7 ms·

With risk of being spammy, this is probably the most relevant discussion I've seen so far on HN w.r.t my experience of being locked out from my Apple ID. I hop

With risk of being spammy, this is probably the most relevant discussion I've seen so far on HN w.r.t my experience of being locked out from my Apple ID. I hope legislation will force Apple to step up and be more transparent / helpful. https://skogsbrus.xyz/dont-put-all-your-apples-in-one-basket/ https://skogsbrus.xyz/dont-put-all-your-apples-in-one-basket...

1oooqooq 2y ago
[flagged]
phantomathkg 2y ago
I would expand to cover not only Apple, but Google and Microsoft.
- 1970-01-01 2y ago
  You don't have a requirement to have an email account to login to Windows. MS is pushing it hard, (deceptive trend in big software) but the user can still push back.
  - antiframe 2y ago
    I don't know if its still true today, but last time I setup a macOS machine (2020), it didn't require, but pushed, an Apple ID. My Pixel phone I setup this February also didn't require, but pushed, a Google account. I think iOS did require an AppleID, though.
    - int_19h 2y ago
      macOS doesn't require Apple ID, although you wouldn't be able to use the app store without it (but pretty much everything worth installing is available as direct downloads anyway). This is similar to the current state of affairs with Win11, except that the latter very aggressively pushes you to use your online email/password as Windows login, whereas macOS insists on having a local account even if you do also set up Apple ID.
secondraft 2y ago
From the timeline: > got my Macbook Pro from work and signed in to my Apple ID on it. Wouldn't this result in unintentional data sharing from the work device to your personal devices? (and vice versa)
- nerdponx 2y ago
  Yes, do not do this.
- notemaker 2y ago
  In hindsight, yes that was a bad move (especially considering that my work laptop is still locked to my banned ID…) As an Apple noob at the time, I assumed that if my MDM-managed device prompted me to log in with my Apple ID, that it of course would be an allowed action. With regards to data being shared, the only thing I noticed was wifi passwords and peripherals pairing (apple keyboard).
- HumblyTossed 2y ago
  Yeah, I would never do this. My work iPhone is on a whole separate Apple Id than my personal phone. Never mix work and personal. It isn't worth it.
- orloffm 2y ago
  It's enabled in some corpos. Allows one to make AirPods auto-jump between one's iPhone and work laptop etc.
initplus 2y ago
Don’t want to sound like I’m victim blaming the author. But I can tell you exactly the issue with their account: registering with an email on a self hosted .xyz domain. Using sketchy tld’s is just asking for this kind of trouble. https://news.ycombinator.com/item?id=28554400 https://news.ycombinator.com/item?id=28554400
- beeboobaa3 2y ago
  Nothing sketchy about self hosting your email. Sure, that is what the big tech cartel wants you to think so you're forced to let them handle your correspondence "for your own safety". Don't believe their lies.
  - initplus 2y ago
    Issue isn’t self hosting email, it’s self hosting it at .xyz. They had one of the cheapest registration costs. And so ended up with a high concentration of spammers compared to older established tld’s like dot com. Using the tld for legitimate purposes is really challenging due to the high number of systems that flat out blacklist it.
    - beeboobaa3 2y ago
      Making assumptions on someone's right to communicate based on their choice of email domain is discrimination, and only serves to drive people to their walled gardens.
      - initplus 2y ago
        I'm not the one making assumptions, it's thousands of independent hosts, and all big tech orgs (including specifically Apple in this case) who are making that assumption. I didn't say the assumption was right, just that it's trivial to avoid falling afoul of it by choosing to use a different TLD.
- Zambyte 2y ago
  I would say that SMS and invasive email services are sketchier than using .xyz.
borgbean 2y ago
This is why I don't sign in or enable 'find my' on any of my devices. Apple even has a backdoor which bypasses the encryption, allowing them to wipe a device in store. Logging in takes control of your device out of your hands.
- thefifthsetpin 2y ago
  Why would you need to bypass encryption to wipe the device?
  - borgbean 2y ago
    Because that is the way apple designed it. Try wiping a locked apple device without the password or recovery key.
    - deleted 2y ago
      [deleted]

1oooqooq 2y ago

[flagged]

phantomathkg 2y ago

I would expand to cover not only Apple, but Google and Microsoft.

1970-01-01 2y ago
You don't have a requirement to have an email account to login to Windows. MS is pushing it hard, (deceptive trend in big software) but the user can still push back.
- antiframe 2y ago
  I don't know if its still true today, but last time I setup a macOS machine (2020), it didn't require, but pushed, an Apple ID. My Pixel phone I setup this February also didn't require, but pushed, a Google account. I think iOS did require an AppleID, though.
  - int_19h 2y ago
    macOS doesn't require Apple ID, although you wouldn't be able to use the app store without it (but pretty much everything worth installing is available as direct downloads anyway). This is similar to the current state of affairs with Win11, except that the latter very aggressively pushes you to use your online email/password as Windows login, whereas macOS insists on having a local account even if you do also set up Apple ID.

secondraft 2y ago

From the timeline: > got my Macbook Pro from work and signed in to my Apple ID on it. Wouldn't this result in unintentional data sharing from the work device to your personal devices? (and vice versa)

nerdponx 2y ago
Yes, do not do this.
notemaker 2y ago
In hindsight, yes that was a bad move (especially considering that my work laptop is still locked to my banned ID…) As an Apple noob at the time, I assumed that if my MDM-managed device prompted me to log in with my Apple ID, that it of course would be an allowed action. With regards to data being shared, the only thing I noticed was wifi passwords and peripherals pairing (apple keyboard).
HumblyTossed 2y ago
Yeah, I would never do this. My work iPhone is on a whole separate Apple Id than my personal phone. Never mix work and personal. It isn't worth it.
orloffm 2y ago
It's enabled in some corpos. Allows one to make AirPods auto-jump between one's iPhone and work laptop etc.

initplus 2y ago

Don’t want to sound like I’m victim blaming the author. But I can tell you exactly the issue with their account: registering with an email on a self hosted .xyz domain. Using sketchy tld’s is just asking for this kind of trouble. https://news.ycombinator.com/item?id=28554400 https://news.ycombinator.com/item?id=28554400

beeboobaa3 2y ago
Nothing sketchy about self hosting your email. Sure, that is what the big tech cartel wants you to think so you're forced to let them handle your correspondence "for your own safety". Don't believe their lies.
- initplus 2y ago
  Issue isn’t self hosting email, it’s self hosting it at .xyz. They had one of the cheapest registration costs. And so ended up with a high concentration of spammers compared to older established tld’s like dot com. Using the tld for legitimate purposes is really challenging due to the high number of systems that flat out blacklist it.
  - beeboobaa3 2y ago
    Making assumptions on someone's right to communicate based on their choice of email domain is discrimination, and only serves to drive people to their walled gardens.
    - initplus 2y ago
      I'm not the one making assumptions, it's thousands of independent hosts, and all big tech orgs (including specifically Apple in this case) who are making that assumption. I didn't say the assumption was right, just that it's trivial to avoid falling afoul of it by choosing to use a different TLD.
Zambyte 2y ago
I would say that SMS and invasive email services are sketchier than using .xyz.

borgbean 2y ago

This is why I don't sign in or enable 'find my' on any of my devices. Apple even has a backdoor which bypasses the encryption, allowing them to wipe a device in store. Logging in takes control of your device out of your hands.

thefifthsetpin 2y ago
Why would you need to bypass encryption to wipe the device?
- borgbean 2y ago
  Because that is the way apple designed it. Try wiping a locked apple device without the password or recovery key.
  - deleted 2y ago
    [deleted]