Live data from Hacker News

Apple explicitly asks employees to merge their personal and work accounts

twitter.com

281–290 of 361 posts

Re: Apple explicitly asks employees to merge their personal and work accounts

#281

Earlier quoted context omitted.

Major companies are getting sued continually. It probably isn’t an individual person, but a product that a team or department worked on that is involved in the lawsuit.

How often is 'continually'? Is there any way to estimate how many times per year is each major company sued?

A company like Apple probably deals with hundreds of major lawsuits per year. Must be thousands of smaller cases too.

Re: Apple explicitly asks employees to merge their personal and work accounts

#282

Earlier quoted context omitted.

Major companies are getting sued continually. It probably isn’t an individual person, but a product that a team or department worked on that is involved in the lawsuit.

How often is 'continually'? Is there any way to estimate how many times per year is each major company sued?

Not that I know of. A rough guess is they receive 3 new lawsuits daily.

Re: Apple explicitly asks employees to merge their personal and work accounts

#283

Earlier quoted context omitted.

> This doesn't sound like company policy, and more like they were subpoenaed or otherwise compelled to hand over communications. Yeah it feels like something is definitely missing here. If it's some kind of legal discovery, it's no shocking that the person cannot delete "personal stuff" before they hand it over, that would basically render pointless whatever they are doing with the phone.

The only way there should be a legal hold on a phone like that, is if it is her work phone, which she shouldn't be having nude pics of herself on in the first place.

> The only way there should be a legal hold on a phone like that, is if it is her work phone, which she shouldn't be having nude pics of herself on in the first place.

some people use their personal phone for work email, etc. and miss the fact that that makes the phone basically a company property - i.e. the company can wipe it remotely, etc.

Wrt. Apple requiring to not wipe out laptop before returning it i wonder how do they enforce it. In more than 2 decades i have never returned laptop without wiping it and wonder what can change that, if any.

Re: Apple explicitly asks employees to merge their personal and work accounts

#284

Earlier quoted context omitted.

>Even the current CSAM implementation is actually all about privacy if you read the details on how it’s implemented. Lol, no.

Read this: https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni... and tell me what's not about privacy with this? The alternative is upload everything unencrypted to providers who then scan there, which is how everything else works.

> The alternative is upload everything unencrypted to providers who then scan there

That's exactly how it should be. If a service provider wants to scan unencrypted documents for legal or PR reasons that's completely understandable. If instead they want to provide true E2EE and risk ending up in court with the regulators, that's also fine.

E2EE with black box on device scanning, however, is an absolutely terrible idea. It misleads regular people who almost certainly won't understand what's really going on. It's easily subverted by various governments as a condition of doing business. It blurs the line regarding ownership and unlawful search, thereby eroding future expectations of civil rights.

Apple should just be honest about the fact that they aren't comfortable providing a full E2EE solution for various regulatory or political reasons.

Re: Apple explicitly asks employees to merge their personal and work accounts

#285
post #273

Earlier quoted context omitted.

I find it harmful to jump to a conclusion too early and blame the victim. Forcing someone to merge these accounts can take many forms and Apple has thousands of different teams and managers. Even if there was zero explicit or implicit force in place, the circumstances can still be non-obvious. If you get handed a MacBook, you're basically forced to work with an iCloud account. And the fact that making the mistake of…

> hands over data that was created before and outside the employment definitely points towards Apple abusing their position of power here. Trust me, Apple legal would rather not dig through your personal information to find nuggets to hand to opposing counsel during discovery. But if there's work information in your personal account, and Apple is legally compelled to go through accounts with work information as part…

People will call them awful and disrespectful, for not providing explicit instructions to use a new or work account, and warning everything in the account may be impounded.

Re: Apple explicitly asks employees to merge their personal and work accounts

#286

Earlier quoted context omitted.

> Don't do vacation research, medical research, social media, Spotify, anything personal at all on your work device. Ever. That's quite extreme. What is your threat model?

Is it really that extreme? Threat model, staying employed / defend against idle gossip. Company surveillance (of their employees) is very real and unlike 'google reads all my emails' they actually can and do and it is a person they actually know whos private information they are viewing. I dont even need to get into the chance of every piece of information being in a lawsuit or get into the lack of any controls aroun…

Wow, what kind of workplace did you work in?

Here in Germany I think gathering many of these facts would simply be illegal.

Re: Apple explicitly asks employees to merge their personal and work accounts

#287

Earlier quoted context omitted.

> Many with the ability to do so have confirmed it. Would you happen to have a link handy? I don't mean to be adversarial. That screenshot is just so incredibly outlandish that it comes across as something from an overdone movie and I honestly find it difficult to take at face value. Basic human decency and social norms aside, I just can't comprehend what manager would fail to recognize something like that committed…

Sure, here's one: https://twitter.com/vllry/status/1427360794925158425 . I am not joking when I say many, many people had access to this–while I am not at Apple, I know people who are and they could see it too. (FWIW, I was on the Radar team previously, and this is exactly what it looks like–faking it this exactly would require a lot of effort.)

Thanks for that. Wow. That's really unbelievable honestly. This followup from that link sums it up nicely:

> I admit I looked it up thinking "this can't possibly be real, no one would leave that paper trail".

> I was wrong.

Re: Apple explicitly asks employees to merge their personal and work accounts

#288

Create a firewall between your personal and professional time. Another name for this is “setting healthy boundaries”. Always create new accounts for anything work related -- GitHub, Apple ID, whatever. Don’t install work apps on your personal phone. Don’t enrol your personal phone in corporate MDM. If they want you to use a device for work, ask them to give you one. Don’t do personal stuff on your work devices. Don’t…

aaand nothing of this is relevant when WFH

Re: Apple explicitly asks employees to merge their personal and work accounts

#289
post #24

This would be a serious breach of privacy if true. But reading the tweets I'm not sure what the policy really is: > During a discovery thing 3yr ago, legal forced me to hand-over all my texts. They refused to let me delete anything, even "fully personal," even when I said "by fully personal I mean nudes." They said they're in their "permanent evidence locker This doesn't sound like company policy, and more like they…

> Do you need to link your personal accounts with family photos and whatnot? Nope. You can create a separate iCloud account just for work. I did that during my time there. I always maintained a separate work phone, and used work icloud account for that. The folks complaining are the ones who just didn't do that, and added 'work data' on their personal account, which ofcourse they will have to hand over if subpoenaed.

Having a separate account for work and private stuff should be common sense. No surprise your employer wants to access it when you used it for work related reasons. This can be as trivial as some business contacts having your mail and trying to contact Apple.

Re: Apple explicitly asks employees to merge their personal and work accounts

#290

Earlier quoted context omitted.

Okay, that makes a lot more sense. To be frank, this twitter thread seems sensationalist if reality is closer to "I didn't bother to create a separate work account" rather than "Apple asked me to merge my personal account".

I find it harmful to jump to a conclusion too early and blame the victim. Forcing someone to merge these accounts can take many forms and Apple has thousands of different teams and managers. Even if there was zero explicit or implicit force in place, the circumstances can still be non-obvious. If you get handed a MacBook, you're basically forced to work with an iCloud account. And the fact that making the mistake of…

I’ve been given a MacBook on the first day at work, there was zero chance I would log in with my own iCloud ID - I created a new one.
Post reply on HN