iPhone Mirroring at work may expose employees’ personal information
sevcosecurity.com
iPhone Mirroring at work may expose employees’ personal information
1–10 of 80 posts
Re: iPhone Mirroring at work may expose employees’ personal information
#2[deleted]
Re: iPhone Mirroring at work may expose employees’ personal information
#3Duh, don't mix work and private devices / data
Re: iPhone Mirroring at work may expose employees’ personal information
#4Don’t you need to be signed in to the same iCloud account on both your laptop and phone to use this feature? That would mean that in order to encounter this issue you already need to be using a work account on a personal device, or vice versa.
Since that’t the case I fail to see how this is a large vulnerability. The article doesn’t seem to address this point (possible I just missed this).
Re: iPhone Mirroring at work may expose employees’ personal information
#5There also seems to be a bug in the VPN that requires sending all traffic when the VPN address is on a different subnet. It should be possible to manually specify subnet mask, but it seems to be ignored. I’m not sure if the VPN is advertising this incorrectly, but it worked fine before upgrading.
Re: iPhone Mirroring at work may expose employees’ personal information
#6It's incredible to me how many people log into personal account on work devices. People should really research the amount of data security tools harvest.
Re: iPhone Mirroring at work may expose employees’ personal information
#7It's incredible to me how many people log into personal account on work devices. People should really research the amount of data security tools harvest.
Where is a good place to start this research?
We have crowdstrike falcon at work, and I would love to know what they are monitoring.
Re: iPhone Mirroring at work may expose employees’ personal information
#8It's incredible to me how many people log into personal account on work devices. People should really research the amount of data security tools harvest.
If your employer isn't requiring you to log in with a personal account on a work device (and they're not), and your personal data doesn't have anything you'd mind your employer seeing, then why not?
Because then there's no slippery slope and you're making a conscious choice. A lot of people lead really boring lives and just want the convenience of using their personal e-mail on the work device. Their employer knowing that the kids need to be picked up from soccer at 6 is a non-issue.
Obviously, if you do have things it's important that your employer/police/government/etc. not know, then don't, a million times.
But if you don't care, then let people make that choice.
Re: iPhone Mirroring at work may expose employees’ personal information
#9It's incredible to me how many people log into personal account on work devices. People should really research the amount of data security tools harvest.
If your employer isn't requiring you to log in with a personal account on a work device (and they're not), and your personal data doesn't have anything you'd mind your employer seeing, then why not? Because then there's no slippery slope and you're making a conscious choice. A lot of people lead really boring lives and just want the convenience of using their personal e-mail on the work device. Their employer knowing…
One reason is that if your employer is sued your personal data/devices can get tied up in the discovery process.
Re: iPhone Mirroring at work may expose employees’ personal information
#10It's incredible to me how many people log into personal account on work devices. People should really research the amount of data security tools harvest.
If your employer isn't requiring you to log in with a personal account on a work device (and they're not), and your personal data doesn't have anything you'd mind your employer seeing, then why not? Because then there's no slippery slope and you're making a conscious choice. A lot of people lead really boring lives and just want the convenience of using their personal e-mail on the work device. Their employer knowing…
I worked with someone who uploaded private git repositories to his email before quitting. People are not very smart.
It's best to completely remove that avenue / temptation anyway, IMO. You can handle personal stuff on your phone. Logging in your work PC is asking for trouble.