Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Mac Virtual Display on Vision Pro Requires Same Apple ID

blog.pinola.co

Post reply on HN
Print view View original

71–80 of 81 posts

Re: Mac Virtual Display on Vision Pro Requires Same Apple ID

#71

Post by turquoisevar »

chrnola wrote: post #7
ricardobeat wrote: post #2

This annoyance also extends to other features like using an iPhone as webcam, unlocking with Apple Watch, using Apple Music (you can’t login to a different account, only the system one)… MDM is so common in every tech company - I bet Apple’s own employee issued macs are managed, it is inexplicable how this is still a problem.

> I bet Apple’s own employee issued macs are managed I thought so too. The Apple retail employee that gave me the demo of the Vision Pro confirmed this. He said the manager at his store had a Vision Pro and wanted to use it with his Apple-issued Mac, which was managed via MDM.

Apple’s MDM is a bit different. It runs through a SSO service called Apple Connect and Apple encourages employees to use their personal Apple ID to link to it instead of creating a separate Apple ID.

It essentially adds a special entitlement to someone’s Apple ID, similar to how a dev gets App Store Connect access added to their Apple ID when they enroll into the developer program.

This makes it so that every MDM device is logged into the personal Apple ID.

Re: Mac Virtual Display on Vision Pro Requires Same Apple ID

#72

Post by pests »

fastball wrote: post #12
threeseed wrote: post #5

Apple had to lock down iOS in 17.4 because enough people were being tricked into entering their passcode by a thief who in turn would steal the device, access their passwords and drain their bank accounts. So not sure that allowing pairing between different accounts and relying on a passcode for security is going to be that secure.

Honestly the real problem with security is the whole passcode -> Face ID -> passcode flow. It is relatively easy for someone to see the passcode that unlocks my phone, in one way or another. All of my banking apps are locked behind Face ID. But if you lock an app with Face ID, you can just override with the phones passcode. This is dumb. The app Face ID backup passcode should be separate from the device unlock passco…

I have witnessed a few banking apps on Android not offer the pin option and also requiring an app-level login again after disabling biometrics.

Re: Mac Virtual Display on Vision Pro Requires Same Apple ID

#73

Post by ttepasse »

piskov wrote: post #46
rovr138 wrote: post #38

Earlier quoted context omitted.

I can’t use my wife’s iPad as a second display. Joined her on a travel trip. She went to the office, decided to try using her iPad as a second monitor via usb c… nope. Can’t do that. No idea why. It’s unlocked. It’s trusted. Why can’t it be used?

Surely there’s an app for that: “Duet display” exists more than a decade (sidecar basically sherlocked it). Also something called Astra or Luna (don’t remember exactly).

There are also Apps which display HDMI input streams over USB-C. Orion and such.

Re: Mac Virtual Display on Vision Pro Requires Same Apple ID

#74

Post by Nextgrid »

gumby wrote: post #47
WWLink wrote: post #22

Earlier quoted context omitted.

Some employers are just straight up control freaks. Sometimes it's misguided thoughts about security and third party keyboards from "unapproved vendors" (which is not entirely invalid to be concerned about, but unlikely to be an attack vector)...... But other times, they really do want you to use exactly what they provide you and nothing else. Things like "looking uniform and professional" or not wanting employees br…

> Some employers are just straight up control freaks. Sometimes it makes sense, infuriating as it may be. My partner works for a bank and says that daily someone brings up an annoyance due to central IT's restrictions, but nobody wants to be a vector for exfiltration of customer data. > Things like "looking uniform and professional" Yeah OK, anybody like that is a control freak! In extreme freaky control: Tom Siebel…

> nobody wants to be a vector for exfiltration of customer data

I have a hunch that the companies that are most obsessed with this are also those who routinely outsource to third-world boiler rooms and are clients of very competent & secure companies such as Okta.

Re: Mac Virtual Display on Vision Pro Requires Same Apple ID

#75

Post by chrnola »

turquoisevar wrote: post #71
chrnola wrote: post #7

Earlier quoted context omitted.

> I bet Apple’s own employee issued macs are managed I thought so too. The Apple retail employee that gave me the demo of the Vision Pro confirmed this. He said the manager at his store had a Vision Pro and wanted to use it with his Apple-issued Mac, which was managed via MDM.

Apple’s MDM is a bit different. It runs through a SSO service called Apple Connect and Apple encourages employees to use their personal Apple ID to link to it instead of creating a separate Apple ID. It essentially adds a special entitlement to someone’s Apple ID, similar to how a dev gets App Store Connect access added to their Apple ID when they enroll into the developer program. This makes it so that every MDM dev…

Oh interesting. Might explain why Apple employees aren’t feeling this same pressure. Do you know if Apple’s MDM is the same for their retail and corporate employees?

Also - I’m not super well versed in MDMs, but they seem to come in two general flavors/deployment strategies: bring-your-own-device (BYOD) and manage a fleet of employer-owned hardware.

In my experience, I’ve only ever seen BYOD policies for employee-owned _smartphones_ (e.g. for access to an intranet mail server). I’ve never worked anywhere that permitted employees to use their own _workstations_.

Re: Mac Virtual Display on Vision Pro Requires Same Apple ID

#76

Post by gumby »

Nextgrid wrote: post #74
gumby wrote: post #47

Earlier quoted context omitted.

> Some employers are just straight up control freaks. Sometimes it makes sense, infuriating as it may be. My partner works for a bank and says that daily someone brings up an annoyance due to central IT's restrictions, but nobody wants to be a vector for exfiltration of customer data. > Things like "looking uniform and professional" Yeah OK, anybody like that is a control freak! In extreme freaky control: Tom Siebel…

> nobody wants to be a vector for exfiltration of customer data I have a hunch that the companies that are most obsessed with this are also those who routinely outsource to third-world boiler rooms and are clients of very competent & secure companies such as Okta.

The banks are under pretty tight regulation in this regard. I have no illusion that bank management cares about the customers’ concerns but they sure do care about the regulators!

My partner has no exposure to live bank data (not even her own — her team all get bank accounts so they can see what it looks like to be a customer) and she has said to me that she and her colleagues are glad they don’t have to worry about accidentally leaking anything. I guess there must be other teams that have to deal with that.

To my surprise nothing she is exposed to is outsourced overseas.

Re: Mac Virtual Display on Vision Pro Requires Same Apple ID

#77

Post by 627467 »

chrnola wrote: post #59
627467 wrote: post #39

> They employ a distinct brand of gaslighting and blaming-the-user that I have come to associate solely with them. > Curiously this limitation wasn’t enough to make me return the device, despite it being part of my justification for it. Why write such long winded post after considering the above quotes? In the end non of the considerations around work/personal apple id, MDM, etc matters when decisions are made purely…

For the record, I did not return my (4x cheaper) iPad. I didn’t ever buy a Vision Pro. Because of the Apple ID issue. I’m trying to convince Apple that they should care because they lost a sale.

I do not recall any example of Apple overtly listening to customers unless pressed by class action. That's the irony of this feedback post. Apple is just not an org that takes direct customer feedback (like you've noticed from their "you're holding it wrong" debacle).

Also, they've probably done the maths and knowing their "loyal" customer base people would be more than happy to pay for multiple redundant devices just to have them seamlessly work together. They are in business of selling premium devices to people who have low sensitivity to price and cost

Re: Mac Virtual Display on Vision Pro Requires Same Apple ID

#78

Post by turquoisevar »

chrnola wrote: post #75
turquoisevar wrote: post #71

Earlier quoted context omitted.

Apple’s MDM is a bit different. It runs through a SSO service called Apple Connect and Apple encourages employees to use their personal Apple ID to link to it instead of creating a separate Apple ID. It essentially adds a special entitlement to someone’s Apple ID, similar to how a dev gets App Store Connect access added to their Apple ID when they enroll into the developer program. This makes it so that every MDM dev…

Oh interesting. Might explain why Apple employees aren’t feeling this same pressure. Do you know if Apple’s MDM is the same for their retail and corporate employees? Also - I’m not super well versed in MDMs, but they seem to come in two general flavors/deployment strategies: bring-your-own-device (BYOD) and manage a fleet of employer-owned hardware. In my experience, I’ve only ever seen BYOD policies for employee-own…

> Do you know if Apple’s MDM is the same for their retail and corporate employees?

Apple Connect, SSO authentication service, is used by all Apple employees, both corporate and retail.

The actual MDM itself (what is allowed, how much is controlled, what can be accessed, etc. etc.) does vary from corporate to retail and between employee roles and departments and from device to device (BYOD v. Apple owned devices).

To facilitate this they use a bit of a patchwork of mainly in-house developed solutions and Jamf MDM services.

A lot of it is pretty well documented in public, The Apple Wiki page[0] on Apple’s internal apps would be a good entry point to go down the rabbit hole, should you be so inclined.

Just keep in mind that a lot of the information on the inner workings of Apple will be perpetually outdated, due to the nature of that information and its reliance on employees leaking information. You’ll find that most publicly available information is about stuff on the retail side, because corporate employees usually are more risk averse when it comes to jeopardizing their job.

0: https://theapplewiki.com/wiki/Apple_Internal_Apps

Re: Mac Virtual Display on Vision Pro Requires Same Apple ID

#79

Post by ricardobeat »

piskov wrote: post #28
w-ll wrote: post #9

Earlier quoted context omitted.

The real crime is Macbooks still ship with a 1080p camera when their ungodly huge phones ship with 48MP

Do you want your laptop screen be as thick as an iPhone? It’s just basic physics: you cannot have 1-inch sensor with a lens right on top of it in 3-5mm of total thickness. Just the same way your eye is not flat but 2cm long.

Folded optics and metalenses would like to have a chat. They just started using it on the iPhone, I imagine either tech will make it to laptops in the next couple years.
Post reply on HN