Surely it's possible to treat phones the same way as computers in corporate settings? Normal users aren't usually allowed to install whatever they want on their work PC, so why their work phone?
replyI think they were talking about bring your own device.
replyHow many people bring their own laptop to work? (ignoring self-employed people and the like which this line of thinking really doesn't apply to) Phones should be treated the same way.
replyPersonal devices shouldn't be used for work purposes to begin with. If work has security requirements regarding what phone and what condition it is in, they better be supplying their own phone to ensure those requirements are satisfied.
> But they benefit from accessing their work email, Teams chat, calendar, etc. from their phones.
replyNo, they don't benefit (cause it means they check work mail on weekends or evenings), but their employer do...
Vast majority of the people don't have the need for a separate work phone. But they benefit from accessing their work email, Teams chat, calendar, etc. from their phones.
replyIf work wants to be picky about what devices can access those things, but still want their employees to do so, they should provide devices for that. If they don't, well, then the employees get to not do work during non-work hours.
replyOr your company buys phones for its employees and allows only those work phones on its networks. I understand that this is an extra cost and phones are maybe more expensive than some laptops good enough for working with Office.
replyThe ruling doesn't ask Apple to get rid of app sandboxing. The ruling explicitly notes this:
reply> Moreover, because iOS apps are sandboxed, as implemented in other jurisdictions, apps available through alternative distribution will be sandboxed, which further strengthens security and reduces the likelihood that any app will compromise other apps [...]
"Billions of consumer phones must be locked down because our IT department is completely incompetent and incapable of providing locked down work devices"
replyUhm, disallowing third-party stores, sure, but you draw a line that allows a non-jailbroken and updated device to be able to access company data? How is the lack of third-party app stores gonna prevent someone from sending sensitive data through the Mail app or to iCloud? Shouldn't company devices be managed with MDM to begin with?
reply> It's terrible news for anyone who has some responsibility for the security of environments in which these devices are used.
replyOn the contrary, it allows app and payment security to be better than what Apple offers.