4 ms·

“It’s not clear what permissions you’re granting”. If they’re installing enterprise certs then you’re granting all the permissions, plus I’m sure a few no app i

“It’s not clear what permissions you’re granting”. If they’re installing enterprise certs then you’re granting all the permissions, plus I’m sure a few no app in the store is going to be granted by Apple.

saagarjha 8y ago
Enterprise certificates still need to ask for permission to access the camera, microphone, etc. But you're right: they can use entitlements that Apple will not grant normal App Store apps.
- anyfoo 8y ago
  What? Enterprise profiles are only allowed the set of entitlements that they are granted, similar to the App Store.
  - dkonofalski 8y ago
    Yes and most people who stumble upon this to get "free apps" are just going to allow all entitlements without really knowing what that means.
    - anyfoo 8y ago
      No, the entitlements are granted by Apple, not the user. It's not the same thing as the prompts you get for e.g. the Camera.
      - dkonofalski 8y ago
        Right... but that's the case here. People are installing certs that grant all entitlements, a completely valid situation for someone using the certs as intended but not for someone unknowingly doing so. Apple is removing the certs whenever they can but that can't possibly cover every situation.
        deleted 8y ago
        [deleted]
  - saagarjha 8y ago
    Mhm, and you can add any entitlements that Apple is willing to let you sign. Not all of these are allowed in App Store apps.
walrus01 8y ago
I think what they meant is that it's not clear to the average non technical user. It's clear to the average HN reader. For 20+ years, in GUI design, it's been proven that if you present users with a challenge/warning prompt they will do whatever is necessary to click "yes/ok/i understand/install this thing" to accomplish what they think is their goal. It would be worth having a deeply buried toggle within the iOS UI that you can change, if you're an actual developer. Otherwise installing an enterprise certificate on iOS should have larger, scarier, more time consuming and more difficult to bypass warnings.
- dkonofalski 8y ago
  >they will do whatever is necessary to accomplish what they think is their goal. This is exactly my concern. As someone who had to deal with people jailbreaking their phones without any knowledge of what they were doing, this is exactly what I think the issue is. The difference is that, in this case, there's credible evidence to suggest that this is a data-mining operation in disguise and people will unknowingly allow it to get "free apps".
deleted 8y ago
[deleted]

saagarjha 8y ago

Enterprise certificates still need to ask for permission to access the camera, microphone, etc. But you're right: they can use entitlements that Apple will not grant normal App Store apps.

anyfoo 8y ago
What? Enterprise profiles are only allowed the set of entitlements that they are granted, similar to the App Store.
- dkonofalski 8y ago
  Yes and most people who stumble upon this to get "free apps" are just going to allow all entitlements without really knowing what that means.
  - anyfoo 8y ago
    No, the entitlements are granted by Apple, not the user. It's not the same thing as the prompts you get for e.g. the Camera.
    - dkonofalski 8y ago
      Right... but that's the case here. People are installing certs that grant all entitlements, a completely valid situation for someone using the certs as intended but not for someone unknowingly doing so. Apple is removing the certs whenever they can but that can't possibly cover every situation.
      - deleted 8y ago
        [deleted]
- saagarjha 8y ago
  Mhm, and you can add any entitlements that Apple is willing to let you sign. Not all of these are allowed in App Store apps.

walrus01 8y ago

I think what they meant is that it's not clear to the average non technical user. It's clear to the average HN reader. For 20+ years, in GUI design, it's been proven that if you present users with a challenge/warning prompt they will do whatever is necessary to click "yes/ok/i understand/install this thing" to accomplish what they think is their goal. It would be worth having a deeply buried toggle within the iOS UI that you can change, if you're an actual developer. Otherwise installing an enterprise certificate on iOS should have larger, scarier, more time consuming and more difficult to bypass warnings.

dkonofalski 8y ago
>they will do whatever is necessary to accomplish what they think is their goal. This is exactly my concern. As someone who had to deal with people jailbreaking their phones without any knowledge of what they were doing, this is exactly what I think the issue is. The difference is that, in this case, there's credible evidence to suggest that this is a data-mining operation in disguise and people will unknowingly allow it to get "free apps".

deleted 8y ago

[deleted]