5 ms·

This annoyance also extends to other features like using an iPhone as webcam, unlocking with Apple Watch, using Apple Music (you can’t login to a different acco

This annoyance also extends to other features like using an iPhone as webcam, unlocking with Apple Watch, using Apple Music (you can’t login to a different account, only the system one)… MDM is so common in every tech company - I bet Apple’s own employee issued macs are managed, it is inexplicable how this is still a problem.

plussed_reader 3y ago
I think this is the 'https' flavor of the airplay handshake and it doesn't play well with the federated setup I use with work. Sidecar won't work with federated flavor of my orgs appleID. It could be policy, but I'm pretty sure it should work.
chrnola 3y ago
> I bet Apple’s own employee issued macs are managed I thought so too. The Apple retail employee that gave me the demo of the Vision Pro confirmed this. He said the manager at his store had a Vision Pro and wanted to use it with his Apple-issued Mac, which was managed via MDM.
- turquoisevar 3y ago
  Apple’s MDM is a bit different. It runs through a SSO service called Apple Connect and Apple encourages employees to use their personal Apple ID to link to it instead of creating a separate Apple ID. It essentially adds a special entitlement to someone’s Apple ID, similar to how a dev gets App Store Connect access added to their Apple ID when they enroll into the developer program. This makes it so that every MDM device is logged into the personal Apple ID.
  - chrnola 3y ago
    Oh interesting. Might explain why Apple employees aren’t feeling this same pressure. Do you know if Apple’s MDM is the same for their retail and corporate employees? Also - I’m not super well versed in MDMs, but they seem to come in two general flavors/deployment strategies: bring-your-own-device (BYOD) and manage a fleet of employer-owned hardware. In my experience, I’ve only ever seen BYOD policies for employee-owned _smartphones_ (e.g. for access to an intranet mail server). I’ve never worked anywhere that permitted employees to use their own _workstations_.
    - turquoisevar 3y ago
      > Do you know if Apple’s MDM is the same for their retail and corporate employees? Apple Connect, SSO authentication service, is used by all Apple employees, both corporate and retail. The actual MDM itself (what is allowed, how much is controlled, what can be accessed, etc. etc.) does vary from corporate to retail and between employee roles and departments and from device to device (BYOD v. Apple owned devices). To facilitate this they use a bit of a patchwork of mainly in-house developed solutions and Jamf MDM services. A lot of it is pretty well documented in public, The Apple Wiki page[0] on Apple’s internal apps would be a good entry point to go down the rabbit hole, should you be so inclined. Just keep in mind that a lot of the information on the inner workings of Apple will be perpetually outdated, due to the nature of that information and its reliance on employees leaking information. You’ll find that most publicly available information is about stuff on the retail side, because corporate employees usually are more risk averse when it comes to jeopardizing their job. 0: https://theapplewiki.com/wiki/Apple_Internal_Apps https://theapplewiki.com/wiki/Apple_Internal_Apps
w-ll 3y ago
The real crime is Macbooks still ship with a 1080p camera when their ungodly huge phones ship with 48MP
- verticalscaler 3y ago
  The Macbook camera ships with the same chip as the iPhone 5S (2013). It has sufficient pixels for what it is meant for with most of the processing done in software. That last bit is key.
  - piskov 3y ago
    It’s not about the chip or sensor for that matter: it’s about the lens. That’s why macbook from 2010-2013 has better camera quality: it has thicker display and more space for camera module.
    - verticalscaler 3y ago
      This matters for FaceTime how? What more are you trying to do with this thing? I don't follow. Might just be the only example where I actually agree with Apple about keeping something as thin as possible.
      - w-ll 3y ago
        Why thin? The WxH of their phones is crazy, bend gate.... I'd take a thicker phone, cant belive the dropped the 13 mini size, it was my last refugee since they killed the SE.
        verticalscaler 3y ago
        Agreed about phones disagree about MacBooks. I wouldn’t want a thicker laptop screen just for a bigger lens. Pointless.
- SoftTalker 3y ago
  What does anyone use the Macbook camera for except video calls or meetings. 1080p is more than enough for that.
rovr138 3y ago
I can’t use my wife’s iPad as a second display. Joined her on a travel trip. She went to the office, decided to try using her iPad as a second monitor via usb c… nope. Can’t do that. No idea why. It’s unlocked. It’s trusted. Why can’t it be used?
- piskov 3y ago
  Surely there’s an app for that: “Duet display” exists more than a decade (sidecar basically sherlocked it). Also something called Astra or Luna (don’t remember exactly).
  - rovr138 3y ago
    Hah, same thing I thought! Went looking on the AppStore and I had bought Duet on December 2004! They went subscription based, https://www.duetdisplay.com/ https://www.duetdisplay.com/
  - ttepasse 3y ago
    There are also Apps which display HDMI input streams over USB-C. Orion and such.
- ClassyJacket 3y ago
  Because these artificial limitations make you more likely to buy a second one
WWLink 3y ago
Huh? That must've been a recent change. I used to log into apple music via itunes with my personal account while MacOS itself was using my work account.. yep, two separate apple IDs. That sucks.
- threeseed 3y ago
  You have one AppleID for iCloud and one for App Store, Music, AppleTV etc. They can be the same or different. And this hasn't changed for years.
  - WWLink 3y ago
    Good to know it hasn't changed lol. Coulda swore I saw the account option in the Apple Music app.
lilyball 3y ago
MDM does not by default prevent users from logging in with their own AppleID.

plussed_reader 3y ago

I think this is the 'https' flavor of the airplay handshake and it doesn't play well with the federated setup I use with work. Sidecar won't work with federated flavor of my orgs appleID. It could be policy, but I'm pretty sure it should work.

chrnola 3y ago

> I bet Apple’s own employee issued macs are managed I thought so too. The Apple retail employee that gave me the demo of the Vision Pro confirmed this. He said the manager at his store had a Vision Pro and wanted to use it with his Apple-issued Mac, which was managed via MDM.

turquoisevar 3y ago
Apple’s MDM is a bit different. It runs through a SSO service called Apple Connect and Apple encourages employees to use their personal Apple ID to link to it instead of creating a separate Apple ID. It essentially adds a special entitlement to someone’s Apple ID, similar to how a dev gets App Store Connect access added to their Apple ID when they enroll into the developer program. This makes it so that every MDM device is logged into the personal Apple ID.
- chrnola 3y ago
  Oh interesting. Might explain why Apple employees aren’t feeling this same pressure. Do you know if Apple’s MDM is the same for their retail and corporate employees? Also - I’m not super well versed in MDMs, but they seem to come in two general flavors/deployment strategies: bring-your-own-device (BYOD) and manage a fleet of employer-owned hardware. In my experience, I’ve only ever seen BYOD policies for employee-owned _smartphones_ (e.g. for access to an intranet mail server). I’ve never worked anywhere that permitted employees to use their own _workstations_.
  - turquoisevar 3y ago
    > Do you know if Apple’s MDM is the same for their retail and corporate employees? Apple Connect, SSO authentication service, is used by all Apple employees, both corporate and retail. The actual MDM itself (what is allowed, how much is controlled, what can be accessed, etc. etc.) does vary from corporate to retail and between employee roles and departments and from device to device (BYOD v. Apple owned devices). To facilitate this they use a bit of a patchwork of mainly in-house developed solutions and Jamf MDM services. A lot of it is pretty well documented in public, The Apple Wiki page[0] on Apple’s internal apps would be a good entry point to go down the rabbit hole, should you be so inclined. Just keep in mind that a lot of the information on the inner workings of Apple will be perpetually outdated, due to the nature of that information and its reliance on employees leaking information. You’ll find that most publicly available information is about stuff on the retail side, because corporate employees usually are more risk averse when it comes to jeopardizing their job. 0: https://theapplewiki.com/wiki/Apple_Internal_Apps https://theapplewiki.com/wiki/Apple_Internal_Apps

w-ll 3y ago

The real crime is Macbooks still ship with a 1080p camera when their ungodly huge phones ship with 48MP

verticalscaler 3y ago
The Macbook camera ships with the same chip as the iPhone 5S (2013). It has sufficient pixels for what it is meant for with most of the processing done in software. That last bit is key.
- piskov 3y ago
  It’s not about the chip or sensor for that matter: it’s about the lens. That’s why macbook from 2010-2013 has better camera quality: it has thicker display and more space for camera module.
  - verticalscaler 3y ago
    This matters for FaceTime how? What more are you trying to do with this thing? I don't follow. Might just be the only example where I actually agree with Apple about keeping something as thin as possible.
    - w-ll 3y ago
      Why thin? The WxH of their phones is crazy, bend gate.... I'd take a thicker phone, cant belive the dropped the 13 mini size, it was my last refugee since they killed the SE.
      - verticalscaler 3y ago
        Agreed about phones disagree about MacBooks. I wouldn’t want a thicker laptop screen just for a bigger lens. Pointless.
SoftTalker 3y ago
What does anyone use the Macbook camera for except video calls or meetings. 1080p is more than enough for that.

rovr138 3y ago

I can’t use my wife’s iPad as a second display. Joined her on a travel trip. She went to the office, decided to try using her iPad as a second monitor via usb c… nope. Can’t do that. No idea why. It’s unlocked. It’s trusted. Why can’t it be used?

piskov 3y ago
Surely there’s an app for that: “Duet display” exists more than a decade (sidecar basically sherlocked it). Also something called Astra or Luna (don’t remember exactly).
- rovr138 3y ago
  Hah, same thing I thought! Went looking on the AppStore and I had bought Duet on December 2004! They went subscription based, https://www.duetdisplay.com/ https://www.duetdisplay.com/
- ttepasse 3y ago
  There are also Apps which display HDMI input streams over USB-C. Orion and such.
ClassyJacket 3y ago
Because these artificial limitations make you more likely to buy a second one

WWLink 3y ago

Huh? That must've been a recent change. I used to log into apple music via itunes with my personal account while MacOS itself was using my work account.. yep, two separate apple IDs. That sucks.

threeseed 3y ago
You have one AppleID for iCloud and one for App Store, Music, AppleTV etc. They can be the same or different. And this hasn't changed for years.
- WWLink 3y ago
  Good to know it hasn't changed lol. Coulda swore I saw the account option in the Apple Music app.

lilyball 3y ago

MDM does not by default prevent users from logging in with their own AppleID.