Live data from Hacker News

Don’t Put Your Work Email on Your Personal Phone

onezero.medium.com

221–230 of 278 posts

Re: Don’t Put Your Work Email on Your Personal Phone

#221
post #107

Earlier quoted context omitted.

Slack, on my phone? Are you nuts? If you want me after hours you call. Thats the only option you have.

Are you, with a straight face, saying that you'd rather receive a PHONE CALL than a notification from an app that you can set time-sensitive notification methods for (i.e. DND overnight, etc.)? I'm not fan of getting any kind of work message outside of working hours, but I'd FAR rather let my co-workers send me a slack message that I can ignore and/or deal with when I feel like it than call me on the phone. No one at…

[deleted]

Re: Don’t Put Your Work Email on Your Personal Phone

#223
post #168

Earlier quoted context omitted.

And that's why you don't talk to police; they could have just said no or refused to answer to make it harder for the investigators.

If the FBI comes in your office with a warrant and you refuse to speak I'm guessing they'll be taking your phone anyway and/or arresting you. Making things harder for investigators often means making things harder for yourself too. Winning an argument about your personal device's admissibility in court six months later isn't really winning is it?

the whole point of the above anecdote was that by answering the questions, you've expanded their scope.

if they're going to arrest you, there's nothing you're going to say to talk them out of it. all you can do by talking is convince them to arrest you.

you can't talk them out of anything they were already going to do; they're just talking to you because so many folks think the way you do, that they're somehow clever enough to say the thing that prevents the arrest.

> Winning an argument about your personal device's admissibility in court six months later isn't really winning is it?

it is if that means you don't go to jail.

your advice is wildly dangerous, please stop.

Re: Don’t Put Your Work Email on Your Personal Phone

#224

Funny story (well OK, not so funny), I worked at a company where the FBI decided to pay a visit and investigate some potential naughtiness performed by members of the senior staff. They asked questions such as "Do you use your cell phone and personal email for company matters." Guess what a lot of them said, "Yep, have to." That immediately made their personal equipment, etc. in scope for the investigation and they c…

> After hearing about that, I never attach anything work related to my personal equipment. There is too much liability. Wait, didn't you just softly admit to some (any?) wrongdoing?

The simple truth is, everyone breaks the law. I don't mean willingly, there are tons of laws that exist that even well versed attorneys are not aware of. You accidentally downloaded a song you didn't pay for? We'll that's a criminal wrong doing. You did it over the internet? Somehow we'll tack on a wire fraud charge while we're at it, because we're sure we can convince a grand jury to at least allow us to try you. Now you're looking at a massive fine, and say 5-10 years. Sure you don't want to help us? By the way, if you've never been on the other end of an FBI agent interrogation, it's scary. Like really scary. I had a friend once show me briefly what it's like, and I never want to come near that again.

Here's the thing about lawsuits, even if you're innocent, you're still probably ruined. It's not like on T.V., lawsuits take years, even criminal ones. If you encounter a law enforcement agent (say a prosecutor), that wants to make a career off of something you're involved in, you're screwed. At best, you'll probably be bankrupt and emotionally destroyed. Imagine this, they bring charges against you, and if you get a public intoxication, or heaven forbid a DUI, you go to jail for the next 3 years while awaiting trial and for something that you might not have even committed. Don't believe me, read a case document on conditions of release. They list off a ton of things that can send you back to jail while awaiting trial.

Re: Don’t Put Your Work Email on Your Personal Phone

#226
post #213

Earlier quoted context omitted.

Will not work here in Turkey.

Why?

Maybe they don’t have great labor laws. Would your boss really believe you if you said you don’t have a cell phone? If you didn’t have legal protection (or a shit ton of other employment options) would you just tell him to fuck off?

Re: Don’t Put Your Work Email on Your Personal Phone

#227

Funny story (well OK, not so funny), I worked at a company where the FBI decided to pay a visit and investigate some potential naughtiness performed by members of the senior staff. They asked questions such as "Do you use your cell phone and personal email for company matters." Guess what a lot of them said, "Yep, have to." That immediately made their personal equipment, etc. in scope for the investigation and they c…

Recently my employer has pushed for Okta Identity management. And somewhere in that plan they somehow thought appropriating employee personal phones was a good idea. Now we can't login to certain internal apps without a mobile device because Okta needs one time password/accepting push notification. And the otp/push notification should necessarily happen on a mobile device. Given that company hasn't provided any mobil…

We use Okta where I work but we are allowed to install Okta Verify without installing the MDM profile.

If we want to do work email on our phone, we do have to submit to MDM. 99% of the employees I know refused to allow MDM on their personal phone, and the company was OK with that. They made a few managers carry work issued 2nd phones.

We also use Slack and are allowed to use that without MDM so that works for a lot of us.

My wife has to carry a 2nd phone for work, she's got 2 iPhones and it's very annoying, but preserves the separation.

Re: Don’t Put Your Work Email on Your Personal Phone

#228

Funny story (well OK, not so funny), I worked at a company where the FBI decided to pay a visit and investigate some potential naughtiness performed by members of the senior staff. They asked questions such as "Do you use your cell phone and personal email for company matters." Guess what a lot of them said, "Yep, have to." That immediately made their personal equipment, etc. in scope for the investigation and they c…

Recently my employer has pushed for Okta Identity management. And somewhere in that plan they somehow thought appropriating employee personal phones was a good idea. Now we can't login to certain internal apps without a mobile device because Okta needs one time password/accepting push notification. And the otp/push notification should necessarily happen on a mobile device. Given that company hasn't provided any mobil…

For this specific case, you can actually use other otp apps such as Google Authenticator with okta. See https://help.okta.com/en/prod/Content/Topics/Security/MFA.ht... You'll also have to unselect push notifications somewhere, don't remember exactly where, but it was apparent in the ui.

Re: Don’t Put Your Work Email on Your Personal Phone

#229

Earlier quoted context omitted.

In the FBI's defense, they did return all the equipment after they were done with it (if I remember correctly within like a day too). Funny enough though, one guy thought it was strange that after they gave his phone back, all of his text messages from then on were suddenly emailed to his work email also. Wouldn't happen to be that all email in the company was saved indefinitely due to the archiving server?

> All email in the company was saved indefinitely due to the archiving server Not at all. Many companies actually do the opposite. A previous company I worked for had a 30 day email deletion policy, though we could setup special folders for 13 month retention on emails. At another company, we were in the backup space and some enterprises had very restrictive backup and archive policies. One was to the point that our…

Sorry, that was sarcasm. It turns out that after the investigation started, they saved all emails indefinitely. I'm pretty sure that it was due to something going on with the investigation, but I can't say for sure. It just seemed a little too coincidental that both occurred so close to each other and one right after the other. It might be too that the FBI requested this, because they said they were trying to "catch the other party involved" (not part of the company).

Re: Don’t Put Your Work Email on Your Personal Phone

#230
> These tools often allow administrators to pry into how the phone is used as well, retrieving call logs, SMS history, and in the most extreme cases, full logs of web browsing.

I doubt any of these (call logs, SMS, web history) are possible on iOS even with an MDM profile installed, unless it's call logs from the company's own VoIP app or web history from its own browser app. SMS? Nope. On Android all these are possible for any app that's given the permissions, even without MDM.

Can anyone who knows more validate or confirm the veracity of this claim in the article?

Post reply on HN