News for hackers. Stuff that matters.

A comment on MS Exchange “remote wipe” is a terrible, terrible bug. Parent comment

Re:MS Exchange “remote wipe” is a terrible, terrible bug by extension on Sunday September 12, 2010 @08:39PM (#1684999)
You don't do it unless you want corporate IT to administer it

The problem is, there is no way a user will expect that they are giving away that privilege merely by adding an Exchange account to their personal phone. This is a gaping security hole in the mobile client software and it's entirely the fault of the phone developers. Just giving the server the name of my device without telling me is a breach, as far as I'm concerned.

It's not about data ownership, it's about access. Your data being on a device does not authorize you to access that device.

[ Parent | on HN ]
Re:MS Exchange “remote wipe” is a terrible, terrible bug by kogir on Sunday September 12, 2010 @08:47PM (#1685029)
We don't require employees to link their personal phones. It's their choice, and the activesync policy is part of the bargain.

In fact, I'd personally recommend employees not link their phones. Work isn't so important it should be always on.

[ Parent | on HN ]
Re:MS Exchange “remote wipe” is a terrible, terrible bug by extension on Sunday September 12, 2010 @09:03PM (#1685080)
It's not part of the bargain if you don't tell them about it.
[ Parent | on HN ]
Re:MS Exchange “remote wipe” is a terrible, terrible bug by russss on Monday September 13, 2010 @07:52PM (#1688794)
So, what you're complaining about is companies who don't tell users about their policies. Don't tar everyone with the same brush.

Remote wipe is there for a good (regulatory) reason.

[ Parent | on HN ]
Re:MS Exchange “remote wipe” is a terrible, terrible bug by extension on Tuesday September 14, 2010 @01:23AM (#1689579)
No, I'm complaining about phone developers, which is why I said it's entirely their fault.
[ Parent | on HN ]