But many jobs require you to bring your personal device, rather than giving you a separate work phone. And when you want to connect it to your work email or calendar, since that’s what’s expected these days, you are forced to opt into their IT team’s management of your personal device. I think that makes you fall under the privacy gap the article is describing.
Android is a multi-user OS. One of the ways this is exposed is via work profiles, which are walled off from the main profile. The IT management applies only to the work profile.
>"allowing employers to intercept and archive RCS chats on work-managed devices."
Key phrase there. You should already be treating any employer provided device as completely compromised. Never do anything on those that you wouldn't be perfectly comfortable having projected on a screen in front of your entire company at a meeting.
> While employees have long been aware of the risks in over-sharing on email — a woefully insecure technology that is easy for employers to monitor, texting has been seen as different.
I don't think they're even that aware, but yep - this will get some careless folks in trouble.
The article says it will allow "employers to intercept and archive RCS chats on work-managed devices."
I can read that as applying personal phones hooked up to employer services. I think it's pretty common to force employees to consent allowing their employers to manage their device to get access to work email on it. I'd always assume that just mean they could remote wipe it, but maybe it's even worse than that.
Since this is on Android, this policy should only apply to the version of the Messages app within the work profile, right? If it didn't and could access personal messages, that would be crossing a line.
Reading the post makes it sound like this only happens on managed devices; whether that means "owned and provided by work", "within the confines of the work profile on a BYOD devices", or both, I'm not 100% sure.
> I think it's pretty common to force employees to consent allowing their employers to manage their device to get access to work email on it.
Is it common? I've only been asked to do that once, and I declined. I explained that it's my policy to never use my personal equipment for work purposes or my work equipment for personal purposes. They provided me with a work phone to use, instead.
>This applies to work-managed devices and doesn’t affect personal devices.
"All Your Text Messages" implies _all_ messages, which is not the case.
Now if people aren't keen into fighting for their rights, that is another matter.
Key phrase there. You should already be treating any employer provided device as completely compromised. Never do anything on those that you wouldn't be perfectly comfortable having projected on a screen in front of your entire company at a meeting.
See screenshot here.
Headline is clearly click-bait.
https://support.google.com/work/android/answer/13761869#zipp...
I don't think they're even that aware, but yep - this will get some careless folks in trouble.
I can read that as applying personal phones hooked up to employer services. I think it's pretty common to force employees to consent allowing their employers to manage their device to get access to work email on it. I'd always assume that just mean they could remote wipe it, but maybe it's even worse than that.
Reading the post makes it sound like this only happens on managed devices; whether that means "owned and provided by work", "within the confines of the work profile on a BYOD devices", or both, I'm not 100% sure.
Is it common? I've only been asked to do that once, and I declined. I explained that it's my policy to never use my personal equipment for work purposes or my work equipment for personal purposes. They provided me with a work phone to use, instead.
Deleted Comment