I miss out on a lot of nice MacOS features because I refuse to sign into my personal iCloud account on my work mac, even though we are allowed to do so.
Oh well. Gotta draw the line somewhere I guess.
iPhone Mirroring at work may expose employees’ personal information
51–60 of 80 posts
Re: iPhone Mirroring at work may expose employees’ personal information
#52Earlier quoted context omitted.
I was just discussing this with a friend. The one place where I’m willing to fudge things (corporate policies permitting) is putting my personal calendar on a work machine, work calendar on my personal systems, mostly because it makes dealing with the interface between the two simpler (plus then I get meetings showing up on my watch).
Depending on your calendaring system(s), you can subscribe to your work calendar on your personal account, and vice versa. Although you should be careful about the latter! My life is simple enough that I just dupe the occasional MTWTF personal events as "reserved blocks" onto my work calendar, and maintain my off-hours and SS personal calendar separately.
You can share the free/busy information only.
Re: iPhone Mirroring at work may expose employees’ personal information
#53Earlier quoted context omitted.
I’d say generally for most people, at least anecdotally, their work laptop is their only laptop because they’re expensive and have good specs. Especially for Apple products (which is the majority of the share of hardware in this anecdote), it’s natural to want and expect the continuity between devices. Employers usually allow this or don’t explicitly forbid it, and most employees aren’t exactly security conscious or…
This is true for me. I have a personal desktop, but for mobility (laptop) my work issued MacBook M1 Pro is the only thing I have. There's no reason at all to purchase a personal laptop since my company is fully remote and they purchased the laptop from apple and had it directly sent to me, and have never required me to install any kind of monitoring software or control software on it at all.
"Directly from Apple" does not preclude monitoring and control, but it would've notified you on first boot if it were MDM enrolled.
Re: iPhone Mirroring at work may expose employees’ personal information
#54Don’t you need to be signed in to the same iCloud account on both your laptop and phone to use this feature? That would mean that in order to encounter this issue you already need to be using a work account on a personal device, or vice versa. Since that’t the case I fail to see how this is a large vulnerability. The article doesn’t seem to address this point (possible I just missed this).
It goes both ways.
You must be signed in to the same iCloud account on a personal device and a work device in order to use a feature? Operational security isn't worth the hassle: most people will just do whatever it takes to do the thing. And when they are finished, it's not as if they are likely to sign back out on either device.
Re: iPhone Mirroring at work may expose employees’ personal information
#55Earlier quoted context omitted.
Why, because there’s not as much work to do debugging installers and malware as there is with Windows?
As a consultant, I work with Linux, macOS and Windows. Depends on the client and the project. I can't remember last time I even heard about a malware in someone else's Windows machine, let alone my Windows machine. I don't know what you mean by debugging installers. Sounds like an outdated opinion. Just like those "lol PHP bad" regurgitations and linking outdated articles about it.
The sysadmins at my job frequently find malware artifacts on our servers, because we exclusively use Windows server. And the expectation is you RDP in to get stuff done, which means there's a big potential for human failure.
Also most Windows software is just taken off the web and installed with administrator privileges. Sure, there are package managers. In practice, they're rarely used on Windows.
From a technical standpoint, Windows isn't "that bad" at allowing malware. From a culture standpoint, almost nothing has changed since the 90s. Linux and Mac have a different culture.
Re: iPhone Mirroring at work may expose employees’ personal information
#56Earlier quoted context omitted.
This isn't about tethering. It's about mirroring which requires the iPhone and Mac to be on the same WiFi. And you can't route data from the Mac through the phone via mirroring
I don't think iPhone Mirroring requires both devices being on the same (or in fact any) Wi-Fi network. It does however require them to be signed in to the same iCloud account.
I’ve noticed this as well, but actually not sure how the feature works if not over the LAN. Is it bluetooth? Or synced over icloud?
Re: iPhone Mirroring at work may expose employees’ personal information
#57Earlier quoted context omitted.
This isn't about tethering. It's about mirroring which requires the iPhone and Mac to be on the same WiFi. And you can't route data from the Mac through the phone via mirroring
I don't think iPhone Mirroring requires both devices being on the same (or in fact any) Wi-Fi network. It does however require them to be signed in to the same iCloud account.
Pairing requires bluetooth, streaming requires WiFi,
https://support.apple.com/en-us/120421
Under iPhone Mirroring system requirements
Your iPhone and Mac are signed in to the same Apple Account using two-factor authentication.
Your iPhone and Mac have Bluetooth and Wi-Fi turned on.
Your iPhone is not sharing its cellular connection (Personal Hotspot is not in use).
Your Mac is not sharing its internet connection or using AirPlay or Sidecar.
Re: iPhone Mirroring at work may expose employees’ personal information
#58Earlier quoted context omitted.
I’d say generally for most people, at least anecdotally, their work laptop is their only laptop because they’re expensive and have good specs. Especially for Apple products (which is the majority of the share of hardware in this anecdote), it’s natural to want and expect the continuity between devices. Employers usually allow this or don’t explicitly forbid it, and most employees aren’t exactly security conscious or…
This is true for me. I have a personal desktop, but for mobility (laptop) my work issued MacBook M1 Pro is the only thing I have. There's no reason at all to purchase a personal laptop since my company is fully remote and they purchased the laptop from apple and had it directly sent to me, and have never required me to install any kind of monitoring software or control software on it at all.
Good luck when your laptop gets scooped up in discovery/litigation. After having been through lawsuits at work there is ZERO chance of me ever putting anything personal on work equipment.
Re: iPhone Mirroring at work may expose employees’ personal information
#59It's incredible to me how many people log into personal account on work devices. People should really research the amount of data security tools harvest.
It's not just data security tools - let your company get involved in litigation and now all your personal stuff is exposed to discovery too.
Just dumb to mix personal and work - computers are no longer exotic.
Re: iPhone Mirroring at work may expose employees’ personal information
#60Earlier quoted context omitted.
I don't think iPhone Mirroring requires both devices being on the same (or in fact any) Wi-Fi network. It does however require them to be signed in to the same iCloud account.
Pairing requires bluetooth, streaming requires WiFi, https://support.apple.com/en-us/120421 Under iPhone Mirroring system requirements Your iPhone and Mac are signed in to the same Apple Account using two-factor authentication. Your iPhone and Mac have Bluetooth and Wi-Fi turned on. Your iPhone is not sharing its cellular connection (Personal Hotspot is not in use). Your Mac is not sharing its internet connection or…
Wi-Fi needs to be turned on, but the connected network is irrelevant, similar to AirDrop.