210
submitted 6 months ago by Martin@lemmy.ml to c/asklemmy@lemmy.ml

So my company decided to migrate office suite and email etc to Microsoft365. Whatever. But for 2FA login they decided to disable the option to choose "any authenticator" and force Microsoft Authenticator on the (private) phones of both employees and volunteers. Is there any valid reason why they would do this, like it's demonstrably safer? Or is this a battle I can pick to shield myself a little from MS?

you are viewing a single comment's thread
view the rest of the comments
[-] Saik0Shinigami@lemmy.saik0.com 1 points 6 months ago

The point is that the phone will be tracking 24/7 regardless of your actual availability.

[-] rekabis@lemmy.ca 1 points 6 months ago* (last edited 6 months ago)

The point is that the phone will be tracking 24/7 regardless of your actual availability.

A faraday cage on your work desk can take care of that during off hours, especially since most batteries have become non-removable and phones don’t truly shut down anymore. Just put your work phone into the cage when your shift ends, take it back out when your next shift starts. Easy peasy!

And if they demand 24/7 access, they will need to provide 24/7 pay.

[-] Saik0Shinigami@lemmy.saik0.com 1 points 6 months ago

Not sure I understand what the faraday cage would accomplish. It's the companies device. You'd be skipping this presumption outlined earlier in the thread

they are entitled and expected to track it as much as my work laptop or any other company equipment.

Leaving the work phone at work is a valid answer to me. Assuming that doesn't actually come with any other downsides (working offsite and having to return to the office on unpaid time just to drop off the phone for example).

[-] ElderWendigo@sh.itjust.works 0 points 6 months ago

And my point was that a separate corporate device makes it trivial to manage my privacy and availability. Using my personal phone for work is a hard NO.

[-] Saik0Shinigami@lemmy.saik0.com -1 points 6 months ago

Your point is illogical.

You stated

they are entitled and expected to track it

Just to turn around and back-peddle

If I don’t want them tracking me I just turn it off

Are they entitled to it or not? If they're entitled, then why do you have a right to cut it off? I'd argue they have no right to it to track me off hours at all... regardless of the device used. u2f tokens like yubikey would be just as sufficient for 2fa with none of the tracking.

[-] ElderWendigo@sh.itjust.works 1 points 6 months ago

You're so eager to argue that you didn't actually comprehend what I said.

[-] Saik0Shinigami@lemmy.saik0.com 0 points 6 months ago

Or I brought up a point that you didn't consider, and rather than addressing it you need to resort to low level ad hominem. You contradicted yourself. Either explain the contradiction or move on. There's no point in this comment unless you're attempting to discredit me without reason which just makes you look bad.

[-] ElderWendigo@sh.itjust.works 0 points 6 months ago
[-] Saik0Shinigami@lemmy.saik0.com 1 points 6 months ago* (last edited 6 months ago)

What a great addition to the conversation. Congratulations! You've still addressed nothing!

this post was submitted on 30 May 2024
210 points (94.1% liked)

Asklemmy

44052 readers
829 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it's welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~

founded 5 years ago
MODERATORS