Live data from Hacker News

Apple explicitly asks employees to merge their personal and work accounts

twitter.com

171–180 of 361 posts

Re: Apple explicitly asks employees to merge their personal and work accounts

#171

Earlier quoted context omitted.

put this in your ~/.ssh/config Host personal.github.com HostName github.com User git IdentityFile ~/.ssh/id_rsa_personal then clone from git@personal.github.com/x.git for personal stuff

The host also doesn’t have to be a “real” host. You could do something like github-personal for example. Thanks for the assist fnord77!

[deleted]

Re: Apple explicitly asks employees to merge their personal and work accounts

#172
this sounds strange. Apple compels their workers to mix their personal and corporate accounts? If I would start to work at Apple and say, "please give me a separate account solely for work, I don't want to compromise or mix my and your data", they're going to say nope?

Almost sounds not believable. Any place I've ever worked at has if anything insisted to never bring private data into corporate environments precisely for security and legal reasons.

Re: Apple explicitly asks employees to merge their personal and work accounts

#173
post #103

Earlier quoted context omitted.

A new host with what hostname? Because git uses github.com for all repos.

put this in your ~/.ssh/config Host personal.github.com HostName github.com User git IdentityFile ~/.ssh/id_rsa_personal then clone from git@personal.github.com/x.git for personal stuff

How do you deal with submodules?

Re: Apple explicitly asks employees to merge their personal and work accounts

#174

Create a firewall between your personal and professional time. Another name for this is “setting healthy boundaries”. Always create new accounts for anything work related -- GitHub, Apple ID, whatever. Don’t install work apps on your personal phone. Don’t enrol your personal phone in corporate MDM. If they want you to use a device for work, ask them to give you one. Don’t do personal stuff on your work devices. Don’t…

I agree with most of this, but I'm curious about the specific case of Github. If I join a company, are there any big dangers to just having them add my personal GH account to their organizations or private repos, and then if I leave the company they can remove me again? This seems to be how a lot of developers in my orbit do things. (I mean any dangers at the account/permissions/privacy level - separate from "having…

My last couple jobs have been setup with GitHub or GitLab enterprise, which is on-prem and not connected to my personal account in any way.

Re: Apple explicitly asks employees to merge their personal and work accounts

#175
post #148

Create a firewall between your personal and professional time. Another name for this is “setting healthy boundaries”. Always create new accounts for anything work related -- GitHub, Apple ID, whatever. Don’t install work apps on your personal phone. Don’t enrol your personal phone in corporate MDM. If they want you to use a device for work, ask them to give you one. Don’t do personal stuff on your work devices. Don’t…

I get that in the "most secure boundary" sense, I should have a work provided phone for work stuff, BUT... I don't want to carry two phones. I'm part of a team that owns some responsibility for fixing things that break in the night. I find it freeing to be able to reply to a Slack or Outlook email while I'm with my kids at the playground. I see the above advice all the time, but I can't help but think it only relates…

> I find it freeing to be able to reply to a Slack or Outlook email while I'm with my kids at the playground.

You can spend as much time on work as you want, but you only get so much time with your children. OP's point is that you should guard the time you have and spend it wisely. Personally, I find carrying a second device and keeping things separate part of maintaining a healthy balance between my work and my personal time.

I also don't want my personal devices or projects tied up in some corporate legal proceeding, so I keep them separate for that reason as well.

Re: Apple explicitly asks employees to merge their personal and work accounts

#176

I’m slowly getting the impression that either there’s been a policy change at Apple in terms of customer privacy, or some other government pressure that’s causing all of these seemingly anti-privacy decisions to be made. I’m considering moving away from the Apple eco-system, any recommendations? I’m equally distrustful of Android (specifically Google). I feel like my only option is to compile and deploy my own versio…

Sailfish is pretty great. Devices get industry leading software update support (the only device they ever dropped got 7 years of updates). Great UI. It even supports a fairly good Android emulation mode if you want to run some Android apps. You can shut down the Android emulator when not in use for power usage and peace of mind.

EDIT: The devices are cheap too, but aren't slow. Typical cost is less than $250 including both the device and software license. The software is mostly open source, but there are a few licensed components. It is possible to use Sailfish without the proprietary bits for free.

Re: Apple explicitly asks employees to merge their personal and work accounts

#177

Earlier quoted context omitted.

put this in your ~/.ssh/config Host personal.github.com HostName github.com User git IdentityFile ~/.ssh/id_rsa_personal then clone from git@personal.github.com/x.git for personal stuff

How do you deal with submodules?

This is a limitation that I haven't really found a way through. I haven't tried too hard though because I've found that I can often just let the complicating set up have the 'plain' github.com host and use the custom host for the other set up. If I found that both professionally and personally I needed submodules, though, I'd probably be in trouble.

Also, if the submodules are public, the plain host will work fine because it doesn't matter what key you authenticate with.

Re: Apple explicitly asks employees to merge their personal and work accounts

#178

Create a firewall between your personal and professional time. Another name for this is “setting healthy boundaries”. Always create new accounts for anything work related -- GitHub, Apple ID, whatever. Don’t install work apps on your personal phone. Don’t enrol your personal phone in corporate MDM. If they want you to use a device for work, ask them to give you one. Don’t do personal stuff on your work devices. Don’t…

> Don’t install work apps on your personal phone.

100%. If a company wants me to install an app they'd better provide the phone.

> Edit: One more: don’t use corporate WiFi with your personal devices

Yep, thankfully we don't need to do that anymore with 4G/5G

Re: Apple explicitly asks employees to merge their personal and work accounts

#179
post #117

Earlier quoted context omitted.

The workplace admin can see which domains you visit when you use the work wifi.

This. Its not a problem until someone is looking to get rid of you. Then they dump the logs. I've seen people fired for watching DVDs at work. Conversly people watching youtube a lot and nothing happening. Early in the web days an admin assistant came to me because they clicked on something on the web and a bunch of pron windows started popping up. She panicked and turned off her computer and was wondering if it was…

I think the rule is people usually don't care unless it hits them directly at which point it is already game over.

I am not super religious about, but I do have boundaries. It is mostly like you said. It is all great until it isn't and employer is building a case against you.

Re: Apple explicitly asks employees to merge their personal and work accounts

#180
I feel like I might be crazy but… isn’t this an issue with Apple products at work in general?

I am issued a MacBook Pro and iPhone from my employer. The IT dept. configured them to connect to our corporate infrastructure: Exchange, MS365, VPN, Dropbox, Slack, printers, etc.

IT did not issue me a corporate iCloud account. I can add my personal iCloud account to these devices if I want, and then I’ll get all my music, messages, etc. on them. Convenient! Or, I can use my work email to set up a new clean iCloud account and use that instead. I know from conversations that a lot of my colleagues add their personal iCloud accounts to corporate devices, especially phones.

Based on the comments elsewhere in this thread, it seems the weird thing at Apple is that @apple.com email addresses can’t be used in iCloud. Which makes it a bit trickier for Apple employees to set up a new clean iCloud for work.

Post reply on HN