Live data from Hacker News

Don’t Put Your Work Email on Your Personal Phone

onezero.medium.com

101–110 of 278 posts

Re: Don’t Put Your Work Email on Your Personal Phone

#102
Funny story (well OK, not so funny), I worked at a company where the FBI decided to pay a visit and investigate some potential naughtiness performed by members of the senior staff. They asked questions such as "Do you use your cell phone and personal email for company matters." Guess what a lot of them said, "Yep, have to." That immediately made their personal equipment, etc. in scope for the investigation and they confiscated it. Interestingly enough, any crime discovered while in pursuit of another crime can also be prosecuted. (Guess how they leverage people to flip.)

After hearing about that, I never attach anything work related to my personal equipment. There is too much liability. Anytime that anyone even whispers about me using anything I own for company use, the answer is a resounding "No." You honestly, don't know who you are really working with/for and what they are actually like.

Re: Don’t Put Your Work Email on Your Personal Phone

#104

I'm a remote contractor. Usually, if my customer wants me to install some tracking software (recording you're present in front of PC, tracking mouse/keyboard activity, etc) I agree only on one term: they need to send me a machine with this software so I can use it while doing work. I lose customers this way, though most of the time people agree to not have this kind of software involved instead of rejecting offer alt…

That's crazy. What kind of companies are these, or rather; what kind of country is this? North Korea?

Re: Don’t Put Your Work Email on Your Personal Phone

#105

>When you add a work email address to your phone, you’ll likely be asked to install something called a Mobile Device Management (MDM) profile ...what? The Outlook app containerizes your email accout specifically so that you dont have to do this. Your company can remotely wipe your work account and only your work account. Of course MDM gives access to your phone - thats its whole purpose.

MDM gets applied if you want to access your exchange server with the default iOS apps because those apps don't have remote management built in. If you use the Microsoft apps, you don't need to have an MDM applied because those apps handle the remote management functionality themselves.

Thats kind of my point. MDM has an administrative and capital cost. The Outlook app is free for everyone and doesnt get IT involved in your personal phone.

The use-case for MDM is not to get email on personal phones - thats the right tool for the wrong job. MDM is for simplifying the deployment and management of corporate phones.

Re: Don’t Put Your Work Email on Your Personal Phone

#107
post #96
post #21

This is certainly a very good reason to not put your work account on your personal phone, but my primary reason not to is that it's my device and I pay for the service. If my company needs me to be available beyond my 9-5 workday, they can pay for it. If there's an emergency, they can always call, but I don't like being "always on".

Exactly- if work doesn't pay, they don't get to play on my phone. I'd be willing to check work email sporadically, and it's unfortunate that doing so in any capacity means allowing an unknown admin "wipe my phone" privileges. Companies don't handle that stuff with any sort of finesse and mistakes happen. Ultimately email on a phone may be a moot point for software developers: We use more independent chat apps like Sl…

Slack, on my phone? Are you nuts?

If you want me after hours you call. Thats the only option you have.

Re: Don’t Put Your Work Email on Your Personal Phone

#108

If your employer subscribes to an ethical model which permits them to abuse MDM, viewing your web history and tracking your location, you need to do more than remove your personal device from their control. You must find a new employer—preferably while you make public this repulsive behavior.

My employer and I are bound by a working agreement negotiated through my union. The contract has privacy protections for many different types of personal information and data that could potentially be accessed or collected by the company. Think location data, data at rest on both personal and company devices, and network traffic.

Here’s the big issue I still have even with all of these ‘legal’ protections. The definitions are not highly technical and thus open to interpretation. Also, to my knowledge none of the clauses have been tested in the real world. How in the world am I supposed to feel secure that a legal agreement stops them from doing what is still technically possible? Even if they can’t use the data collected against me as admissible evidence in a disciplinary action what’s to stop them from collecting data anyway and then if they find something they don’t like they harass me in other ways?

The issue is in MDM systems. Until we design them in a way preventing access to certain classes of information through technical means then no type of agreement or ethical code is safe. The device must be treated as hostile. We can’t simply rely on ‘ethics’ because, as we’ve seen play out time after time in America, corporations lose no sleep over saying one thing and doing another.

Re: Don’t Put Your Work Email on Your Personal Phone

#110

If your employer subscribes to an ethical model which permits them to abuse MDM, viewing your web history and tracking your location, you need to do more than remove your personal device from their control. You must find a new employer—preferably while you make public this repulsive behavior.

Agreed. MDM usually gets set up when you're a new hire and may not know what the organization is really like yet. Additional note: it's a shame Glassdoor is so easy for employers to game.
Post reply on HN