Comment by somerandom2407
3 hours ago
It's terrible news for anyone who has some responsibility for the security of environments in which these devices are used.
Right now we have a relatively high confidence that as long as the devices are not jailbroken and are kept up to date they are relatively secure.
What this change means for people like me is that either there is some capability to detect whether third-party app stores are in use on a device and we will set a policy that disallows anyone using such things from accessing company data/services, or we have to lock out the devices altogether.
Surely it's possible to treat phones the same way as computers in corporate settings? Normal users aren't usually allowed to install whatever they want on their work PC, so why their work phone?
I think they were talking about bring your own device.
How many people bring their own laptop to work? (ignoring self-employed people and the like which this line of thinking really doesn't apply to) Phones should be treated the same way.
Personal devices shouldn't be used for work purposes to begin with. If work has security requirements regarding what phone and what condition it is in, they better be supplying their own phone to ensure those requirements are satisfied.
3 replies →
The ruling doesn't ask Apple to get rid of app sandboxing. The ruling explicitly notes this:
> Moreover, because iOS apps are sandboxed, as implemented in other jurisdictions, apps available through alternative distribution will be sandboxed, which further strengthens security and reduces the likelihood that any app will compromise other apps [...]
Or your company buys phones for its employees and allows only those work phones on its networks. I understand that this is an extra cost and phones are maybe more expensive than some laptops good enough for working with Office.
"Billions of consumer phones must be locked down because our IT department is completely incompetent and incapable of providing locked down work devices"
Uhm, disallowing third-party stores, sure, but you draw a line that allows a non-jailbroken and updated device to be able to access company data? How is the lack of third-party app stores gonna prevent someone from sending sensitive data through the Mail app or to iCloud? Shouldn't company devices be managed with MDM to begin with?
> It's terrible news for anyone who has some responsibility for the security of environments in which these devices are used.
On the contrary, it allows app and payment security to be better than what Apple offers.