41–50 of 70 posts
It doesn't have to be a phone, though. Yubikey is good and affordable.
[flagged]
Hardware keys should be provided to all employees, because employees will use it for both personal and corporate authentication. It's a true win/win scenario.
Earlier quoted context omitted.
In the past I believe this was so that if the phone was lost it could be remote wiped for security. I agree that's a hard no for personal devices though.
It can be less intrusive, but it depends how the person in charge of mobility set things up and the MDM tool capabilities. On Android you can define a device as corporate owned, which mean the employer have full control over the device, or it can be user owned and instead of taking control of the entire device, it makes a sandbox in which the corporate data resides, and the mobility admin can only touch what is insid…
[flagged]
Personal devices should _never_ be used for work. That allows the line between self-owned work and employer-owned work to be thin/non-existent. That can make it a lot easier for your employer to own your personal projects. Don't do it. Don't use your corporate laptop for personal things, and don't use your personal equipment for corporate things. If they want to use 2FA, they need to provide the 2FA device.
i might be mistaken but i think a lot of the compliance standards go along the lines of do not mix personal and business equipment; to me this includes Phones - and it really should include a separate vlan (at least) for distributed employees.
What’s that gonna achieve when entire firm has zero trust policy?
[flagged]
Why should anyone "be grateful" for the salary they are owed? They fulfilled their side of the contract.
For that matter, why should employees have to waste their own salary if their employers can't afford a phone to run the apps they require? They should be looking around and getting ready to jump ship.