6 ms·

> Lockdown Mode is not a configurable option for Mobile Device Management by system administrators This is the best news. Otherwise, you can bet your IT depart

by teeray 4y ago

> Lockdown Mode is not a configurable option for Mobile Device Management by system administrators This is the best news. Otherwise, you can bet your IT department would be throwing that switch on for everyone.

deathgripsss 4y ago
I imagine in lockdown mode the device would be pretty much useless as a work device.
- amself 4y ago
  Negative. I’ve been using it since the update with no issues.
  - kerblang 4y ago
    I would be interested in hearing more about your experience and whatever sort of things have come up...
    - Syonyk 4y ago
      I've been using Lockdown for a month or two now with the beta, and did some writing on it: https://www.sevarg.net/2022/07/20/ios16-lockdown-mode-browser-analysis/ https://www.sevarg.net/2022/07/20/ios16-lockdown-mode-browse... Results of enabling it and using my phone as I normally would: - Some websites don't display images. I've no idea what they encode to, but they won't display. Fine, don't care. - Animated GIFs don't play in Messages when coming in via SMS (perhaps iMessage too, haven't tried). Annoying when people communicate in animated GIFs, but... people just expect my tech to be weirdly broken, so this doesn't actually impact things significantly. And that's it. I couldn't tell you the performance delta in casual internet use, though I don't use my phone very heavily either.
- masklinn 4y ago
  You can opt applications and website out.
_joel 4y ago
Could they not just implement the functionality in MDM policy anyway, or close enough?
- bpye 4y ago
  Don’t think MDM could do stuff like disable JIT.
  - _joel 4y ago
    Probably can't, good point
  - GekkePrutser 4y ago
    No but Apple could of course add the option. They fully control the MDM API.
gambiting 4y ago
I imagine it's just yet another protection for the mode - it cannot be controlled by external policy, so no one can force it off externally.
gregsadetsky 4y ago
Sorry, I'm not sure that I follow. Why would it be a bad idea if some IT departments enabled Lockdown Mode (LM) via MDM..? The article says that in LM, you can't enrol the device in MDM -- I suppose that if you want LM functionalities, it makes some sense that you wouldn't want parts of your device to be remotely controllable by an entreprise (or your MDM profile overriding some of the Lockdown options..?) But... I don't understand what you mean by it being a bad thing that IT admins would want Lockdown Mode for everyone. Thanks
- bgro 4y ago
  There are a lot of cases where you have to be available on chat. Either sit at your desk and do nothing for 12 hours straight, or do anything you want and just have your phone on you. This could either be a slow day at work, or an actual off day like being on call on a Saturday. A lot of companies aren't going to buy you a separate work phone. If there's a lazy security option that can be enabled, a lot of companies are just going to inappropriately turn it on because it doesn't bother them that your phone can't do anything fun. That doesn't cost them money. Even if you're a web designer for a small shoe store where obviously nuclear power plant level of security doesn't really make sense. I remember android phones like 10 years ago or so had some corporate policy option so any time the screen is locked, you need to enter a 20 character password that has uppers, lowers, capitals, symbols, and numbers. Any patterns / words it decided were too easy to guess were rejected for a password. This wasn't a "Lock after an hour of inactivity." It was "Lock immediately, and set screen timeout to 30 seconds."
  - blep_ 4y ago
    This is how you get me to start stubbornly claiming I don't have a smartphone. If you have special requirements for the devices I use, it's your responsibility to provide separate devices from my personal ones.
  - withinboredom 4y ago
    I refuse to sign in to my work gmail on my android exactly for this reason. It basically wants to lock down my phone. It doesn’t do that for my iPhone though, but I’m not logged in their either, FWIW. I refuse to use my personal devices for work, as a matter of principle. Need me to be on call?, flip phones are pretty darn cheap.

by teeray 4y ago

deathgripsss 4y ago

I imagine in lockdown mode the device would be pretty much useless as a work device.

amself 4y ago
Negative. I’ve been using it since the update with no issues.
- kerblang 4y ago
  I would be interested in hearing more about your experience and whatever sort of things have come up...
  - Syonyk 4y ago
    I've been using Lockdown for a month or two now with the beta, and did some writing on it: https://www.sevarg.net/2022/07/20/ios16-lockdown-mode-browser-analysis/ https://www.sevarg.net/2022/07/20/ios16-lockdown-mode-browse... Results of enabling it and using my phone as I normally would: - Some websites don't display images. I've no idea what they encode to, but they won't display. Fine, don't care. - Animated GIFs don't play in Messages when coming in via SMS (perhaps iMessage too, haven't tried). Annoying when people communicate in animated GIFs, but... people just expect my tech to be weirdly broken, so this doesn't actually impact things significantly. And that's it. I couldn't tell you the performance delta in casual internet use, though I don't use my phone very heavily either.
masklinn 4y ago
You can opt applications and website out.

_joel 4y ago

Could they not just implement the functionality in MDM policy anyway, or close enough?

bpye 4y ago
Don’t think MDM could do stuff like disable JIT.
- _joel 4y ago
  Probably can't, good point
- GekkePrutser 4y ago
  No but Apple could of course add the option. They fully control the MDM API.

gambiting 4y ago

I imagine it's just yet another protection for the mode - it cannot be controlled by external policy, so no one can force it off externally.

gregsadetsky 4y ago

Sorry, I'm not sure that I follow. Why would it be a bad idea if some IT departments enabled Lockdown Mode (LM) via MDM..? The article says that in LM, you can't enrol the device in MDM -- I suppose that if you want LM functionalities, it makes some sense that you wouldn't want parts of your device to be remotely controllable by an entreprise (or your MDM profile overriding some of the Lockdown options..?) But... I don't understand what you mean by it being a bad thing that IT admins would want Lockdown Mode for everyone. Thanks

bgro 4y ago
There are a lot of cases where you have to be available on chat. Either sit at your desk and do nothing for 12 hours straight, or do anything you want and just have your phone on you. This could either be a slow day at work, or an actual off day like being on call on a Saturday. A lot of companies aren't going to buy you a separate work phone. If there's a lazy security option that can be enabled, a lot of companies are just going to inappropriately turn it on because it doesn't bother them that your phone can't do anything fun. That doesn't cost them money. Even if you're a web designer for a small shoe store where obviously nuclear power plant level of security doesn't really make sense. I remember android phones like 10 years ago or so had some corporate policy option so any time the screen is locked, you need to enter a 20 character password that has uppers, lowers, capitals, symbols, and numbers. Any patterns / words it decided were too easy to guess were rejected for a password. This wasn't a "Lock after an hour of inactivity." It was "Lock immediately, and set screen timeout to 30 seconds."
- blep_ 4y ago
  This is how you get me to start stubbornly claiming I don't have a smartphone. If you have special requirements for the devices I use, it's your responsibility to provide separate devices from my personal ones.
- withinboredom 4y ago
  I refuse to sign in to my work gmail on my android exactly for this reason. It basically wants to lock down my phone. It doesn’t do that for my iPhone though, but I’m not logged in their either, FWIW. I refuse to use my personal devices for work, as a matter of principle. Need me to be on call?, flip phones are pretty darn cheap.