5 ms·

So how do you install it?

by jtbayly 4y ago

joshstrange 4y ago
Here is the full flow: https://imgur.com/a/ofvfty8 https://imgur.com/a/ofvfty8
- dylan604 4y ago
  Who does this kind of app install, and what do these kinds of apps promise that makes this sound like it is worth doing?
  - joshstrange 4y ago
    I believe I remember reading about Google or FB having an app for employees to order food from the cafeteria as well as apps for internal tools/build pipelines/etc. While some POS apps like Square are in the app store there are others that are distributed through enterprise apps. It allows companies to push updates faster when/if something goes wrong. I also know (at least in the past) NetJets used enterprise apps for their pilots, the apps had the flight manual among other things if I remember correctly. Often it's custom or white labeled software that benefits from enterprise distribution. EDIT: Also if an organization is large enough TestFlight might not be suitable to cover everything they need. For example you might want nightly developer builds, weekly/milestone internal test builds, stagings builds, and then TestFlight and release. You can accomplish this with multiple apps that are never released (My App - Dev, My App - QA) so you can use TestFlight for each and then only release the production "My App" but that has some sharp edges and requires everyone be added to the Apple development team.
  - bombcar 4y ago
    If you're an enterprise, and have company-issued devices, you can use this to load company-specific apps onto your iPads/phones. Think ordering kiosk apps, stuff like that. And since they're company devices, either IT can set them up before handing them out, or you can use tools to pre-install the certificates.
    - dylan604 4y ago
      If it's a company owned/provided device, then sure I'll accept whatever scary warning company says to. I will never accept that for a personal device. Ever.
      - bombcar 4y ago
        The problem is there are way too many "Scary Warnings™" out there, so anyone not completely versed in the technological world will just ignore them especially if they believe someone from "Tech Support" is telling them to do so. It's a moderately hard problem to resolve.
        dylan604 4y ago
        If it's a company device, I don't care what happens to it. So if it's bad, then it's IT's problem ;P If it's my own device, I don't have to worry about it because it'll never happen. This kiosk type stuff that was mentioned up thread is the type of stuff that could just as easily be run off of a corporate LAN site that I can access via my company provided compute device. The fact that the younger generations have been forced to accept BYOD as a work device is just sad to me.
      - saagarjha 4y ago
        Enterprise apps are “fine” for BYOD; they’re far better than invasive MDM.
  - Clent 4y ago
    There are video streaming apps being distributed via this "exploit".

So how do you install it?

joshstrange 4y ago

Here is the full flow: https://imgur.com/a/ofvfty8 https://imgur.com/a/ofvfty8

dylan604 4y ago
Who does this kind of app install, and what do these kinds of apps promise that makes this sound like it is worth doing?
- joshstrange 4y ago
  I believe I remember reading about Google or FB having an app for employees to order food from the cafeteria as well as apps for internal tools/build pipelines/etc. While some POS apps like Square are in the app store there are others that are distributed through enterprise apps. It allows companies to push updates faster when/if something goes wrong. I also know (at least in the past) NetJets used enterprise apps for their pilots, the apps had the flight manual among other things if I remember correctly. Often it's custom or white labeled software that benefits from enterprise distribution. EDIT: Also if an organization is large enough TestFlight might not be suitable to cover everything they need. For example you might want nightly developer builds, weekly/milestone internal test builds, stagings builds, and then TestFlight and release. You can accomplish this with multiple apps that are never released (My App - Dev, My App - QA) so you can use TestFlight for each and then only release the production "My App" but that has some sharp edges and requires everyone be added to the Apple development team.
- bombcar 4y ago
  If you're an enterprise, and have company-issued devices, you can use this to load company-specific apps onto your iPads/phones. Think ordering kiosk apps, stuff like that. And since they're company devices, either IT can set them up before handing them out, or you can use tools to pre-install the certificates.
  - dylan604 4y ago
    If it's a company owned/provided device, then sure I'll accept whatever scary warning company says to. I will never accept that for a personal device. Ever.
    - bombcar 4y ago
      The problem is there are way too many "Scary Warnings™" out there, so anyone not completely versed in the technological world will just ignore them especially if they believe someone from "Tech Support" is telling them to do so. It's a moderately hard problem to resolve.
      - dylan604 4y ago
        If it's a company device, I don't care what happens to it. So if it's bad, then it's IT's problem ;P If it's my own device, I don't have to worry about it because it'll never happen. This kiosk type stuff that was mentioned up thread is the type of stuff that could just as easily be run off of a corporate LAN site that I can access via my company provided compute device. The fact that the younger generations have been forced to accept BYOD as a work device is just sad to me.
    - saagarjha 4y ago
      Enterprise apps are “fine” for BYOD; they’re far better than invasive MDM.
- Clent 4y ago
  There are video streaming apps being distributed via this "exploit".