6 ms·

I provide access to my work one from my personal so I can view it on my personal when scheduling events and hide it otherwise. Works pretty well imo.

avel 5y ago
Yep, that's the way to go. I do the same. Easy to do with Google Calendar. In your work calendar: Settings -> Settings for My Calendars -> Access Permissions -> Get shareable link. In your personal calendar: Other Calendars -> Subscribe to Calendar With this, I've managed to remove all other traces of work from my personal phone.
- dvk13 5y ago
  TIL. Thanks!!
- dataflow 5y ago
  And it takes like 12+ hours to update....
  - nine_k 5y ago
    To me it works instantly between Google calendars, and with a few minutes of delay between Google and Office365 calendars.
    - dataflow 5y ago
      > with a few minutes of delay between Google and Office365 calendars How in the world do you do that? Subscribe to Calendar isn't even possible with Office 365, right? You have to use From URL, to which you give the .ics URL, which Google Calendar normally pulls a couple times a day. Is there a different mechanism you use?
    - killjoywashere 5y ago
      And if you are in a high security organization (DOD, banks) … good luck.
      - Nitramp 5y ago
        > High Security organization (banks) Hahahahahahaha. Good one.
        Clewza313 5y ago
        Perhaps "high security process organization" is a better term.
        mcv 5y ago
        That's a good description. The invest a lot in highly secure technology and processes, and then ignore them out of convenience. I work at a department that's all about data quality and integrity, and we have super bureaucratic processes to regulate access to data, but you don't want to know how much data lives in Excel files; an issue I'm constantly trying to address.
        cerved 5y ago
        boomers love excel
        411111111111111 5y ago
        They usually have extreme security guidelines for employees. All external laptop ports disabled, so no way to plug in periphery nor connecting a tv for a presentation. No internet access at on laptops or only with a sim card which only allows connections to the VPN bastion host etc. Direct Internet on premise is a no-go as well, obviously. So no checking stack overflow if you've got any issues They still leave infrastructure with default passwords exposed to the internet and implement questionable password policies for their customers... But they do everything they can in order to sabotage their employees!
armatav 5y ago
Works until IT resets the passwords once a month and you have to renew access on your device, missing a meeting.
- mcny 5y ago
  We should discourage this stupidity of expiring passwords wherever we can. Maybe make it a point to put your passwords on a sticky note stuck on the monitor prominently on display if $work requires you to change passwords that frequently?
  - xkcd-sucks 5y ago
    Nobody actually cares about the security of expiring passwords, it's just a line item on a checklist of official processes. And the people auditing it don't visit in person
    - vladvasiliu 5y ago
      This. I've been confronted with exactly this a short while ago, and even produced Microsoft's official stance on this (against). But in the end, their argument really boiled down to "but my checklist says so". Microsoft's [0] first entry of "Common approaches and their negative impacts". With a reference to the FTC website. [1] [0] https://docs.microsoft.com/en-us/microsoft-365/admin/misc/password-policy-recommendations?view=o365-worldwide#some-common-approaches-and-their-negative-impacts https://docs.microsoft.com/en-us/microsoft-365/admin/misc/pa... [1] https://www.ftc.gov/news-events/blogs/techftc/2016/03/time-rethink-mandatory-password-changes https://www.ftc.gov/news-events/blogs/techftc/2016/03/time-r...
    - mjevans 5y ago
      Your organization SHOULD follow NIST SP 800-63B Section 5.1.1.2 https://pages.nist.gov/800-63-FAQ/#q-b05 https://pages.nist.gov/800-63-FAQ/#q-b05 Q-B05: Is password expiration no longer recommended? A-B05: SP 800-63B Section 5.1.1.2 paragraph 9 states: “Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.” Users tend to choose weaker memorized secrets when they know that they will have to change them in the near future. When those changes do occur, they often select a secret that is similar to their old memorized secret by applying a set of common transformations such as increasing a number in the password. This practice provides a false sense of security if any of the previous secrets has been compromised since attackers can apply these same common transformations. But if there is evidence that the memorized secret has been compromised, such as by a breach of the verifier’s hashed password database or observed fraudulent activity, subscribers should be required to change their memorized secrets. However, this event-based change should occur rarely, so that they are less motivated to choose a weak secret with the knowledge that it will only be used for a limited period of time.
gcatalfamo 5y ago
You do need them on the work calendar if you need to account for travel distance and time to the dentist before accepting that last minute meeting.

avel 5y ago

Yep, that's the way to go. I do the same. Easy to do with Google Calendar. In your work calendar: Settings -> Settings for My Calendars -> Access Permissions -> Get shareable link. In your personal calendar: Other Calendars -> Subscribe to Calendar With this, I've managed to remove all other traces of work from my personal phone.

dvk13 5y ago
TIL. Thanks!!
dataflow 5y ago
And it takes like 12+ hours to update....
- nine_k 5y ago
  To me it works instantly between Google calendars, and with a few minutes of delay between Google and Office365 calendars.
  - dataflow 5y ago
    > with a few minutes of delay between Google and Office365 calendars How in the world do you do that? Subscribe to Calendar isn't even possible with Office 365, right? You have to use From URL, to which you give the .ics URL, which Google Calendar normally pulls a couple times a day. Is there a different mechanism you use?
  - killjoywashere 5y ago
    And if you are in a high security organization (DOD, banks) … good luck.
    - Nitramp 5y ago
      > High Security organization (banks) Hahahahahahaha. Good one.
      - Clewza313 5y ago
        Perhaps "high security process organization" is a better term.
        mcv 5y ago
        That's a good description. The invest a lot in highly secure technology and processes, and then ignore them out of convenience. I work at a department that's all about data quality and integrity, and we have super bureaucratic processes to regulate access to data, but you don't want to know how much data lives in Excel files; an issue I'm constantly trying to address.
        cerved 5y ago
        boomers love excel
      - 411111111111111 5y ago
        They usually have extreme security guidelines for employees. All external laptop ports disabled, so no way to plug in periphery nor connecting a tv for a presentation. No internet access at on laptops or only with a sim card which only allows connections to the VPN bastion host etc. Direct Internet on premise is a no-go as well, obviously. So no checking stack overflow if you've got any issues They still leave infrastructure with default passwords exposed to the internet and implement questionable password policies for their customers... But they do everything they can in order to sabotage their employees!

armatav 5y ago

Works until IT resets the passwords once a month and you have to renew access on your device, missing a meeting.

mcny 5y ago
We should discourage this stupidity of expiring passwords wherever we can. Maybe make it a point to put your passwords on a sticky note stuck on the monitor prominently on display if $work requires you to change passwords that frequently?
- xkcd-sucks 5y ago
  Nobody actually cares about the security of expiring passwords, it's just a line item on a checklist of official processes. And the people auditing it don't visit in person
  - vladvasiliu 5y ago
    This. I've been confronted with exactly this a short while ago, and even produced Microsoft's official stance on this (against). But in the end, their argument really boiled down to "but my checklist says so". Microsoft's [0] first entry of "Common approaches and their negative impacts". With a reference to the FTC website. [1] [0] https://docs.microsoft.com/en-us/microsoft-365/admin/misc/password-policy-recommendations?view=o365-worldwide#some-common-approaches-and-their-negative-impacts https://docs.microsoft.com/en-us/microsoft-365/admin/misc/pa... [1] https://www.ftc.gov/news-events/blogs/techftc/2016/03/time-rethink-mandatory-password-changes https://www.ftc.gov/news-events/blogs/techftc/2016/03/time-r...
  - mjevans 5y ago
    Your organization SHOULD follow NIST SP 800-63B Section 5.1.1.2 https://pages.nist.gov/800-63-FAQ/#q-b05 https://pages.nist.gov/800-63-FAQ/#q-b05 Q-B05: Is password expiration no longer recommended? A-B05: SP 800-63B Section 5.1.1.2 paragraph 9 states: “Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.” Users tend to choose weaker memorized secrets when they know that they will have to change them in the near future. When those changes do occur, they often select a secret that is similar to their old memorized secret by applying a set of common transformations such as increasing a number in the password. This practice provides a false sense of security if any of the previous secrets has been compromised since attackers can apply these same common transformations. But if there is evidence that the memorized secret has been compromised, such as by a breach of the verifier’s hashed password database or observed fraudulent activity, subscribers should be required to change their memorized secrets. However, this event-based change should occur rarely, so that they are less motivated to choose a weak secret with the knowledge that it will only be used for a limited period of time.

gcatalfamo 5y ago

You do need them on the work calendar if you need to account for travel distance and time to the dentist before accepting that last minute meeting.