Avoid IP KVMs when Overemployed

An IP KVM, which stands for Keyboard, Video, and Mouse over Internet Protocol, is a hardware device that allows you to remotely access and control a computer or server from anywhere in the world using an internet connection. The core purpose of using this while being overemployed is to create a seamless setup that allows them to switch between work computers instantly without any suspicious physical movements or delays.

Think of a regular KVM as a physical switch that lets you use a single keyboard, mouse, and monitor to control multiple computers in the same room. An IP KVM takes this concept a step further by removing the need for you to be physically present. It connects directly to a computer’s video, keyboard, and mouse ports and then plugs into a network via an Ethernet cable.

Here’s how it works and what makes it unique:

• Remote Control: The IP KVM digitizes the computer’s video signal and sends it as data packets over the network to your remote workstation. At the same time, it transmits your keyboard and mouse inputs back to the target computer, giving you full control as if you were sitting right in front of it.
• Hardware-Level Access: A key advantage of an IP KVM is that it works independently of the computer’s operating system. This means you can access the system even when it’s powered off, in the BIOS/UEFI setup, or if the operating system has crashed.

Common Uses: IP KVMs are widely used in professional settings like data centers, server rooms, and IT support to manage servers and computers from a central location, reducing the need for on-site technicians. They are also used in more niche applications, such as by “overemployed” individuals who use them to manage multiple remote work computers from a single setup.

Why use IP KVM as OE

Someone who is overemployed might consider using an IP KVM for these reasons:

• To Consolidate Their Workspace: Instead of having a separate desk setup with its own keyboard, mouse, and monitor for each remote job, an IP KVM allows a person to use a single set of peripherals to control all their work computers. This significantly declutters the workspace and makes it easier to manage multiple roles.
• To Mimic Physical Presence: Many companies use monitoring software that tracks keyboard and mouse activity to ensure employees are actively working. By using an IP KVM, the user can quickly switch control to a different computer to perform a task, ensuring that activity logs for that computer remain consistent. This avoids the need for “mouse jigglers” or other automation software that can be detected by corporate security.
• Instant Switching Between Computers: A standard KVM switch requires a physical button press, which can be a slow and noticeable movement. An IP KVM allows a user to switch control between computers almost instantly through a digital interface, making it look as though they are seamlessly moving from one task to the next.
• To Work on Multiple Networks: An IP KVM is connected to the internet, allowing the user to manage computers on different networks from one location. This is crucial for OE, as each job’s computer is likely connected to a separate, isolated company network. The IP KVM acts as a bridge, giving the user secure access to each network from a single point of control.

Here are some of the most common and reputable brands:

Raritan: A long-standing leader in the industry, Raritan is well-regarded for its high-performance and secure IP KVM solutions. They are known for serving large data centers and mission-critical environments. (Website: raritan.com)

ATEN: ATEN is a major player in both consumer and enterprise KVM products. They offer a wide range of IP KVM switches with features like high-resolution video and centralized management software. (Website: aten.com)

Adder Technology: Adder is a popular choice for professional and broadcast applications. Their IP KVM solutions are known for their high-quality, low-latency video transmission, which is crucial for video editing and other creative work. (Website: adder.com)

Vertiv: Vertiv provides a variety of infrastructure solutions, including a strong portfolio of IP KVM switches. They are known for their scalable and secure products that cater to data centers and large-scale IT operations. (Website: vertiv.com)Level1Techs: This brand has gained a strong reputation in the enthusiast and “prosumer” space, particularly for its high-quality KVM switches. They are known for their robust build quality and a focus on features that appeal to power users, such as high refresh rates and resolutions. (Website: level1techs.com)

How Companies Detect Your Devices

The problem is that a lot of corporate security teams scan for this, which can be a major cause for concern, especially for those in “overemployment.” 

Modern corporate security software, like Crowdstrike, is designed to log and monitor every device connected to the network. These systems can detect IP KVMs and similar hardware by their unique manufacturer identifiers, known as VID/PID (Vendor ID and Product ID), and serial numbers. The software can flag these identifiers as unusual or unauthorized, alerting the IT or security team. In some cases, these devices are specifically on a “blacklist” because of known security risks or scams, making detection even easier.

The Dangers of IP KVMs and Remote Access

An IP KVM allows you to control a computer from a remote location over a network, making it a popular tool for “overemployed” individuals who manage multiple remote jobs. However, using these devices on a corporate network without permission is often seen as a security risk by corporate security teams, and they run checks for it. This could flag you as OE.

Potential Workarounds

For those determined to continue using such devices, we suggest several potential workarounds, though they all carry risk:

• Change Device Identifiers: Some users doing OE have suggested changing the VID/PID and serial number of the IP KVM to mimic a more common, legitimate device like a standard mouse or keyboard.
• Spoofing: Another idea was to configure the device to “spoof” the identifiers of a standard peripheral, making it harder for the security software to flag it as an IP KVM.
• Isolate the Device: Placing the IP KVM on a separate VLAN or guest network was suggested as a way to prevent it from communicating directly with the work computer’s network, which could potentially evade network-based detection.

It’s important to remember that while these methods might temporarily bypass detection, corporate security teams are constantly updating their defenses.