this post was submitted on 22 Jan 2024
665 points (94.6% liked)

People Twitter

5283 readers
351 users here now

People tweeting stuff. We allow tweets from anyone.

RULES:

  1. Mark NSFW content.
  2. No doxxing people.
  3. Must be a tweet or similar
  4. No bullying or international politcs
  5. Be excellent to each other.

founded 1 year ago
MODERATORS
SendMeYourTaTas@sh.itjust.works
pelespirit@sh.itjust.works
665
Would you give your phone’s password to your boss? (lemy.lol)
submitted 10 months ago by King@lemy.lol to c/whitepeopletwitter@sh.itjust.works
125 comments fedilink hide all child comments
 

https://social.joelle.us/@joelle/111798189218029748

you are viewing a single comment's thread
view the rest of the comments
[–] cm0002@lemmy.world 68 points 10 months ago (7 children)

Don't pay attention to this Joelle person, she has no idea what she's talking about (Or does and is spreading misinformation intentionally)

You literally can't "just install an MDM" to your phone in the way that allows a company complete access to your device. Both iOS and Android require that either the device is new or the device is factory reset. Then and only then can the device have MDM enabled as a "Company Owned Device" e.g. complete access.

The other way, is through "Work Profiles", it's an isolated and sandboxed partition. The "Work side" has no access to anything on the personal side and the personal side has no access to anything on the work side. On Android the work side has its own Play Store, its own Chrome, its own apps. (In fact, if you're rooted you can hijack work profiles for yourself if you want to install apps you'd rather keep isolated, like TikTok).

If I issue a wipe command to a phone with a work profile, only the work profile gets wiped and the personal side is untouched.

Hell, Android even gives you the ability to restrict the Work Profiles to work hours so all the work apps go dormant after 5

[–] apqnxhfriqhfjxrrcxs@lemmy.world 13 points 10 months ago

In fact, if you're rooted you can hijack work profiles for yourself if you want to install apps you'd rather keep isolated, like TikTok

You can use Shelter to enable this functionality without root.

https://f-droid.org/packages/net.typeblog.shelter/

[–] figjam@midwest.social 4 points 10 months ago (1 children)

Even if she is factually wrong about everything isn't it a good idea to get people to think more about what they put on their phones?

[–] sfgifz@lemmy.world 10 points 10 months ago

Yes, but not with lies.

[–] Neil@lemmy.ml 3 points 10 months ago

Thank you for summing this up. Such a dumb post.

[–] dlok@lemmy.world 2 points 10 months ago (1 children)

How do you schedule your work profile? I searched my settings for work profile related settings and don't see anything like that. Pixel 7A

[–] Curlyshrew@lemmy.world 2 points 10 months ago

Exactly.

These services are containerised on personal devices so that its services can only be administered within the app container.

It has limited to no control over the phone itself or apps outside of its MDM container in the context of personal devices.

[–] egonallanon@lemm.ee 2 points 10 months ago

There's also the option for MAM apps as well which I quite like as light touch management option for ios and android. Essentially limits control to select apps and even then just the company data in those apps.