2 ms·

> Apple is happy as can be to let enterprise (and schools/gov/etc) force users to install apps. The enterprises are "forcing" the installation of apps on the h

> Apple is happy as can be to let enterprise (and schools/gov/etc) force users to install apps. The enterprises are "forcing" the installation of apps on the hardware they themselves own. Corp A cannot force the installation of apps on Corp B's devices, or even on the personal devices of Corp A's employees. I have an iPhone for work and my personal iPhone, and my work has no access to the latter. I don't think there's any technical reason why you couldn't set up a MDM system for your own personal phones and have the same capabilities as an 'enterprise'.

smoldesu 5y ago
> The enterprises are "forcing" the installation of apps on the hardware they themselves own. Okay, then why can't I do the same thing with devices that I own?
- throw0101a 5y ago
  You can. Set up an MDM system and attach your device. * https://simplemdm.com/ https://simplemdm.com/ * https://jumpcloud.com/mdm-mobile-device-management https://jumpcloud.com/mdm-mobile-device-management
  - easton 5y ago
    That's not enough. You also need to buy a enterprise developer certificate from Apple (a few hundred dollars?). App Store apps can be deployed via MDM for free, but not ones you write.
    - smoldesu 5y ago
      Wow, that's unbelievable.
horsawlarway 5y ago
There's nothing to stop enterprises from asking users to install their provisioning profiles on personal devices (technically the employee could say "no" but employment is "at will" in almost all of the US, so....) And yes - I can set up an MDM system, but that doesn't provide the same utility as a store. Nor does it work around the profile limitations built into iOS (again, I'm out of date, but previously you could only have a single provisioning profile installed on the device - this was actually the recommended way to prevent this type of attack: pre-install your own profile).

2 ms·

> Apple is happy as can be to let enterprise (and schools/gov/etc) force users to install apps. The enterprises are "forcing" the installation of apps on the h

by throw0101a 5y ago

smoldesu 5y ago
> The enterprises are "forcing" the installation of apps on the hardware they themselves own. Okay, then why can't I do the same thing with devices that I own?
- throw0101a 5y ago
  You can. Set up an MDM system and attach your device. * https://simplemdm.com/ https://simplemdm.com/ * https://jumpcloud.com/mdm-mobile-device-management https://jumpcloud.com/mdm-mobile-device-management
  - easton 5y ago
    That's not enough. You also need to buy a enterprise developer certificate from Apple (a few hundred dollars?). App Store apps can be deployed via MDM for free, but not ones you write.
    - smoldesu 5y ago
      Wow, that's unbelievable.
horsawlarway 5y ago
There's nothing to stop enterprises from asking users to install their provisioning profiles on personal devices (technically the employee could say "no" but employment is "at will" in almost all of the US, so....) And yes - I can set up an MDM system, but that doesn't provide the same utility as a store. Nor does it work around the profile limitations built into iOS (again, I'm out of date, but previously you could only have a single provisioning profile installed on the device - this was actually the recommended way to prevent this type of attack: pre-install your own profile).