4 ms·
I wonder how they determine that an Android device is actually running their MDM software instead of a fake program that simulates it while being observed by th
by andrewpi 14y ago
I wonder how they determine that an Android device is actually running their MDM software instead of a fake program that simulates it while being observed by the authorities?
- A1kmm 14y agoI think the intention is to protect government information from being obtained by someone gaining unauthorised access to the phone (e.g. an employee takes their smartphone into the building, goes to a meeting, and someone else compromises an app on the phone and uses it to listen in to the meeting), not to protect against the legitimate owner of the phone. So the owner of the phone deliberately faking the MDM software is probably outside of the threat model. That said, someone who managed to root someone else's phone remotely might be able to tamper with the MDM software in advance while wi-fi is still enabled so that it doesn't function correctly.