You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
Last Thursday, I was locked out of my cloud MDM, my data was deleted, and MDM agents for every device @trailofbits were silently removed by the vendor, leaving the entire company unmanaged. There was no advance notice and no explanation.
This is a warning: Never use Kandji.pic.twitter.com/0zIPZKpCC8
MDM is a pain in the ass, and we’ve been looking for a new vendor since Fleetsmith was acquired by Apple (and then disabled 90% of their product). Their agent barely worked, and frequently mishandled security updates.pic.twitter.com/iO8n7Litsx
Fleetsmith had clearly become a burning bridge when they failed, again, to apply 10.15.6 to our machines (one of their few remaining features). We found Kandji and within 3 days, their solutions team helped us plan and execute a one-way migration to their product.pic.twitter.com/DXLkxwvUTC
In our last meeting, Kandji provided us a custom package to remove Fleetsmith from all our machines and step-by-step instructions for migrating to theirs. Satisfied with our testing and their help, we began migrating immediately.pic.twitter.com/ZYCyPLVqWv
The next day, Kandji pulled the plug on our entire installation and used a kill-switch to silently un-enroll all our devices. This violated their own license agreement, which requires prior notice, an option to cure, and preserving our data, like any good cloud service.pic.twitter.com/c3kX0IMCgl
It’s now been a week, and we still haven’t received an explanation nor do we expect to! Even if it were explained, this behavior is unacceptable for any cloud service and truly malicious for a cloud security company. cc @badthingsdailypic.twitter.com/WK9LgNIdvq
In the end, this is another reminder that a cloud product is only as good as its operators. If you want a cloud MDM where incompetent management can impulsively nuke their clients without explanation and violate their license terms, then by all means please use Kandji.
The only commercial product I can recommend in earnest is @simplemdm, which might not necessarily fit all your requirements, esp if you were hoping for software freshness/custom catalog features like fs had.
I don't have confidence in the other commercial products for macOS.
Thanks! SimpleMDM does look like a great product for what it does (the essentials). I'm going to give it a closer look soon.
Am I reading too much into this if I think that someone went "omg hackers! they gonna find all the shit we built into our product and unleash 0-day hell on us!!! BAIL BAIL BAIL!"?
That was my first thought too, so whether or not it's too much to read into it, know that you are not alone...
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
