Hacker News Reader

Comment by notemaker | Hacker News Reader

With risk of being spammy, this is probably the most relevant discussion I've seen so far on HN w.r.t my experience of being locked out from my Apple ID.

I hope legislation will force Apple to step up and be more transparent / helpful.

https://skogsbrus.xyz/dont-put-all-your-apples-in-one-basket...

View on HN

From the timeline:

> got my Macbook Pro from work and signed in to my Apple ID on it.

Wouldn't this result in unintentional data sharing from the work device to your personal devices? (and vice versa)

In hindsight, yes that was a bad move (especially considering that my work laptop is still locked to my banned ID…)

As an Apple noob at the time, I assumed that if my MDM-managed device prompted me to log in with my Apple ID, that it of course would be an allowed action.

With regards to data being shared, the only thing I noticed was wifi passwords and peripherals pairing (apple keyboard).

Yes, do not do this.

It's enabled in some corpos. Allows one to make AirPods auto-jump between one's iPhone and work laptop etc.

Yeah, I would never do this. My work iPhone is on a whole separate Apple Id than my personal phone.

Never mix work and personal. It isn't worth it.

This is why I don't sign in or enable 'find my' on any of my devices. Apple even has a backdoor which bypasses the encryption, allowing them to wipe a device in store.

Logging in takes control of your device out of your hands.

Why would you need to bypass encryption to wipe the device?

Because that is the way apple designed it. Try wiping a locked apple device without the password or recovery key.

I would expand to cover not only Apple, but Google and Microsoft.

You don't have a requirement to have an email account to login to Windows. MS is pushing it hard, (deceptive trend in big software) but the user can still push back.

I don't know if its still true today, but last time I setup a macOS machine (2020), it didn't require, but pushed, an Apple ID. My Pixel phone I setup this February also didn't require, but pushed, a Google account. I think iOS did require an AppleID, though.

macOS doesn't require Apple ID, although you wouldn't be able to use the app store without it (but pretty much everything worth installing is available as direct downloads anyway). This is similar to the current state of affairs with Win11, except that the latter very aggressively pushes you to use your online email/password as Windows login, whereas macOS insists on having a local account even if you do also set up Apple ID.

Don’t want to sound like I’m victim blaming the author. But I can tell you exactly the issue with their account: registering with an email on a self hosted .xyz domain. Using sketchy tld’s is just asking for this kind of trouble.

https://news.ycombinator.com/item?id=28554400

Nothing sketchy about self hosting your email. Sure, that is what the big tech cartel wants you to think so you're forced to let them handle your correspondence "for your own safety". Don't believe their lies.

Issue isn’t self hosting email, it’s self hosting it at .xyz.

They had one of the cheapest registration costs. And so ended up with a high concentration of spammers compared to older established tld’s like dot com. Using the tld for legitimate purposes is really challenging due to the high number of systems that flat out blacklist it.

Making assumptions on someone's right to communicate based on their choice of email domain is discrimination, and only serves to drive people to their walled gardens.

I'm not the one making assumptions, it's thousands of independent hosts, and all big tech orgs (including specifically Apple in this case) who are making that assumption. I didn't say the assumption was right, just that it's trivial to avoid falling afoul of it by choosing to use a different TLD.

"Sketchy tld"? Even google's parent company uses it for its corporate website.

I babysit a few corporate mailfilters and have more spam from .xyz than from all other TLDs combined. I dont block on that (most get disappeared due to 'new domain') but that's the cohort all .xyz pages are sharing.

xyz has been accomodating to scammers ever since its inception. After a decade I think we can say that it is on purpose.

FWIW, it's not self hosted. I use Fastmail. Thanks for the link about .xyz though, I was not aware it is associated with spam.

I would say that SMS and invasive email services are sketchier than using .xyz.

You end up fighting an uphill battle against every third party that blacklists .xyz, It’s not worth the fight just to use a cute tld and save a few dollars on registration cost.

Reply on news.ycombinator.com