4 ms·

The warning looks like this: https://support.apple.com/library/content/dam/edam/applecare/images/en_US/iOS/iphone6-ios9-enterprise-untrusted_enterprise_app.png

The warning looks like this: https://support.apple.com/library/content/dam/edam/applecare/images/en_US/iOS/iphone6-ios9-enterprise-untrusted_enterprise_app.png https://support.apple.com/library/content/dam/edam/applecare... EDIT: Formerly I asked: What does the scary warning look like? Is there a screenshot of an example? I would like to show this to my employees and family and tell them never to trust such a cert.

dylan604 4y ago
At least it doesn't have "Accept Anyways" type of button. The only option is to cancel whatever it was being attempted.
- jtbayly 4y ago
  So how do you install it?
  - joshstrange 4y ago
    Here is the full flow: https://imgur.com/a/ofvfty8 https://imgur.com/a/ofvfty8
    - dylan604 4y ago
      Who does this kind of app install, and what do these kinds of apps promise that makes this sound like it is worth doing?
      - joshstrange 4y ago
        I believe I remember reading about Google or FB having an app for employees to order food from the cafeteria as well as apps for internal tools/build pipelines/etc. While some POS apps like Square are in the app store there are others that are distributed through enterprise apps. It allows companies to push updates faster when/if something goes wrong. I also know (at least in the past) NetJets used enterprise apps for their pilots, the apps had the flight manual among other things if I remember correctly. Often it's custom or white labeled software that benefits from enterprise distribution. EDIT: Also if an organization is large enough TestFlight might not be suitable to cover everything they need. For example you might want nightly developer builds, weekly/milestone internal test builds, stagings builds, and then TestFlight and release. You can accomplish this with multiple apps that are never released (My App - Dev, My App - QA) so you can use TestFlight for each and then only release the production "My App" but that has some sharp edges and requires everyone be added to the Apple development team.
      - bombcar 4y ago
        If you're an enterprise, and have company-issued devices, you can use this to load company-specific apps onto your iPads/phones. Think ordering kiosk apps, stuff like that. And since they're company devices, either IT can set them up before handing them out, or you can use tools to pre-install the certificates.
        dylan604 4y ago
        If it's a company owned/provided device, then sure I'll accept whatever scary warning company says to. I will never accept that for a personal device. Ever.
        bombcar 4y ago
        The problem is there are way too many "Scary Warnings™" out there, so anyone not completely versed in the technological world will just ignore them especially if they believe someone from "Tech Support" is telling them to do so. It's a moderately hard problem to resolve.
        dylan604 4y ago
        If it's a company device, I don't care what happens to it. So if it's bad, then it's IT's problem ;P If it's my own device, I don't have to worry about it because it'll never happen. This kiosk type stuff that was mentioned up thread is the type of stuff that could just as easily be run off of a corporate LAN site that I can access via my company provided compute device. The fact that the younger generations have been forced to accept BYOD as a work device is just sad to me.
        saagarjha 4y ago
        Enterprise apps are “fine” for BYOD; they’re far better than invasive MDM.
      - Clent 4y ago
        There are video streaming apps being distributed via this "exploit".
joshstrange 4y ago
Oops, just saw your edit. Well I just spent the last 10 minutes or so documenting the flow so I'll post it anyway: https://imgur.com/a/ofvfty8 https://imgur.com/a/ofvfty8
- mcculley 4y ago
  Thank you for documenting it!

dylan604 4y ago

At least it doesn't have "Accept Anyways" type of button. The only option is to cancel whatever it was being attempted.

jtbayly 4y ago
So how do you install it?
- joshstrange 4y ago
  Here is the full flow: https://imgur.com/a/ofvfty8 https://imgur.com/a/ofvfty8
  - dylan604 4y ago
    Who does this kind of app install, and what do these kinds of apps promise that makes this sound like it is worth doing?
    - joshstrange 4y ago
      I believe I remember reading about Google or FB having an app for employees to order food from the cafeteria as well as apps for internal tools/build pipelines/etc. While some POS apps like Square are in the app store there are others that are distributed through enterprise apps. It allows companies to push updates faster when/if something goes wrong. I also know (at least in the past) NetJets used enterprise apps for their pilots, the apps had the flight manual among other things if I remember correctly. Often it's custom or white labeled software that benefits from enterprise distribution. EDIT: Also if an organization is large enough TestFlight might not be suitable to cover everything they need. For example you might want nightly developer builds, weekly/milestone internal test builds, stagings builds, and then TestFlight and release. You can accomplish this with multiple apps that are never released (My App - Dev, My App - QA) so you can use TestFlight for each and then only release the production "My App" but that has some sharp edges and requires everyone be added to the Apple development team.
    - bombcar 4y ago
      If you're an enterprise, and have company-issued devices, you can use this to load company-specific apps onto your iPads/phones. Think ordering kiosk apps, stuff like that. And since they're company devices, either IT can set them up before handing them out, or you can use tools to pre-install the certificates.
      - dylan604 4y ago
        If it's a company owned/provided device, then sure I'll accept whatever scary warning company says to. I will never accept that for a personal device. Ever.
        bombcar 4y ago
        The problem is there are way too many "Scary Warnings™" out there, so anyone not completely versed in the technological world will just ignore them especially if they believe someone from "Tech Support" is telling them to do so. It's a moderately hard problem to resolve.
        dylan604 4y ago
        If it's a company device, I don't care what happens to it. So if it's bad, then it's IT's problem ;P If it's my own device, I don't have to worry about it because it'll never happen. This kiosk type stuff that was mentioned up thread is the type of stuff that could just as easily be run off of a corporate LAN site that I can access via my company provided compute device. The fact that the younger generations have been forced to accept BYOD as a work device is just sad to me.
        saagarjha 4y ago
        Enterprise apps are “fine” for BYOD; they’re far better than invasive MDM.
    - Clent 4y ago
      There are video streaming apps being distributed via this "exploit".

joshstrange 4y ago

Oops, just saw your edit. Well I just spent the last 10 minutes or so documenting the flow so I'll post it anyway: https://imgur.com/a/ofvfty8 https://imgur.com/a/ofvfty8

mcculley 4y ago
Thank you for documenting it!