Live data from Hacker News

Don’t Put Your Work Email on Your Personal Phone

onezero.medium.com

231–240 of 278 posts

Re: Don’t Put Your Work Email on Your Personal Phone

#231

Earlier quoted context omitted.

Recently my employer has pushed for Okta Identity management. And somewhere in that plan they somehow thought appropriating employee personal phones was a good idea. Now we can't login to certain internal apps without a mobile device because Okta needs one time password/accepting push notification. And the otp/push notification should necessarily happen on a mobile device. Given that company hasn't provided any mobil…

Respond that you have no mobile phone to use for this notification.

or get a $20-$40 mobile phone just for that. no sim czrd needed.

Re: Don’t Put Your Work Email on Your Personal Phone

#232
post #173

Earlier quoted context omitted.

Nothing focuses the mind on sensible email retention policies like working at a company where all the email got subpoenaed.

And since discovery processes are often leaky, pPart of the onboarding at my company is the lesson that you shouldn't write anything in an email that you wouldn't be happy to have splashed all over the Wall Street Journal. So, for example, we try to choose names for applications that aren't going to give people the wrong idea, eg don't call your market manipulation tool TurboMarketManipulator, call it EnhancedOrderMa…

"Dance like no one is watching; Email like it may one day be read aloud in a deposition" -- Olivia Nuzzi

Re: Don’t Put Your Work Email on Your Personal Phone

#233
post #107

Earlier quoted context omitted.

Slack, on my phone? Are you nuts? If you want me after hours you call. Thats the only option you have.

Are you, with a straight face, saying that you'd rather receive a PHONE CALL than a notification from an app that you can set time-sensitive notification methods for (i.e. DND overnight, etc.)? I'm not fan of getting any kind of work message outside of working hours, but I'd FAR rather let my co-workers send me a slack message that I can ignore and/or deal with when I feel like it than call me on the phone. No one at…

> Are you, with a straight face, saying that you'd rather receive a PHONE CALL than a notification

Yes, a thousand times. People often write on company instant messaging just to ask things that can figure on their own.

Re: Don’t Put Your Work Email on Your Personal Phone

#234

Funny story (well OK, not so funny), I worked at a company where the FBI decided to pay a visit and investigate some potential naughtiness performed by members of the senior staff. They asked questions such as "Do you use your cell phone and personal email for company matters." Guess what a lot of them said, "Yep, have to." That immediately made their personal equipment, etc. in scope for the investigation and they c…

Recently my employer has pushed for Okta Identity management. And somewhere in that plan they somehow thought appropriating employee personal phones was a good idea. Now we can't login to certain internal apps without a mobile device because Okta needs one time password/accepting push notification. And the otp/push notification should necessarily happen on a mobile device. Given that company hasn't provided any mobil…

Can't you ask for a key fob OTP code generator device? Employees who work at sensitive client sites in many cases wouldn't be allowed to connect their phones to the Internet and may have restrictions placed on the usage of it. A separate hardware key generator (which is really a second factor) could possibly help (depending on the situation and need).

Re: Don’t Put Your Work Email on Your Personal Phone

#236
When I came in to my current company last year, the only way to get work email was by enrolling your phone in our "company portal" which was based on MS's Intune, part of their 365 offering, which by the way is horrible. There was no IT director and the lawyer and CFO who drove the plan had draconian rules, so bad that only a few people ever enrolled, and those who did regretted it, as their phones would be wiped several times as unqualified people "poked around" in the system. Exchange and outlook alone can handle email data safely with remote wipe of company data without total MDM and device 0wnership. I changed to that immediately, and in the past year we've needed to wipe only two people's phones, and it went without a hitch. MD is a tool that frequently is more than required for the situation.

Re: Don’t Put Your Work Email on Your Personal Phone

#237
post #168

Earlier quoted context omitted.

And that's why you don't talk to police; they could have just said no or refused to answer to make it harder for the investigators.

If the FBI comes in your office with a warrant and you refuse to speak I'm guessing they'll be taking your phone anyway and/or arresting you. Making things harder for investigators often means making things harder for yourself too. Winning an argument about your personal device's admissibility in court six months later isn't really winning is it?

>you refuse to speak I'm guessing they'll be taking your phone anyway and/or arresting you

If you refuse to speak without a lawyer there, they'll either a) move on because they're out fishing and you're not biting, or b) arrest you because they already have evidence but were looking for an easy confession to make it a slam dunk case for the prosecution. Once arrested, you can hire/be assigned a criminal defense attorney who will figure out if you have a good chance of being found innocent or can minimize prison time through a plea deal.

>Winning an argument about your personal device's admissibility in court six months later isn't really winning is it?

Not taking their bait and running your mouth will minimize the chances of the FBI being able to get a warrant for your device to begin with. It's not just about the phone, it's about your freedom, financial stability (you will lose your job and you can't pay your bills from prison, so say goodbye to your credit score), and employment opportunities (federal convictions don't bode well for job hunting).

Look up "don't talk to the police" on YouTube if you want more reasons why letting the FBI look at your phone is a bad idea.

Re: Don’t Put Your Work Email on Your Personal Phone

#238
post #112

Earlier quoted context omitted.

No joke, we recently went to a BYOD model with no "assistance". I'm expected to be available 24/7 in most cases. So I'm refusing to be available until I get some compensation.

Expect to be fired. That’s, unfortunately, the labor market reality.

I'm still waiting, 5+ years later...

Re: Don’t Put Your Work Email on Your Personal Phone

#239
post #213

Earlier quoted context omitted.

Why?

Maybe they don’t have great labor laws. Would your boss really believe you if you said you don’t have a cell phone? If you didn’t have legal protection (or a shit ton of other employment options) would you just tell him to fuck off?

No, we have great labour laws (employment protection, anti-discrimination, limits of business relationship well defined) but it is illegal to conceal identity in government and business matters (here in Turkey, you cannot avoid identifying yourself even while invoking the right against self-incrimination). Not like the UK or the US. Employer would think you try to conceal your essential contact info and will be able to refuse your contract.

In addition, all IMSIs and IMEIs are registered in a whitelist and tied to identity.

Re: Don’t Put Your Work Email on Your Personal Phone

#240

Earlier quoted context omitted.

> After hearing about that, I never attach anything work related to my personal equipment. There is too much liability. Wait, didn't you just softly admit to some (any?) wrongdoing?

The simple truth is, everyone breaks the law. I don't mean willingly, there are tons of laws that exist that even well versed attorneys are not aware of. You accidentally downloaded a song you didn't pay for? We'll that's a criminal wrong doing. You did it over the internet? Somehow we'll tack on a wire fraud charge while we're at it, because we're sure we can convince a grand jury to at least allow us to try you. No…

I don't know what country you reside, but in USA you are innocent until you are proven guilty. Prove of guilt is on the prosecution side, I don't have to prove I'm innocent. This and 5th amendment works magic against being wrongly accused; it also is indeed a deterrent to "carrier prosecutors" from trying to obtain prosecution via a good-old soviet style type of investigations: "give me a man, I give you a paragraph"

Edit: don't break the laws when you being prosecuted; and BTW: I don't drink alcohol at all. Period.

Post reply on HN