Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple explicitly asks employees to merge their personal and work accounts

twitter.com

Post reply on HN
Print view View original

201–210 of 361 posts

Re: Apple explicitly asks employees to merge their personal and work accounts

#201

Post by stjohnswarts »

kondro wrote: post #54
MattGaiser wrote: post #28

Earlier quoted context omitted.

I'm really surprised at the number of personal GitHub accounts that are being used in my org and at others. I guarantee their access isn't being removed when they depart. And it seems common at a ton of companies.

Because GitHub makes it hard (i.e. impossible) to manage multiple accounts. No account switching on the website, no easy way to use multiple SSH keys to access multiple accounts when using Git.

Why should they? All that stuff is easily managed locally under your own control.

Re: Apple explicitly asks employees to merge their personal and work accounts

#202

Post by smabie »

techrat wrote: post #155
Cd00d wrote: post #148

Earlier quoted context omitted.

I get that in the "most secure boundary" sense, I should have a work provided phone for work stuff, BUT... I don't want to carry two phones. I'm part of a team that owns some responsibility for fixing things that break in the night. I find it freeing to be able to reply to a Slack or Outlook email while I'm with my kids at the playground. I see the above advice all the time, but I can't help but think it only relates…

> I don't want to carry two phones. Ah, so you're willing to trade privacy for convenience.

You are too

Re: Apple explicitly asks employees to merge their personal and work accounts

#203

Post by perryizgr8 »

XorNot wrote: post #195
kodah wrote: post #156

Earlier quoted context omitted.

This is where I think the new line of Linux phones need to put in a lot of work. Properly sandboxing applications and defending against corporate snoopers should be a top priority of any open source phone OS.

I mean you need an undetectable virtual machine for a phone really. That's the reality: I'm content with my phone running some type of hard to crack secure element so companies can convince themselves it's secure, but what I want is that thing isolated and it's network and cellular access gated.

This is what Samsung Knox is. I use it for my company email and slack etc.

Re: Apple explicitly asks employees to merge their personal and work accounts

#204

Post by fenomas »

Silhouette wrote: post #146
fenomas wrote: post #126

Earlier quoted context omitted.

I agree with most of this, but I'm curious about the specific case of Github. If I join a company, are there any big dangers to just having them add my personal GH account to their organizations or private repos, and then if I leave the company they can remove me again? This seems to be how a lot of developers in my orbit do things. (I mean any dangers at the account/permissions/privacy level - separate from "having…

There have definitely been cases where hosting services have allowed someone to link a personal account into a corporate one belonging to their employer, then at the end of the employment the corporate account has been given control of everything within the personal account. I don't recall whether GitHub specifically was one of the services mentioned, but I would avoid creating that kind of link on any hosting servic…

Ah, great point. I remember hearing about a case like that, though I also don't remember which specific service it was.

Re: Apple explicitly asks employees to merge their personal and work accounts

#205

Post by XorNot »

derefr wrote: post #190
barsonme wrote: post #151

Earlier quoted context omitted.

What’s difficult about it? Personally, I like knowing that my personal GitHub credentials stay only on my personal devices and my work credentials stay only on my work devices. I never have to worry about the two mixing and any problems that might arise.

Presuming you also contribute to FOSS projects, and that you additionally use the FOSS you work on personally at work , there will come a point at which a bug you find at work will require you to fix the upstream FOSS project on your work laptop. At that point, getting the git-commit attribution correct gets annoying.

This isn't too hard - Git supports folder path separated config settings, so usually I just have a "foss" and "work" profile.

More annoying can be commit signing, but this is actually something GPG has baked right into it - I issue and sign a new key with my work email address while I'm there, and when I quit revoke the key as superceded (and set the expiry to roughly my contract renewal period/performance eval period).

The real problem is corporate IT doesn't understand encryption or signing beyond how their vendors pitch it too them as "secure" so trying to extend any of this to actually support business processes is a losing battle.

Re: Apple explicitly asks employees to merge their personal and work accounts

#206

Post by mattigames »

dylan604 wrote: post #197
lmm wrote: post #182

Earlier quoted context omitted.

If you're trying to get promoted by doing unpaid overtime and/or unpaid oncall shifts, you're a class traitor screwing over your colleagues. Help them by setting healthy boundaries even if you don't actually need them yourself.

This is just not a good outlook. Class traitor is ridiculous. If someone is of marrying age and/or child rearing age, are they a traitor to their class because they choose to work instead of whatever your preconceived notions are? People are different and have different work/life conditions than you. You're just going to need to come to terms with this.

The key term in their comment is "unpaid overtime", that's the part that makes them a traitor to their class.

Re: Apple explicitly asks employees to merge their personal and work accounts

#207

Post by renerthr »

pgeorgi wrote: post #194
renerthr wrote: post #141

Earlier quoted context omitted.

I checked the parent tweet but still don't understand what you mean. Could you please elaborate?

"legal forced me" and "permanent evidence locker" = these texts are part of a legal discovery process (e.g. somebody sued Apple and their lawyers get a certain kind of access to Apple's corporate data) If there's value for the other side to present the boob pictures as evidence in trial (e.g. in an attempt of character assassination), it will be rather hard to have them not passed around in court now that they're par…

> their lawyers get a certain kind of access to Apple's corporate data

Whose lawyers? The plantiff's? Or the defendant (Apple)'s?

Re: Apple explicitly asks employees to merge their personal and work accounts

#208

Post by dylan604 »

renerthr wrote: post #189
Spooky23 wrote: post #42

Earlier quoted context omitted.

This. +100 I used to think people were paranoid about this stuff until I ran a big email system. Most big companies have a department in compliance or counsel that reads your mail, either in response to a complaint or randomly depending on the industry. Accused of sexual harassment? Your JDate and Match emails support the idea that you’re lonely. An external entity thinks somebody embezzled money? Your late credit ca…

> Most big companies have a department in compliance or counsel that reads your mail They read the email of your personal email account if you use it in the company-owned phone? Or they read the email of your company email account? In other words, when you say 'This. +100', what do you mean by 'This'? The parent comment raised many points and I'm confused as to which one you're referring to. Edit: To be clear, it's m…

+100 to the entire way of thinking from the original post. work/personal should be treated like church/state where they are kept separate.

yes, if you read your personal email on a corp device, then there's a good chance corp is reading your personal emails. and 100% yes, the corp can/do read your corp email. they are required to keep copies of every email sent by employees, so just assume at some point some corp lawyer can/will be reading them.

Re: Apple explicitly asks employees to merge their personal and work accounts

#209

Post by brokenmachine »

lmm wrote: post #182
Cd00d wrote: post #148

Earlier quoted context omitted.

I get that in the "most secure boundary" sense, I should have a work provided phone for work stuff, BUT... I don't want to carry two phones. I'm part of a team that owns some responsibility for fixing things that break in the night. I find it freeing to be able to reply to a Slack or Outlook email while I'm with my kids at the playground. I see the above advice all the time, but I can't help but think it only relates…

If you're trying to get promoted by doing unpaid overtime and/or unpaid oncall shifts, you're a class traitor screwing over your colleagues. Help them by setting healthy boundaries even if you don't actually need them yourself.

I agree with you in principle, but you come off as a dick for the way you expressed it.

Re: Apple explicitly asks employees to merge their personal and work accounts

#210

Post by Razengan »

lmm wrote: post #182
Cd00d wrote: post #148

Earlier quoted context omitted.

I get that in the "most secure boundary" sense, I should have a work provided phone for work stuff, BUT... I don't want to carry two phones. I'm part of a team that owns some responsibility for fixing things that break in the night. I find it freeing to be able to reply to a Slack or Outlook email while I'm with my kids at the playground. I see the above advice all the time, but I can't help but think it only relates…

If you're trying to get promoted by doing unpaid overtime and/or unpaid oncall shifts, you're a class traitor screwing over your colleagues. Help them by setting healthy boundaries even if you don't actually need them yourself.

Maybe they want to ascend to a higher class?
Post reply on HN