Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Don’t Put Your Work Email on Your Personal Phone

onezero.medium.com

Post reply on HN
Print view View original

241–250 of 278 posts

Re: Don’t Put Your Work Email on Your Personal Phone

#241

Post by varikin »

kemiller2002 wrote: post #229
varikin wrote: post #215

Earlier quoted context omitted.

> All email in the company was saved indefinitely due to the archiving server Not at all. Many companies actually do the opposite. A previous company I worked for had a 30 day email deletion policy, though we could setup special folders for 13 month retention on emails. At another company, we were in the backup space and some enterprises had very restrictive backup and archive policies. One was to the point that our…

Sorry, that was sarcasm. It turns out that after the investigation started, they saved all emails indefinitely. I'm pretty sure that it was due to something going on with the investigation, but I can't say for sure. It just seemed a little too coincidental that both occurred so close to each other and one right after the other. It might be too that the FBI requested this, because they said they were trying to "catch…

Oh yeah, at the backup company, we worked on a Legal Hold feature where if an employee was tagged as being involved in a company lawsuit, all their backup files would be held indefinitely. You can delete shit after learning of a lawsuit, only before.

Re: Don’t Put Your Work Email on Your Personal Phone

#242

Post by davinic »

colechristensen wrote: post #194
mpeg wrote: post #168

Earlier quoted context omitted.

And that's why you don't talk to police; they could have just said no or refused to answer to make it harder for the investigators.

If the FBI comes in your office with a warrant and you refuse to speak I'm guessing they'll be taking your phone anyway and/or arresting you. Making things harder for investigators often means making things harder for yourself too. Winning an argument about your personal device's admissibility in court six months later isn't really winning is it?

This is terrible advice. Never talk to the police without a lawyer present. https://www.youtube.com/watch?v=d-7o9xYp7eE

Re: Don’t Put Your Work Email on Your Personal Phone

#243

Post by lbatx »

twic wrote: post #173
eschneider wrote: post #148

Earlier quoted context omitted.

Nothing focuses the mind on sensible email retention policies like working at a company where all the email got subpoenaed.

And since discovery processes are often leaky, pPart of the onboarding at my company is the lesson that you shouldn't write anything in an email that you wouldn't be happy to have splashed all over the Wall Street Journal. So, for example, we try to choose names for applications that aren't going to give people the wrong idea, eg don't call your market manipulation tool TurboMarketManipulator, call it EnhancedOrderMa…

I realize you are being somewhat facetious, but calling your (presumably unlawful) market manipulation tool EnhancedOrderManager isn't really the answer. Not building the unlawful tool is.

Re: Don’t Put Your Work Email on Your Personal Phone

#244

Post by MBCook »

joering2 wrote: post #240
kemiller2002 wrote: post #224

Earlier quoted context omitted.

The simple truth is, everyone breaks the law. I don't mean willingly, there are tons of laws that exist that even well versed attorneys are not aware of. You accidentally downloaded a song you didn't pay for? We'll that's a criminal wrong doing. You did it over the internet? Somehow we'll tack on a wire fraud charge while we're at it, because we're sure we can convince a grand jury to at least allow us to try you. No…

I don't know what country you reside, but in USA you are innocent until you are proven guilty. Prove of guilt is on the prosecution side, I don't have to prove I'm innocent. This and 5th amendment works magic against being wrongly accused; it also is indeed a deterrent to "carrier prosecutors" from trying to obtain prosecution via a good-old soviet style type of investigations: "give me a man, I give you a paragraph"…

> I don't know what country you reside, but in USA you are innocent until you are proven guilty.

Yep. And you can sit in jail for a year or so while they figure that out at your trial. Of course you’ll have lost your job by then. And paid your lawyer a fortune so you’re broke. And your family is kind of screwed up over the whole thing and the hardship it caused.

But you were innocent. And that’s all that mattered.

Re: Don’t Put Your Work Email on Your Personal Phone

#245

Post by lbatx »

joering2 wrote: post #240
kemiller2002 wrote: post #224

Earlier quoted context omitted.

The simple truth is, everyone breaks the law. I don't mean willingly, there are tons of laws that exist that even well versed attorneys are not aware of. You accidentally downloaded a song you didn't pay for? We'll that's a criminal wrong doing. You did it over the internet? Somehow we'll tack on a wire fraud charge while we're at it, because we're sure we can convince a grand jury to at least allow us to try you. No…

I don't know what country you reside, but in USA you are innocent until you are proven guilty. Prove of guilt is on the prosecution side, I don't have to prove I'm innocent. This and 5th amendment works magic against being wrongly accused; it also is indeed a deterrent to "carrier prosecutors" from trying to obtain prosecution via a good-old soviet style type of investigations: "give me a man, I give you a paragraph"…

Umm, kemiller2002 perfectly described the justice system of the good ole US of A. Once a prosecutor wants to get you, they stack all kinds of charges together to take your 1 year crime and make it a total of 10 years in prison, so you'll take a deal that gets you back to the original. At the Federal level, the conviction rate is 93%. Even if you are innocent, you can still be convicted.

> Edit: don't break the laws when you [sic] being prosecuted;

What? The whole point is you can't help but break a law.

Re: Don’t Put Your Work Email on Your Personal Phone

#246

Post by xtracto »

bklyn11201 wrote: post #122
flurdy wrote: post #86

Earlier quoted context omitted.

Tracking software?! I often have remote contracts and have never been suggested to install any presence or keyboard activity trackers. Sounds horrible. You are a professional, not a teenager. I think that would be such a red flag for me of how everything else is at that client that I would never agree to the contract in the first place. Since most of my clients allow BYOD I sometimes get asked to ensure I have antivi…

Upwork is a giant freelancer market. They pitch their tracking software as protection for both sides: proof of work. https://www.upwork.com/hiring/for-freelancers/using-the-upwo...

Doesn't CrossOver do that as well?

Re: Don’t Put Your Work Email on Your Personal Phone

#247

Post by Izkata »

giobox wrote: post #155

Remember 10 years ago when people were predicting/building technology to let our phones run multiple "virtual" phone instances on a hypervisor, solving the work phone/play phone single device dilemma? I'd still freaking love this feature ten years later. I don't want app level segregation of work and play, I want them in entirely different "instances" of my phone. > https://arstechnica.com/information-technology/2011…

Android has supported multiple independent user profiles for a few years now, including an ad-hoc Guest one that erases stuff when no longer used.

Re: Don’t Put Your Work Email on Your Personal Phone

#248

Post by [deleted] »

wtmt wrote: post #234
thisisit wrote: post #201

Earlier quoted context omitted.

Recently my employer has pushed for Okta Identity management. And somewhere in that plan they somehow thought appropriating employee personal phones was a good idea. Now we can't login to certain internal apps without a mobile device because Okta needs one time password/accepting push notification. And the otp/push notification should necessarily happen on a mobile device. Given that company hasn't provided any mobil…

Can't you ask for a key fob OTP code generator device? Employees who work at sensitive client sites in many cases wouldn't be allowed to connect their phones to the Internet and may have restrictions placed on the usage of it. A separate hardware key generator (which is really a second factor) could possibly help (depending on the situation and need).

[deleted]

Re: Don’t Put Your Work Email on Your Personal Phone

#249

Post by phjesusthatguy3 »

brokensegue wrote: post #63
phjesusthatguy3 wrote: post #32

Earlier quoted context omitted.

That is totally understandable, and I hope you don't get in trouble when law enforcement comes looking for your personal device that somehow got caught up in their list of devices to look for.

Please don't just copy and paste the same (FUD) comment all over the place

I promise I won't pass along FUD

Re: Don’t Put Your Work Email on Your Personal Phone

#250

Post by bradknowles »

wtmt wrote: post #234
thisisit wrote: post #201

Earlier quoted context omitted.

Recently my employer has pushed for Okta Identity management. And somewhere in that plan they somehow thought appropriating employee personal phones was a good idea. Now we can't login to certain internal apps without a mobile device because Okta needs one time password/accepting push notification. And the otp/push notification should necessarily happen on a mobile device. Given that company hasn't provided any mobil…

Can't you ask for a key fob OTP code generator device? Employees who work at sensitive client sites in many cases wouldn't be allowed to connect their phones to the Internet and may have restrictions placed on the usage of it. A separate hardware key generator (which is really a second factor) could possibly help (depending on the situation and need).

You can ask, sure.

That doesn't mean that the company will provide any such thing, much like they're clearly not providing company cell phones to the GP.

Post reply on HN