this post was submitted on 06 Jun 2024
909 points (97.8% liked)
Technology
59390 readers
4077 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
As everyone is pointing out you're just wrong about this.
Also apple is overbearing AF. I recently had several back and forths with my IT department about an old company mac laptop I used to have. Since I had signed into my apple account once, Apple permanently tied that laptop to my account and wouldn't allow the fucking IT department to fully wipe it.
Keep in mind also that I would have preferred to not have or use an apple account (they kind of force it on you, even asking you to login to iCloud constantly even if you've literally never used it once), and even though I could login to the apple account in my browser and see that the laptop wasn't listed under my devices, IT was still locked out.
Literally the only way to fix this was giving the IT dept my apple password so they could authenticate then sign out of it. There was nothing I could do remotely about it. This is a security issue in itself. Zero reason I shouldn't be able to use my account remotely to remove or sign that device out. Zero reason I should have to give my password to another human. Except for apple being shit.
The apple security theater is widely believed but it's still largely theater.
Edit: before you tell me I didn't have to give up my password, understand that I fucking know that. I could've driven to the office, told my employer to fuck off, had them ship the laptop, etc... all of which are things that shouldn't be necessary. I took the least shitty option at the time. Kindly fuck off if you are so dicksloppery on apple that you can't understand the obvious point: pretending every shit decision is about security doesn't shield you from all criticism.
Your post details how it isn’t possible for IT professionals to wipe a Mac without the consent of the owner’s account. How is that security theater?
You missed the part where I had to give my password to another human.
Also, I wasn't the owner, they are. Also, again, it makes zero sense to not allow me to sign it out remotely.
Nothing is secure about a system designed so poorly you have to give out your password. That should never be needed.
Not to mention, I never wanted or needed to sign in. I was just nagged to do so 100 times so I relented. Nothing about that means I own the device.
I'm with you that you should be able to log out remotely, but this is more of a failure in the IT department. You should have been given a PC with the apple ID already introduced, with your company mail and some password. How would they even access your PC remotely for security udpwtes if they didn't have access to your appeal id? Right, they didn't. So they gave a computer they didn't have remote access to, not properly configured, and then forced you to either move or give private information.
You are absolutely incorrect. They had remote access and I watched them use it in various ways. When troubleshooting issues they would login and move my mouse and use a virtual keyboard. They could install software remotely on a schedule.
Not sure why you're under the impression that an apple account is required for remote management. There's probably >5 different popular third party software solutions for that
The apple sign in is an extraneous unneeded piece that once they annoy you into it, it then becomes considered a sign of ownership, which I never considered, because why would I?
You are right that IT should've had a way of dealing with it better, but in their defense this may have been an anti-feature (asking a user to login to iCloud, a service they've never used once, is not a feature) added in an update, after they issued the laptop. It's a small company, so I don't fault them on it as much as the trillion dollar company with the goal of inflating their iCloud metrics by forcing users to login to it.
Oh, I assumed that you would be forced to type your password or have enough rights to install stuff in a computer, be it in person or remotely, so I assumed that whatever 3rd party program they used required to have enough access, and that apple would use the apple id as a master password, given that it's what is being used to lock down the device itself.
Well, yet another issue with apple lol, why add a ownership id if it's not even what gives root access. Lmao.
Nah the iCloud crap is literally just another account. Up until the moment you login to it, then it silently ties the device to that account for "security" purposes. I kept emailing the IT guy back saying I don't know what I can do, I can see a list of devices here and that laptop has been removed from it.
After him asking me for help repeatedly I felt I had to just give up, give him the password on a slack call, then immediately reset it once he'd done what he needed.
Apple issue then, quite the anti feature. In any case, I hope the IT team learns from it and they create a company ID or several company IDs so this doesn't happen again haha.