Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by aaomidi | Hacker News Reader

Parent Full thread

aaomidi·

On iOS this is possible through management profiles. People use these as parental control apps:

For example: https://apps.apple.com/us/app/parental-control-app-ourpact/i...

This even allows you to live view a screen.

Apple doesn’t really tell you that you have a management profile setup.

View on HN

I thought emergency reset is supposed to protect you from abusive people but I skimmed the support article and it seems like emergency reset does not remove management profiles: https://support.apple.com/en-asia/guide/personal-safety/ips2...

I guess it’s hard to balance, because a company probably doesn’t want their employees uninstalling MDM profiles.

> I guess it’s hard to balance, because a company probably doesn’t want their employees uninstalling MDM profiles.

I don't really understand why you would need technical measures for that. Surely a disconnected phone would quickly be noticed, and appropriate action can be taken by the business itself?

Detecting disconnections is never an easy problem to solve because you need to account for false positives like dead battery or lack of service. The battery could be dead for an entire night while someone sleeps. But it would only take twenty minutes to remove the MDM profile, exfiltrate company data, and then restore the profile.

This is why I think the future needs to be getting rid of these management profiles.

They do nothing other than buy folks a false sense of security.

Reply on news.ycombinator.com