Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple explicitly asks employees to merge their personal and work accounts

twitter.com

Post reply on HN
Print view View original

161–170 of 361 posts

Re: Apple explicitly asks employees to merge their personal and work accounts

#161

Post by powersurge360 »

renerthr wrote: post #149
powersurge360 wrote: post #118

Earlier quoted context omitted.

The host also doesn’t have to be a “real” host. You could do something like github-personal for example. Thanks for the assist fnord77!

Newbie here. Where should I type `github-personal` ?

In the example, fnord77 posted, you can replace all the places that they used personal.github.com. It will be usable anywhere you would use ssh, including when going through a few tools that ultimately resolve to an ssh invocation. I won't copy the host block in .ssh/config but you could, for example:

`sshuttle -r my-cloud-server 0/0` for a poor man's vpn

`ssh some-enterprise-server` for when the server has a user unfriendly domain name that you don't want to bother remembering

`git clone git@github-personal:myusername/somerepo.git` when you want to clone using your personal key from GitHub.

There is the caveat, though, that you may have some nested dependencies that will use the plain ole every day host name in which case things will break for you. It rarely comes up, though, in my experience.

Re: Apple explicitly asks employees to merge their personal and work accounts

#162

Post by 3np »

kondro wrote: post #103
powersurge360 wrote: post #94

Earlier quoted context omitted.

You can set up a new host in your ssh config and specify a key different from your main account and it should swap your accounts based on the key. Additionally, you can set a git config to be included if you’re in a particular directory so that you can change your commit details. I’m on a mobile device so excuse the vagueness, but if there’s interest I can provide some resources and go more in depth.

A new host with what hostname? Because git uses github.com for all repos.

So one thing you can do is put the following in your ~/.gitconfig:

  [includeIf "gitdir:/home/john/corp/**"]
      path = .gitconfig-corp
And then ~/.gitconfig-corp:

  [user]
    email = john@example.com
    name = John Doe


  [url "git@github.com-corp"]
    insteadOf = git@github.com
Now all repos under the path /home/john/corp/ will use that config. Then you can put a new host in your SSH config:

  Host github.com-corp
    HostName github.com
    User git
    IdentityFile /home/john/.ssh/corp_github
This way you can have different e-mail address and name in your commit messages as well.

Due to the nature of git you can't scope it via GH URL (you can have many remotes in the same local repo). Though you can still manually rewrite when you add a remote with just the SSH config change, e.g.

  git clone git@github.com-corp:corp/foobar.git

Re: Apple explicitly asks employees to merge their personal and work accounts

#163

Post by 3np »

renerthr wrote: post #149
powersurge360 wrote: post #118

Earlier quoted context omitted.

The host also doesn’t have to be a “real” host. You could do something like github-personal for example. Thanks for the assist fnord77!

Newbie here. Where should I type `github-personal` ?

Just posted a more complete example above

https://news.ycombinator.com/item?id=28242339

Re: Apple explicitly asks employees to merge their personal and work accounts

#165

Post by userbinator »

shaggyfrog wrote: post #7

Create a firewall between your personal and professional time. Another name for this is “setting healthy boundaries”. Always create new accounts for anything work related -- GitHub, Apple ID, whatever. Don’t install work apps on your personal phone. Don’t enrol your personal phone in corporate MDM. If they want you to use a device for work, ask them to give you one. Don’t do personal stuff on your work devices. Don’t…

You also should not do work stuff on personal devices. Yes, this does include checking work email on your phone. Ask the company to give you one if your work requires that you do.

This may be slightly more controversial, but I would extend this firewall to conversations with coworkers --- don't tell them anything that could be used against you either, i.e. mentions of personal projects or accounts. I keep a clear "no real name" policy for personal things which are publicly visible --- including HN --- which avoids the delicate situation of people I know who have had their employer complain about stuff with their name on it, in their personal life, that someone else had found and didn't like.

Re: Apple explicitly asks employees to merge their personal and work accounts

#166

Post by janderland »

techrat wrote: post #155
Cd00d wrote: post #148

Earlier quoted context omitted.

I get that in the "most secure boundary" sense, I should have a work provided phone for work stuff, BUT... I don't want to carry two phones. I'm part of a team that owns some responsibility for fixing things that break in the night. I find it freeing to be able to reply to a Slack or Outlook email while I'm with my kids at the playground. I see the above advice all the time, but I can't help but think it only relates…

> I don't want to carry two phones. Ah, so you're willing to trade privacy for convenience.

In many circumstances, yes I am. :)

Re: Apple explicitly asks employees to merge their personal and work accounts

#167

Post by ashtonkem »

Spooky23 wrote: post #42
shaggyfrog wrote: post #7

Create a firewall between your personal and professional time. Another name for this is “setting healthy boundaries”. Always create new accounts for anything work related -- GitHub, Apple ID, whatever. Don’t install work apps on your personal phone. Don’t enrol your personal phone in corporate MDM. If they want you to use a device for work, ask them to give you one. Don’t do personal stuff on your work devices. Don’t…

This. +100 I used to think people were paranoid about this stuff until I ran a big email system. Most big companies have a department in compliance or counsel that reads your mail, either in response to a complaint or randomly depending on the industry. Accused of sexual harassment? Your JDate and Match emails support the idea that you’re lonely. An external entity thinks somebody embezzled money? Your late credit ca…

Plus, if you quit then recovering all those accounts is incredibly annoying.

Re: Apple explicitly asks employees to merge their personal and work accounts

#169

Post by [deleted] »

Manuel_D wrote: post #18

This would be a serious breach of privacy if true. But reading the tweets I'm not sure what the policy really is: > During a discovery thing 3yr ago, legal forced me to hand-over all my texts. They refused to let me delete anything, even "fully personal," even when I said "by fully personal I mean nudes." They said they're in their "permanent evidence locker This doesn't sound like company policy, and more like they…

[deleted]

Re: Apple explicitly asks employees to merge their personal and work accounts

#170

Post by manmal »

techrat wrote: post #155
Cd00d wrote: post #148

Earlier quoted context omitted.

I get that in the "most secure boundary" sense, I should have a work provided phone for work stuff, BUT... I don't want to carry two phones. I'm part of a team that owns some responsibility for fixing things that break in the night. I find it freeing to be able to reply to a Slack or Outlook email while I'm with my kids at the playground. I see the above advice all the time, but I can't help but think it only relates…

> I don't want to carry two phones. Ah, so you're willing to trade privacy for convenience.

Privacy vs convenience is a spectrum, the question is not _whether_ you trade between those, but rather _how much_.
Post reply on HN