News for hackers. Stuff that matters.

A comment on Chinese authorities install app on phones of people entering Xinjiang. Parent comment

Re:Chinese authorities install app on phones of people enter... by z33k on Tuesday July 02, 2019 @02:19PM (#20337874)
I'd wager that they have a enterprise certificate to sign the iOS app with. Then it's a matter of sending the spy victims to a URL, installing the app and granting access to photos/ location/ whatever.
[ Parent | on HN ]
Re:Chinese authorities install app on phones of people enter... by tomovo on Tuesday July 02, 2019 @02:24PM (#20337923)
Nope.. the user would also have to open Settings and explicitly mark the vendor certificate as trusted.
[ Parent | on HN ]
Re:Chinese authorities install app on phones of people enter... by LocalH on Tuesday July 02, 2019 @03:13PM (#20338411)
It says the devices were unlocked then the device was connected. I would assume the device is in the custody of the Chinese authority at this point. Thus, they can just go into Settings and trust the cert.
[ Parent | on HN ]
Re:Chinese authorities install app on phones of people enter... by olliej on Wednesday July 03, 2019 @06:19PM (#20349492)
Changing trust settings on device requires the password.

Better question is: what are they able to pull off the device while it's unlocked?

[ Parent | on HN ]