this post was submitted on 07 Oct 2024
72 points (96.2% liked)

Asklemmy

43974 readers
2002 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy ๐Ÿ”

If your post meets the following criteria, it's welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

~Icon~ ~by~ ~@Double_[email protected]~

founded 5 years ago
MODERATORS
 

I'm non-techy. I work for a public school district and visit with kids in about a dozen schools. I like having my work email on my phone so teachers can get in touch if they need me. For years we've just used the outlook app with no real issues that I've noticed. We're seeing more and more micromanagement and it sucks. We recently got notice that we have to install Cisco Duo on our phones if we want to have our email on it. Should i do that? Or just say no and be ok with being out of contact?

you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 29 points 1 month ago (2 children)

Don't.

Two reasons:

Many employers require you to install phone-management software as part of the data loss mitigation/data exfiltration requirements - and those requirements might be set by their insurers.

This gives them the ability to remotely lock or wipe your phone at any time - useful to them because they remove company data if you lose your phone, or you leave the company, or are suspended for any reason. Obviously that'll also lose any personal data on the phone, but that's your problem, not theirs. They can also monitor its location and similar things.

That's obviously a reason why you should never, ever, use a work-issued device for personal use - besides it being against their acceptable use policy. If your employer requires you to check email then they are required to issue you the means to do so. They cannot insist that you use any personal devices for that.

It's bad for your mental health.

Keep work to work hours. Keep work devices for work. Keep personal hours and devices for your personal use.

This physical separation requires a little discipline but, having been on all sides of this barrier (employer, employee, suffering with poor mental health, and currently, in good mental health) - I know this to be the only way to achieve a health balance.

[โ€“] [email protected] 8 points 1 month ago* (last edited 1 month ago) (1 children)

I'm forgetting the episode but darknet diaries podcast had one where a guy took revenge against a former employer and wiped out an entire schools email system and wiped all phones that has logged into the school email. This was done from compromising the school's outlook admin account.

That was the first time i learned that logging into the employer email could give them the level of control over your device. Fortunately i never have done that for the #2 reason.

[โ€“] IMongoose 2 points 1 month ago

There are usually a couple more steps beyond just signing in. Sometimes it will require an app or you get a big warning stating hey, the employer is going to gain a ton of access on here, do you agree?

[โ€“] Tricky 6 points 1 month ago (1 children)

This is great context, thanks.

A followup question, if you don't mind. I am running stock android 14, which offers multiple users. My main user account is my personal (nothing work related), and a second user account is my work profile, complete with phone-management software. The two accounts are based upon different Google accounts.

If my work were to remote wipe, I have assumed that would only affect the (second) user profile which has those apps, and not the main user account.

Do you know if that is correct?

[โ€“] [email protected] 7 points 1 month ago

If my work were to remote wipe, I have assumed that would only affect the (second) user profile which has those apps, and not the main user account.

My understanding is that these tools offer a factory reset, so they would wipe everything. After all - if the phone is stolen, you wouldn't want to just wipe one profile and leave data within another.