Network World
Saturday, November 22, 2008
DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Nearpoints

Navigation

iPhone Apps: More Locked Down Than You Think

So Steve Jobs revealed in the WSJ that there is in fact a (to this point hidden) mechanism in the iPhone that allows Apple to remove, directly from a given iPhone, any code they don't like. Sure, users - and cellular networks - need to be protected from fraud and hackers. But shouldn't Apple have documented this "feature"? And what else might in there?

First of all, I applaud Apple for building in a tool that really could enhance the integrity of the product and the networks it runs on. This isn't that different from a core capability in many mobile device management products, which can perform similar editing of functionality and even "zap" a lost or missing handset to prevent compromised data and undue service changes. Imagine if Microsoft had included a "system verification" function in Windows, something I've often wished for.

On the other hand, I'm also a big fan of open systems platforms. It's my damn phone (or computer); I'm paying for it; I get to decide what I do with it, thank you very much, and I'll also thank you, Mr. or Ms. handset manufacturer and Mr. or Ms. carrier to keep your grubby little mitts off of it. If your network is so insecure as to invite hacking, then fix it. If you don't like the apps I run, tough. If you think you can lock down my platform without my consent, then think again. How long did it take to crack copy protection on DVDs? What do you think the above-average IQs at Black Hat and DEFCON were talking about earlier this month? I am, as always, against fraud and theft, but restricting the legal activities of end-users is unacceptable. And that is a possibility given a hidden capability like the one in the iPhone.

In the final analysis, however, I don't think this problem is all that big a deal. iPhones will mostly appeal to those looking for the wall-garden experience - just make it work; don't bother me with the details. The Mac pioneered this approach and has mostly pulled it off. Don't expect too many complaints. But this small-scale fascism (beyond the do-it-our-way-or-else-and-give-us-30%-off-the-top procedure for loading software on the iPhone to begin with) opens the door to competitors who are less paternalistic. The iPhone really will sell 25 million units worldwide over the next year, but that's on the order of 2% of total handset sales. In the long run, it will be various flavors of LINUX that dominate handset platforms, and few of those vendors or the carriers that provide service will attempt what amounts to the technological equivalent of the nanny state - or worse. Competition will ultimately force Apple to do the right thing, or they'll have to be content with 2% market share.

In the meantime, repeat after me: Lord Steven is my master, and, yea, though I payeth for my iPhone, it is he and ATTus that doth really own it, and I shall computeth only that which they so deemeth acceptable, on earth as it is in Cupertino, pax iPhono, amen.

The iPhone, The Walled Orchard and FOTA

Useful answer?
0

With the level of control that Apple demands, you’re right in that there are opportunities for others… but not as competitors, rather partners. Apple needs to ditch the “walled orchard”.

Full disclosure, I work for InnoPath, a company that can help Apple expand beyond tethering users to iTunes and let them do things like update, patch and fix the iPhone over the air with FOTA and other standards based device management technologies. We can also help them in the enterprise, as most IT departments prefer a central management model and want to be able to update and manage over the air.

Apple’s assumed goal is to protect the integrity of its product and its customers and there’s other ways to accomplish that -- open standards being one of them -- that will be better for the overall lifecycle management of the iPhone and its users.

Although the kill-switch capability can be likened to mobile device management (as you suggested), MDM aims to ensure an optimal user experience; in addition to the security of “zapping a lost/missing handset to prevent compromised data,” folks like Verizon, AT&T, T-Mobile, etc. are using this technology to also update network and user configuration settings and push out OS and application updates, all “over the air”… consumers love this because they avoid the inconvenience of recalls or the need to return to the retail store to have the handset flashed to fix a bug, and the phone works as promised … giving them more time and money to spend at … where else? The Apple store. ☺

Mobile Device Management

Useful answer?
0

MDM is going to be huge. It needs to be integrated into other enterprise network-management systems, but it's hard to imagine large-scale deployments of platform phones without it.

"Walled orchard" - I like that!

Thx. Craig.

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <i> <b> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <blockquote> <br /> <br> <p>
  • Lines and paragraphs break automatically.
  • You can use BBCode tags in the text.
  • Web page addresses and e-mail addresses turn into links automatically.

More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.

About Craig Mathias

Mathias is a principal at Farpoint Group, a wireless advisory firm in Ashland, Mass.

RSS feed

Craig Mathias's archive.

Wireless Research Center.

Advertisement: