Hacker News Reader

Comment by poincaredisk | Hacker News Reader

But that's ok your work phone right? At least I hope you didn't agree to have it installed on your private phone. For work phone I guess a good strategy is to avoid installing anything non-work related, so the temptation to use it for anything is low.

View on HN

Not GP, but I'm okay installing that stuff on my personal phone because it's isolated via Android Work Profile.

How is that keeping Microsoft from accessing your GPS, sensor data, wifi, camera/microphone etc? Sure, they can't get at SMS or your other apps and your work won't have access to your entire device but it means MS can still access your location (using GPS and nearby bluetooth/wifi), record audio/video, read/control sensors (accelerometer, proximity, gravity, temperature, pressure, magnetic field etc), have full network access, etc and can record and collect that data whenever they feel like it for the most part.

There's different kinds of intune enrollment. Generally if it's not a company phone, they can only see your IMEI, last 4 of your phone number, OS version etc. They'll be able to isolate and control the work apps but nothing else because it's in a separate profile.

That's true with a separate work phone too right? And once I turn off the AWP for the day, all of that stops.

A work phone I could leave in a lead lined box until I needed to log into the company network. My personal device is often carried with me and in use at other times. If your IT people let you pause your work profile indefinitely that could help protect you though.

The IT people don't get to choose how long you pause your work profile, you do. If they want control over profile access then they need to manage the full device, not just have you run an app in a profile on it.

If you plan on carrying a lead lined box with you everywhere you plan on authenticating for work you can do the same with your personal phone before you switch the work profile on.

You may want to try "Shelter" (https://f-droid.org/packages/net.typeblog.shelter/).

No way I'm doing anything work related on any of my personal devices. I have a separate work phone. I turn it off at the end of the work day, and leave it at work.

I used to answer emails from bosses and managers while at home (at a previous employer), but it gets out of hand quickly and then they expect you to do it. Never again. Set boundaries immediately. At 15:00 I'm gone.

Leaving it at work goes one step further than my flow. I have AWP configured to automatically turn off at the end of the workday, so I become unavailable after that. There's always the possibility I can turn it back on after hours, but that extra step works well enough as a deterrent for me :)

Reply on news.ycombinator.com