow unrestricted external instant messaging applications?

Expand full story

336 Reader Comments

  1. I don't get the issue. Why not just text message from your cellphone using 3G/LTE, not the company's WiFi? Or is that forbidden, too?
    777 posts | registered
  2. You're fucking crazy. You might be willing to work for an employer that doesn't want you to talk to the outside world. I'm sure not.

    This kind of dumb policy is also why people work so hard to undermine and subvert IT.
    88289 posts | registered
  3. Now Jason needs to be given the chance to write a counter-point article.
    411 posts | registered
  4. CDW, Dell and HP to name a few openly federate with any Lync enabled domain.

    Go ahead, try and IM your CDW/Dell/HP sales team, you will get their presence information and be able to chat back and forth.


    Not being allowed external IM shows a much deeper problem with the corporate structure and their attitude towards the employees, not trusting you to work like adults. We actively encourage our employees to use our guest WiFi, especially in big cities where cell service 50 floors up can be spotty at best.

    Last edited by sryan2k1 on Wed Oct 29, 2014 4:12 pm

    28637 posts | registered
  5. No-IM for me is a complete non-starter. Internal to a company, it's critical. Lync or Jabber is fine for this, but it's so needed.

    External IM is less important, but I would (and have) definitely weigh that in my job offers compared to other companies. I've been working in corporate areas of various sizes for about 15 years and it's a real quality of life difference during work to have external IM.
    61860 posts | registered
  6. When i did contracting for the DoD, I believe it was around when they deployed office 2010 that they also rolled out office communicator which to those who don't know is basically AIM with and MS office skin. IMHO is was amazingly helpful. This was of course for internal use only. However I work for the local government and there is a very firm stance against it. However we got a new Director for IT about a year ago and he's slow going over everything and that is one thing that was brought up that people want changed. It would help for us because IT has a presence all of downtown that could help move things along quicker.
    274 posts | registered
  7. If I had much in the way of "restrictions", I would probably work elsewhere. I left Crown Amps over an overly restrictive signing away all creative rights document they forced everyone to sign. I was close, what I do when you aren't paying me is mine (or whoever I am working for's) They didn't like that. After I left of course they immediately wanted to make an about face and not make me sign the document.
    3933 posts | registered
  8. I wouldn't leave (or not join) a company solely because they blocked external IM.

    However, as the article notes, this is one symptom of "[IT] policy ossification" and "overly restrictive computing policies" such as no BYOD. Considered together, these poor policies would definitely move a job offer to the trash can.
    3 posts | registered
  9. If there are 2 equal job offers that I have, and one offers to treat me like an adult and one offers to treat me like they can't trust me, I'll go with the former job offer every single time.

    I wouldn't quit because of a policy change I didn't like, but I sure would start looking for new opportunities.
    20167 posts | registered
  10. The need for external IM can vary between jobs. If you work in journalism or anything to do with communicating with the outside world, blocking off avenues for that communication seems bizarre.

    If you work doesn't require any outside communication then I'd agree you don't need IM but then the question surely becomes the same as the "should they block Facebook" one?
    1066 posts | registered
  11. It wouldn't bother me, even if I didn't have a cell phone. I wouldn't even use personal stuff on a work computer. It's not mine, and I probably don't know what's monitored or captured. I definitely agree that if external IM was the breaking point, you're in a good position to be extremely picky.
    11294 posts | registered
  12. Sorry, I don't get it. Unless you're paid by your employer to chat with your buddies, comment on your buddy's Foursquare thingy, "LIKE" your neighbors Facebook post, or whatever, you have no business doing anything but the job you're paid to do.

    Or is that too old fashioned?
    209 posts | registered
  13. Disallowing IM is stupid, shortsighted and pointless. But would I quit a job over it? No of course not. But I will silently shake my head at the stupid management - and it would therefore negatively influence my view of the company making it more likely I'd look for other jobs by lessening my loyalty. It's hard to be loyal to people/companies you think are acting dumb.

    And yes I've worked such places - for years in one case.

    Last edited by Kazper on Wed Oct 29, 2014 4:11 pm

    627 posts | registered
  14. Blocking instant messaging is the tip of a behavioral iceberg in my view. If they do that, then they'll do a lot of other micromanaging-like things that would drive me crazy. It by itself may not be a deal breaker if there is a good reason. However I think 9/10 times, an employer that makes that decision will make similar decisions to show that they don't trust me as an individual. That overall feeling is a deal breaker for me.

    Last edited by jeromatron on Wed Oct 29, 2014 4:16 pm

    19 posts | registered
  15. Sierra1 wrote:
    Sorry, I don't get it. Unless you're paid by your employer to chat with your buddies, comment on your buddy's Foursquare thingy, "LIKE" your neighbors Facebook post, or whatever, you have no business doing anything but the job you're paid to do.

    Or is that too old fashioned?

    Yeah, I thought that was the grown-up way of thinking too. But reading the comments, it's apparently not as unanimous as we'd think.
    694 posts | registered
  16. I've worked at a few places that have blocked external IM clients and often many websites for various reasons. I'm a software developer, and have even worked at places that would block things like Stack overflow for "hacking".

    The awkward part is despite policy people would generally just circumvent these blocks through various means. I'm not saying I do or don't, just that it's what I've seen people do. It gets even less controllable now that a lot of people will just jump on their phones anyway and chat if they're in a situation where they can get a signal (not in a SCIF or something)

    When it comes down to it though, I'd love to always work somewhere that trusted me with being able to manage my own internet use and conversations... truth is I haven't had that option, or at least I haven't seen that option being presented.
    160 posts | registered
  17. If your only clients and your only resources are internal, it makes sense to block external instant messaging. For what fraction of the world is that true these days? I suspect that it is more likely employers who block external instant messaging are making it hard for people to work effectively than that they are preventing leaks.

    We run an internal instant messaging service, and we allow access to external XMPP services. That seems to be a nice compromise... our internal communications stay that way, but our people get access to the rest of the world. Our people would lose out on both valuable access to clients and on access to support for tools they use if we were to block it.

    Would it be enough to make me quit if I worked someplace that blocked it? Not all by itself. But I would question the calculus that leads an employer to trust me with confidential information while not trusting me to use chat responsibly. An employer that's buying into that kind of stupidity is probably doing several other idiotic, employee-hostile things. It's very likely that the atmosphere created by management that stupid would make me want to find another place to spend my working time.
    922 posts | registered
  18. My work added Lync awhile ago. I figure it was to give them a way to monitor/moderate the activity instead of attempting to restrict it.

    As for texts, by boss is the king of texting messages that should proabably be emails, so I doubt that would ever fly.
    1062 posts | registered
  19. I'm just going to chime in with everyone else that is skeptical that most people have the economic mobility to quit their job because of IT policies.
    1136 posts | registered
  20. I had an employer than screened my phone calls to prevent head hunters from getting through. I always assumed the phone wasn't secure.
    3479 posts | registered
  21. To agree with Peter in a less aggressive manner, consider this: Would you work for a company that installed cellphone blockers to prevent you from using your personal cellphone at all while at work? The legal discovery angle is also a red herring unless those cellphone blockers are in place.

    For DoD contractors like Boeing, stuff like blanket personal electronics bans exist as security measures, but for any company that isn't going to that level, blocking IM is nothing more than security theater.
    1621 posts | registered
  22. When it comes down to it though, I'd love to always work somewhere that trusted me with being able to manage my own internet use and conversations

    And I'm pretty sure all companies would love employees who they could just trust to manage their internet use and conversations...
    694 posts | registered
  23. I couldn't possibly care less about external IM while at work.

    If it was suddenly blocked tomorrow I would happily continue working.
    26271 posts | registered
  24. Marcos2247 wrote:
    Sierra1 wrote:
    Sorry, I don't get it. Unless you're paid by your employer to chat with your buddies, comment on your buddy's Foursquare thingy, "LIKE" your neighbors Facebook post, or whatever, you have no business doing anything but the job you're paid to do.

    Or is that too old fashioned?

    Yeah, I thought that was the grown-up way of thinking too. But reading the comments, it's apparently not as unanimous as we'd think.


    Yeah, I'm honestly surprised at all the responses insisting on being able to chat at work. Maybe it's a millenial thing...
    209 posts | registered
  25. Restrictions are OK - after all, you are using a tool that your employer is providing. It is the same as the company providing a car that you can only use for business.

    IM is important. Before rolling Lync (that, by the way, I despise because it is Windows only - engineering tools are only provided for Linux), some colleagues of mine even tried to use IRC and XMPP. As it was not supported by IT, nobody followed. Some people even installed Skype - something that from my point of view should be a no-no.

    And now I realize people around me use Spotify and Dropbox. IT has been lax lately.
    4 posts | registered
  26. Sierra1 wrote:
    Sorry, I don't get it. Unless you're paid by your employer to chat with your buddies, comment on your buddy's Foursquare thingy, "LIKE" your neighbors Facebook post, or whatever, you have no business doing anything but the job you're paid to do.

    Or is that too old fashioned?


    Yes, that is old fashioned.

    As long as you are getting your work done, and are there the appropriate hours it doesn't matter *how* you accomplish your job.

    Everyone in our department is salary.

    Example: I was waiting on a few servers to reboot in different regions of the planet for firmware updates, I was monitoring them via their out of band consoles (DRAC). The process can take ~20 minutes or so, and can sometimes get stuck so I keep a causal eye on the process, which can stall for minutes at a time different phases.

    On another monitor I was GChatting with a friend we are seeing this weekend for Halloween. Am I a bad employee?


    I like my job because my boss doesn't treat me like a child and trusts me to do the job I was hired for. But we will also take impromptu half days off and go to baseball games during the summer if we feel like it, to give you the idea of our corporate culture.

    Last edited by sryan2k1 on Wed Oct 29, 2014 4:17 pm

    28637 posts | registered
  27. Sierra1 wrote:
    Sorry, I don't get it. Unless you're paid by your employer to chat with your buddies, comment on your buddy's Foursquare thingy, "LIKE" your neighbors Facebook post, or whatever, you have no business doing anything but the job you're paid to do.

    Or is that too old fashioned?



    It is very old fashioned unless your working a customer facing service job or on an assembly line or something. Most professional jobs fail to acknowledge any distinction between work hours and not work hours, why shouldn't it go both ways ?
    15 posts | registered
  28. All companies allow staff to chat to each other on company time, as long as it doesn't get out of hand. It's always been like that.

    We run our own XMPP server and it's our primary method of communication, we use it even more than email (which is a close second). We also use XMPP for chatting among ourselves. There is nothing wrong with that.

    We are allowed to run other IM programs, and I also use IM to chat with a few other people, in fact they're mostly former employees that I met at work and am now close friends with. One of them now works for a competitor in another city — and we still chat daily.

    I don't see how there is any productivity difference between chatting to other staff and chatting to people outside the company. In fact I often receive work related advice from people who don't work here. That improves my work.

    Basically, a happy employee is a good employee in my opinion. Allowing IM makes employees happy.

    As for people spending all day chatting... well that is solved simply: check how much actual work they are getting done. If they're not getting enough done, then ask them to fix it or fire them. Perhaps that means spending less time on IM but it should not mean banning it altogether.

    I will not work for any company that bans IM. It's a deal breaker for me.

    Last edited by Abhi Beckert on Wed Oct 29, 2014 4:17 pm

    2937 posts | registered
  29. In the past 15 years (and 10 or so company offices I've worked in) I think external IM was only allowed in one company. To be honest, if it suddenly became available tomorrow I don't think I would use it, simply because my friends would still be blocked in their place of work.

    Plus things have moved on, if people really want to chat then we have WhatsApp, Facebook and other forms of communication, often available on a phone or iPad which some companies (even banks!) allow you to use on wifi that doesn't go remotely near the corporate LAN.

    What does annoy me is the blocking of webmail providers. At the end of the day it means a lot of people use their work email address for social stuff and, if I was running my own company, I'd far rather that personal messages were sent from personal email accounts and so kept well away from the corporate email address.

    Last edited by mrsilver on Wed Oct 29, 2014 4:57 pm

    1015 posts | registered
  30. gwk wrote:
    It is very old fashioned unless your working a customer facing service job or on an assembly line or something. Most professional jobs fail to acknowledge any distinction between work hours and not work hours, why shouldn't it go both ways ?

    You make a good point there. But I think the remedy is to make companies respect the barrier between work and life, not blur it even more.
    694 posts | registered
  31. For companies that have broad obligations for document retention (like most financial firms) this is a very common policy. How can a company ensure compliance with its legal obligations to retain all employee communications if employees are chatting on platforms that the firm has no control over? At these companies IM is usually allowed only on platforms that have specific document retention features, like Bloomberg.
    6 posts | registered
  32. My employer blocks all web-based email, and outside IM. We do have Office Communicator to chat with fellow employees.

    I check Yahoo mail on my phone. It's not much of an inconvenience.
    409 posts | registered
  33. I've never worked at a place with a policy against IM. I don't believe I've ever interviewed at one.

    My current employer provides an XMPP server, and we're encouraged to use that for chat by folks in different buildings for example, but we're not forbidden from using other IM tools. I've found other IM systems critical for working with, for example, consultants that we bring in. (Better to chat with them before they visit, so their time on-site can be made more efficient, and then chat with them afterwards as followup. Saves us money.)

    Heh, something of an issue is actually that my employer is starting to provide multiple chat services. Our VoIP system has XMPP built in, and it hasn't yet been federated to the one most of us were already using. But once it's further along, we'll actually have working IM built into our desk phones (and the mobile apps that we use in place of our desk phones while away from the desk).
    1313 posts | registered
  34. sryan2k1 wrote:
    CDW, Dell and HP to name a few openly federate with any Lync enabled domain.

    Go ahead, try and IM your CDW/Dell/HP sales team, you will get their presence information and be able to chat back and forth.


    Not being allowed external IM shows a much deeper problem with the corporate structure and their attitude towards the employees, not trusting you to work like adults. We actively encourage our employees to use our guest WiFi, especially in big cities where cell service 50 floors up can be spotty at best.


    Don't know how it is at your company, but guest wi-fi at most I've worked at has always had a captive portal, which is a major PITA and makes always-connected wi-fi unfeasible. I wish someone could address the captive portal issue and do away with it. Passpoint maybe?
    96 posts | registered
  35. Sierra1 wrote:
    Marcos2247 wrote:
    Sierra1 wrote:
    Sorry, I don't get it. Unless you're paid by your employer to chat with your buddies, comment on your buddy's Foursquare thingy, "LIKE" your neighbors Facebook post, or whatever, you have no business doing anything but the job you're paid to do.

    Or is that too old fashioned?

    Yeah, I thought that was the grown-up way of thinking too. But reading the comments, it's apparently not as unanimous as we'd think.


    Yeah, I'm honestly surprised at all the responses insisting on being able to chat at work. Maybe it's a millenial thing...

    Reading some more, I think you're right. It's a generational thing.

    Millenials have grown up with always available communication, to them that's normal. Blocking IM thus is not. I understand that, though I don't "get" it.
    694 posts | registered
  36. q5ajzvtd wrote:
    sryan2k1 wrote:
    CDW, Dell and HP to name a few openly federate with any Lync enabled domain.

    Go ahead, try and IM your CDW/Dell/HP sales team, you will get their presence information and be able to chat back and forth.


    Not being allowed external IM shows a much deeper problem with the corporate structure and their attitude towards the employees, not trusting you to work like adults. We actively encourage our employees to use our guest WiFi, especially in big cities where cell service 50 floors up can be spotty at best.


    Don't know how it is at your company, but guest wi-fi at most I've worked at has always had a captive portal, which is a major PITA and makes always-connected wi-fi unfeasible. I wish someone could address the captive portal issue and do away with it. Passpoint maybe?



    Our guest network is unrestricted. Directly NAT'd to the internet via a cable/DSL modem in each office. The only thing is each client gets throttled to 3Mb up/down by the access points.
    28637 posts | registered
  37. The only valid reason I can imagine for blocking external IM would be security. And if a company seriously needs this level of security, their network shouldn't be connected to the internet because there is no way a network filter is going to stop an information leak.
    796 posts | registered
  38. Marcos2247 wrote:
    Sierra1 wrote:
    Sorry, I don't get it. Unless you're paid by your employer to chat with your buddies, comment on your buddy's Foursquare thingy, "LIKE" your neighbors Facebook post, or whatever, you have no business doing anything but the job you're paid to do.

    Or is that too old fashioned?

    Yeah, I thought that was the grown-up way of thinking too. But reading the comments, it's apparently not as unanimous as we'd think.


    If you're hourly, this is certainly true.

    If you're salaried, it's significantly more nuanced. "Work" is frequently done both at the office and at home, and job performance is usually (ought to be?) measured by results rather than time spent. I frequently talk with my wife over messaging apps at work- it doesn't impact my ability to get my work done, and I would certainly consider restricted messaging access to be a significant downside when considering a job offer.
    7 posts | registered

You must to comment.