HT202739: Product security certifications, validations, and guidance for iOS

Learn about Product security certifications, validations, and guidance for iOS
AndyPe

Q: This website installs an app straight onto my iPad. Is it safe? http://www.mythware.com/products/classroom-management-for-ios/classroom-managem ent-for-ios-technical-specs.html

Is this safe? Is it allowed!

 

No certificate, MDM or App Store.

 

App claims to allow remote control over  device from a remote PC.

iPad 2

Posted on Feb 6, 2014 1:58 PM

Close

Q: This website installs an app straight onto my iPad. Is it safe? http://www.mythware.com/products/classroom-management-for-ios/clas ... more

  • All replies
  • Helpful answers

  • by varjak paw,

    varjak paw varjak paw Feb 6, 2014 2:37 PM in response to AndyPe
    Level 10 (169,876 points)
    Feb 6, 2014 2:37 PM in response to AndyPe

    It's not possible for any site to install a true app on your iPad. The only place to get apps is from the iTunes Store. That site is only setting a web app, and those are usually safe since they have little access to any part of the device. I have no experience with this particular one, though, so I can't comment about it specifically, but Intel works with them and I can't imagine Intel would work with a shady company.

     

    Regards.

  • by AndyPe,

    AndyPe AndyPe Feb 6, 2014 3:07 PM in response to varjak paw
    Level 1 (0 points)
    Feb 6, 2014 3:07 PM in response to varjak paw

    @Varjak

    I can assure that it installs and I was given a warning not to open the app.

     

    "Are you sure you want to open the application "Classroom" from Developer: "iPhone Distribution: Nanjing Universal Networks Co., Ltd"?

    Continue or Quit

     

    Try it yourself if you don't believe me.  I would rather that somebody from Apple did it in safe environment.

  • by varjak paw,Helpful

    varjak paw varjak paw Feb 6, 2014 3:12 PM in response to AndyPe
    Level 10 (169,876 points)
    Feb 6, 2014 3:12 PM in response to AndyPe

    I did try it. Again, it's a web app, not a true iOS app. And again, Intel resells their products - it's Intel's Learning Series Classroom Management - so the company would seem trustworthy. If you don't know what a web app is and how it differs, see:

     

    https://developer.apple.com/library/safari/referencelibrary/GettingStarted/GS_iP honeWebApp/_index.html#//apple_ref/doc/uid/TP40008134

     

    But you're not sure, then don't install that web app.

     

    Regards.

     

    Message was edited by: varjak paw

  • by varjak paw,

    varjak paw varjak paw Feb 7, 2014 7:06 AM in response to AndyPe
    Level 10 (169,876 points)
    Feb 7, 2014 7:06 AM in response to AndyPe

    OK, you're welcome, I guess.

  • by AndyPe,

    AndyPe AndyPe Feb 7, 2014 12:27 PM in response to varjak paw
    Level 1 (0 points)
    Feb 7, 2014 12:27 PM in response to varjak paw

    @Varjak - appreciate your help.  For benefit of the forum I also was given this feedback elsewhere -

     

    It’s using standard iOS wireless app distribution.  This is the URL behind that Install button - itms-services://?action=download-manifest&url=http://www.mythware.com/ios/V1.0/ClassRoom.plist

     

    To do remote locking on an un-jailbroken phone, then it has to be using the iOS MDM API.  When it runs, you are accepting their deployment certificate and enrolling to their MDM server – [this is an unverified assumption].

     

    Apple would reject an app that enrolled you to an MDM server, so they are having to deploy like this.