I’m with you there. My previous employer wanted a bunch of their shit on my phone. I asked if they were supplying me with a work a phone, and they said no, you already have one. I said I do, and it’s mine, and I’m not putting anything on it for work because work and home are going to be two different things. They gave me a work phone and then wanted to know why I turned it off in the parking lot before I even got into my car. I’m done working for the day sir.
Comment on Work from home
NegativeLookBehind@lemmy.world 5 days ago
I refuse to install any work related software on my phone. Not only because I don’t want to be contacted after hours, but companies often “require” full read/write access on your device, so they can remotely wipe their data if you quit or get fired.
Fuck that.
InternetUser2012@midwest.social 4 days ago
corsicanguppy@lemmy.ca 4 days ago
wanted to know why I turned it off in the parking lot before I even got into my car. I’m done working for the day sir.
My co-worker locked his in his desk drawer when he went home for the night.
scrion@lemmy.world 5 days ago
This is absolutely correct. Heck, you’re free to deny that based on any reasoning, maybe the shoddy icon of the work app doesn’t match your phone wallpaper.
The phone is your private property, if an employer requires an app to be installed to do your job, they can provide a phone.
I would also never let corporate IT manage a device, e. g. a notebook connected to my private network at home.
Emerald@lemmy.world 5 days ago
I would also never let corporate IT manage a device, e. g. a laptop connected to my private network at home.
If you ever must, buy a new laptop. And use it on a guest wifi network.
scrion@lemmy.world 4 days ago
No, have the company buy a laptop, and if necessary, also have them buy the hardware that allows for proper network separation, if not already available.
Just another thing to be aware of.
toddestan@lemm.ee 4 days ago
I would also never let corporate IT manage a device, e. g. a laptop connected to my private network at home.
That’s pretty standard for working from home. I’m expected to use the company provided, managed laptop with my internet connection.
I figured so long as I made sure of things like there weren’t any open file shares and things like routers and IP cameras were password protected there wasn’t a whole they could see.
scrion@lemmy.world 4 days ago
I know it is somewhat of an accepted practice, and a lot of people lack the means or the knowledge to handle it any other way, but I’d still like to raise awareness that you’re basically inviting a foreign actor into your network.
The days were people would trust corporations, including their employers, to be generally benevolent and to do the right thing are long over.
MonkderDritte@feddit.de 5 days ago
Can’t you demand a company-provided device then? It’s their fault that you need those apps.
phoneymouse@lemmy.world 5 days ago
Yeah and they want to install some profile that gives them access and puts your internet connection through their VPN. My coworkers look at me like I’m crazy because I carry a work device and a personal device. Like, why would I give my employer access to all of my web traffic on my phone? You’re crazy if you don’t carry two devices.
NegativeLookBehind@lemmy.world 5 days ago
That’s a no for me dawg.
Mango@lemmy.world 4 days ago
Yeah that’s beyond fucked. That’s a major privacy issue.
Weirdfish@lemmy.world 4 days ago
The two consessions I’ve made are Teams, and the MFA software.
I am often running around to various sites and being able to use a quick chat is better than pulling out my laptop, and I turn it off when I’m off the click.
brax@sh.itjust.works 5 days ago
Yup same. It’s crazy how many people willing installed Intune and shit on their personal phone. If my company wants me to have that level of portability, then they’ll be buying a work phone for me and paying me overtime any time I’m forced to use it out of regular hours
jvw@lemmy.blahaj.zone 4 days ago
So much this. No freaking way I’m making my equipment discoverable in a lawsuit. If they want to contact me after hours they need to give me a phone.
Kit@lemmy.blahaj.zone 5 days ago
No modern MDM solution allows a company to access your personal data on BYOD. That’s why containerization of work profiles exist. Anything else would be a massive privacy scandal.
Company-owned devices, though, do have that level of access when MDM enrolled.
brax@sh.itjust.works 5 days ago
Intune installs as a device adminstration. I’m not sure how much I’d trust that on my personal device period.
BarbecueCowboy@lemmy.world 5 days ago
That’s a fair point. Microsoft says that they don’t… but, not that they can’t. It’s especially tricky on iOS.
Kit@lemmy.blahaj.zone 5 days ago
You’re talking about MDM in Intune which is only used on corporate owned devices. MAM is uses for personal devices and does not have device administration access. It’s in the name - Mobile Application Management.
learn.microsoft.com/…/intune-planning-guide#perso…
tinkling4938@lemmynsfw.com 5 days ago
Good luck if you run a de-googled ROM. I can’t install sandboxed Google Play Services inside the profile because its not approved. I could try and sideload it in, but I’d rather just go without.
brax@sh.itjust.works 4 days ago
This implies that the company has a competent IT team that rolls it out correctly, and that there won’t be some way to exploit it and dig in further than expected.
Also:
(From the site)
Lmao WHAT? It’s normal for users to do company shit on their personal phone? What kind of delusional Spongebob bullshit is that? Is the company gonna pay for data or subsidize the cost of my phone? Are they going to pay me to be on call if they expect me to of this shit outside of my working hours?
corsicanguppy@lemmy.ca 4 days ago
They can say what they like.
VERY few companies have been sued for being as big a bunch of lying dinks as Microsoft has.
We need to learn from this shit. Ads on login screens? Privacy issues? Solarwinds sploit letting Russian hackers get to the windows source? How many more red flags are our security groups going to ignore?
Potatos_are_not_friends@lemmy.world 5 days ago
I’d love to honestly believe that. But I still wouldn’t risk ever doing a BYOD with a company that forced me to install anything on my personal devices.
JackbyDev@programming.dev 5 days ago
Regardless, times I’ve tried to get access to work stuff on my phone I stopped because I had to agree to let my entire device be remotely wiped if they chose to. I had absolutely zero faith that they wouldn’t accidentally do it as a matter of procedure if/when I left the company so I didn’t do it.
Buddahriffic@lemmy.world 5 days ago
Not to mention the possibility of a disgruntled IT person deleting everything they can on their way out. Sure, it would be a whole can of worms for that person and they might regret it because of the consequences, but that wouldn’t bring my data back. Same if it was done accidentally because of incompetence.
conciselyverbose@sh.itjust.works 4 days ago
It honestly doesn’t matter to me.
Even if it’s an absolute certainty that there’s no possible way they can do harm, I’m unconditionally not willing to install anything on my personal device that isn’t for my personal use.