this post was submitted on 23 Oct 2024
1871 points (98.6% liked)

Malicious Compliance

19593 readers
2 users here now

People conforming to the letter, but not the spirit, of a request. For now, this includes text posts, images, videos and links. Please ensure that the “malicious compliance” aspect is apparent - if you’re making a text post, be sure to explain this part; if it’s an image/video/link, use the “Body” field to elaborate.

======

======

Also check out the following communities:

!fakehistoryporn@lemmy.world !unethicallifeprotips@lemmy.world

founded 1 year ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] TexasDrunk@lemmy.world 1 points 4 weeks ago (1 children)

I shot a message to a colleague who is still in IT (I'm into other shit these days) and he says you're correct. IOS doesn't allow for this. The IT department running Mobile Device Management would have to set up Mobile App Management (MAM) on their side. So it's possible that they only get access to those apps without giving them access to the whole device but a lot of lazy departments won't do it.

[–] Rekorse@sh.itjust.works 1 points 4 weeks ago

Well that explains why one of the other teams clients revolted against intune and switched to just using MFA for o365.

Its funny, they are so jaded by the MDM they keep grilling people about the MFA and if it gives access to their phones, etc.

I also think some people are starting to catch on to Microsoft's apps collecting too much data, including MFA. Theres a big banner when you first set it up asking for permission.