659
you are viewing a single comment's thread
view the rest of the comments
[-] eddietrax@dmv.social 62 points 9 months ago

These people really don’t know how MDM solutions work.

[-] 520@kbin.social 3 points 9 months ago

... actually they aren't wrong. MDMs are given special permissions including but not limited to reading your SMSes and phone records, restricting and monitoring your installed apps and even wiping your device.

[-] n1ckn4m3@kbin.social 19 points 9 months ago* (last edited 9 months ago)

Please cite any one of your sources. I've managed MDM for over a decade and you're spreading misinformation.

Absolutely none of the MDM products on the market allow for the reading of personal e-mail, SMS, phone records, etc. On the contrary, almost every single one provides an information screen during the enrollment that makes it abundantly clear that they do not (and can not) access that data. Moreover, the "wipe" of data is the removal of company data. It doesn't wipe your phone, it just removes the work profile (Android) or deprovisions the work profile and associated apps (Apple). All of your non-work-related data is untouched.

Quick Sources for Intune and JAMF -- do your own googling for others:
https://learn.microsoft.com/en-us/mem/intune/protect/privacy-data-collect
https://www.jamf.com/blog/apple-mobile-device-management-faq/

[-] 520@kbin.social 15 points 9 months ago* (last edited 9 months ago)

Absolutely none of the MDM products on the market allow for the reading of personal e-mail, SMS, phone records, etc.

So you're not aware of Sophos's MDM offering? That explicitly states they can make copies of all SMS messages?

https://support.sophos.com/support/s/article/KB-000034436?language=en_US

How about call logs, with SureMDM?

https://knowledgebase.42gears.com/article/how-to-view-call-logs-on-android-phones-remotely-using-suremdm/

Also I said nothing about personal emails.

Moreover, the "wipe" of data is the removal of company data. It doesn't wipe your phone, it just removes the work profile (Android) or deprovisions the work profile and associated apps (Apple). All of your non-work-related data is untouched.

No, the 'wipe' can be a full factory reset.

https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe

Edit: typo

load more comments (11 replies)
load more comments (22 replies)
this post was submitted on 22 Jan 2024
659 points (94.6% liked)

People Twitter

5197 readers
779 users here now

People tweeting stuff. We allow tweets from anyone.

RULES:

  1. Mark NSFW content.
  2. No doxxing people.
  3. Must be a tweet or similar
  4. No bullying or international politcs
  5. Be excellent to each other.

founded 1 year ago
MODERATORS