2 ms·

The most important part is that MDM can install VPN settings and root SSL certs on your phone, allowing your employer to intercept all traffic to and from your

The most important part is that MDM can install VPN settings and root SSL certs on your phone, allowing your employer to intercept all traffic to and from your phone (unless the apps use SSL certificate pinning or end-to-end encryption). People probably don‘t expect their employer to be able to intercept eg. their Facebook messages or private email. And it‘s trivial to protect against this: Just use your own device for personal stuff. You probably don‘t need to bring a second laptop on a work trip, just bring your own phone or tablet for stuff that you don‘t want someone at your company to track...

morgante 9y ago
I agree that people should know the implications, but I know them and am essentially comfortable with the tradeoffs. After all, I already share much of my browser history via Chrome anyways. > And it‘s trivial to protect against this: Just use your own device for personal stuff. I don't consider that trivial. Switching from work email back to personal email, or checking Facebook while coding is very common for me. More importantly, I don't particularly care if my employer has the ability to track my activity.
- jakobegger 9y ago
  If you check Facebook while coding, your productivity might also profit if you started using a separate device for that :)
  - morgante 9y ago
    Thanks for the moralizing point, which is entirely what I objected to in the original article. How I manage my personal productivity is my prerogative. Personally I find that I fluctuate between periods of intense focus (where hours of coding pass without me even noticing) and times where my brain is tired and I need a thoughtless distraction.
willstrafach 9y ago
Very important detail regarding iOS: With the BYOD mode of MDM (not "Supervised Mode" used for company-owned devices), as I understand it, there will be a dialog box which appears on the device and asks you to approve the installation of such configuration profiles.

morgante 9y ago

I agree that people should know the implications, but I know them and am essentially comfortable with the tradeoffs. After all, I already share much of my browser history via Chrome anyways. > And it‘s trivial to protect against this: Just use your own device for personal stuff. I don't consider that trivial. Switching from work email back to personal email, or checking Facebook while coding is very common for me. More importantly, I don't particularly care if my employer has the ability to track my activity.

jakobegger 9y ago
If you check Facebook while coding, your productivity might also profit if you started using a separate device for that :)
- morgante 9y ago
  Thanks for the moralizing point, which is entirely what I objected to in the original article. How I manage my personal productivity is my prerogative. Personally I find that I fluctuate between periods of intense focus (where hours of coding pass without me even noticing) and times where my brain is tired and I need a thoughtless distraction.

willstrafach 9y ago

Very important detail regarding iOS: With the BYOD mode of MDM (not "Supervised Mode" used for company-owned devices), as I understand it, there will be a dialog box which appears on the device and asks you to approve the installation of such configuration profiles.