Slashdot Mirror

Perhaps someone did report it to Apple's security team, but Apple's security team didn't act in a responsible manner. This happened with another company whose devices use another operating system called iOS: when a hacker reported a security problem in the Wii system software to Nintendo, Nintendo demanded to speak to the hacker's employer.

Do you have a link for more information? I couldn't find anything about this with a brief google search.

Anyway, there are several several examples of Apple crediting the discoverer in bug fixes, so I don't know why everybody here is jumping to the opposite conclusion.

Perhaps someone did report it to Apple's security team, but Apple's security team didn't act in a responsible manner. This happened with another company whose devices use another operating system called iOS: when a hacker reported a security problem in the Wii system software to Nintendo, Nintendo demanded to speak to the hacker's employer.

Do you have a link for more information? I couldn't find anything about this with a brief google search.

Anyway, there are several several examples of Apple crediting the discoverer in bug fixes, so I don't know why everybody here is jumping to the opposite conclusion.

I'm sort of confused, what do you think the cable does? Its a data cable with the ability to supply power. USB cables do both. In fact, the dock cable is *drum roll* USB! Maybe the first ever ipod connector with 30 pins was not USB, I dont know I started to buy apple products in 2007, but its nothing special other than a USB cable what you get today. The same video and audio can pass right over it, and with drivers so can everything else you said.

Generic USB to Apple 30 pin connector ($19.99)
http://store.apple.com/us/product/MA591G/B?fnode=3a

Generic USB to USB micro cable ($1.20)
http://www.monoprice.com/products/product.asp?c_id=103&cp_id=10303&cs_id=1030307&p_id=5457&seq=1&format=2

The difference in cost is significant, so yes they are selling it for a mark up. Apple didnt innovate nothing other than pulling a Sony and creating a proprietary cable. The new cable will just be more of the same and the only difference will be the amount of money I have to shovel out for new accessories because the old ones dont have the same connector when I upgrade my phone.

As for USB, Apple has not put in USB3 in any of their computers.

Excellent post, except one minor correction: the new retina MacBook Pro has USB 3, so Apple is doing USB 3. I suspect all future devices will have it.

Exactly. There hasn't been a single UI that has really been better than stock Android.

Try the original Android.

I'd be surprised if they used my information for "nefarious means", [...] because that's not their business model.

Really? iAd makes a ton of money for Apple.

I've seen that - a relative of mine refused to take any of the film off her new laptop. And some people use that plastic film on touchscreen devices as a "screen protector" (here, for example). Utility of protecting a toughened glass screen with less-scratch-resistant plastic aside (I guess it works as long as you replace the protector sometimes, but I haven't found the need for one since we moved away from resistive touchscreens), it's designed to come off easily, not to be optically clear, an appropriate texture or to be permanently attached.

I'd rather have the actual luxury of being able to install the OS of my choice.

What's stopping you? Boot camp lets you install whatever OS you'd like. I have Win 7 installed on my MacBook Pro for those rare occasions when I need to do something Windows specific, and I could install any Linux distro I wanted if I was so inclined. Of course, if you're talking about the iPhone, I don't know what the options are. Does your Android phone give you the luxury of being able to install iOS on it?

Nonsense. iWork runs on 10.4 on a PPC machine.

Nothing yet :-(

There wasn't for a long time, but "never" is simply factually incorrect. There are a couple browsers for iOS now, including Chrome, for example.

kindle reader for reading pdf's

Nothing compares to GoodReader

Doesn't Android include something equivalent to iOS's VoiceOver

-jcr

That doesn't matter. Android has multiple systems for the blind, just like it has multiple systems for the sighted. It's a thriving ecosystem where the user gets to choose what fits their individual needs the best.

Case in point, I'm not blind, and Android has a truly awesome default stock keyboard and auto-completion algorithm, especially with Android 4.1, but my favorite keyboard is still going to be Swiftkey X, because it lets me mix languages on the fly when I email family members. To me, that kind of auto-completion is priceless and it's still something that the PC, or gmail on the PC, hasn't given me yet.

I suspect that blind people are going to have unique needs too. For one thing, there are various degrees of blindness, but there are also various kinds of blindness and various adaptions to it. And it's going to be difficult to make an interface that truly works for all blind/visually impaired people.

Doesn't Android include something equivalent to iOS's VoiceOver

-jcr

Send us your old iPhone, iPad, Mac, or PC for reuse or recycling. ... At no cost to you, send us your iPod or any mobile phone by mail, and we’ll recycle it for you.

For one thing, Apple is providing a recycling program for ANY hardware, provided you happen to live within reasonable driving distance of an Apple Retail Store, or ask them to send you a prepaid box to send it in with and possibly receive a gift card or credit

there fixed that for you

I don't think you are a fool at all. During the G3/G4 era one of the Apple's targets was the fact that the G3/G4s outperformed the Pentiums. The G5s were a point of pride. On laptops, phones and tablets they still sell performance. But everyone has dropped their high performance desktop lines. Take a look at how meager the offering are at Dell compared to when you bought your PowerMac. The last poweredge I bougtht had their 14 drive configuration (RAID 50) was upgradable to 196g of ram... I don't see anything like that now.

Hopefully Apple does wow people with their 2013 offering and has something to win over all of the remaining Workstation users from Windows. But in general I agree. Apple is moving away from server. Apple doesn't use OSX for iCloud servers.

But you shouldn't exaggerate, in terms of no more server OS they still have server, its just free / cheap and aimed squarely at small business: http://www.apple.com/osx/server/

As an aside if you like the old Workstation with lots of umph on the G5s have you ever consider the IBM pseries with the G7s? There you could get a real upgrade: 512g rom, 32 G7 processors each one 2-3x as fast (in terms of work) as what you have, overlapping memory so the CPUs aren't sitting around pulling NO-OPs... IBM at least still makes beefy Unix computation machines.

http://images.apple.com/environment/reports/docs/macbookpro_retinadisplay_per_june2012.pdf

Those pie charts are all filled with images of endangered tropical hardwoods. Typical Apple thoughtlessness.

Actually, that's exactly what happened. The Retina MacBook Pro is EPEAT Gold certified. EPEAT's standards have NOTHING to do with "repairability". It has to do with the products being able to be easily disassembled by conventional tools so that the constituent parts can be recycled by any recycler. It's a baseline standard. But Apple recycles all of its products for free, and does not send anything to the landfill. Nothing.

And the simple truth, which you deny because you are either a troll or hate Apple, or both, is that Apple's products (and their datacenters, physical plant operations, etc.) and the entire product lifecycle are more recylcable, made with more recycled and non-toxic content, and more green than any other major electronics manufacturer. That's why you can't respond with facts, just trolls.

Apple still has many products that met the EPEAT certification requirements. However, the newer products with glued batteries and screen components do not.

The MacBook Pro with Retina Display has an EPEAT Gold rating - so no, that's not it.

If you're talking about phones and tablets... currently EPEAT doesn't rate them - at all - for any manufacturer.

.. and you are correct.
I was under the impression that the glue used on the battery and screen would cause issues with regard to recycling the battery and screen components in a standard way would prevent certification.

Too bad the truth is that Apple recycles any of their products for free, and any other manufacturer's products, also for free, and it's all zero-landfill, meaning that image is completely, 100%, provably false.

But again, I know you're trolling — I'm just replying so others following this threat won't have any chance of being duped by any of your posts.

Oh yeah, Apple caved.

That must be why the Retina MacBook Pro — you know, the reason why Apple pulled out of EPEAT? — is now EPEAT Gold certified.

...

I'm sure your reply will ignore that simple, clear fact. I do applaud your trolling in this thread, though! It's entertaining!

Or maybe not so brilliant.

We've recently heard from many loyal Apple customers who were disappointed to learn that we had removed our products from the EPEAT rating system. I recognize that this was a mistake. Starting today, all eligible Apple products are back on EPEAT.

A Letter From Bob Mansfield

The mistake was in ignoring the needs and values of institutional, enterprise, and governmental markets where Apple had been finally making some headway.

Organizations which have policies to require EPEAT compliance include Ford Motor Co., KPMG and Kaiser Permanente, in the private sector, as well as several universities and federal, state and municipal agencies. The U.S. government requires that 95% of the electronics purchased by its agencies be certified by EPEAT.

According to the DOE, environmental benefits of EPEAT purchasing in FY11 included an energy savings of 50 million kilowatt hours and a projected cost savings of $4.8 million.

[David Daoud, research director, PCs and Green IT, at IDC] said Apple is bound to find some resistance from buyers who aren't happy about the decision, but believes it needs only to have "a PR discussion" as to "why they're not being environmental. If you're Apple you have to look at the implications of certifying every single product. As much as I'd love to say it's a bad move, the financial guys are looking at it differently."

EPEAT Customers React to Apple's Withdrawal

PR was not enough.

The one where Apple gave you a free bumper if you experienced the problem? http://support.apple.com/kb/HT4389 It wasn't handled as well as I'd expect, but it was eventually handled. I can't get that upset over it, but no doubt there's someone whose really harbors some resent...

Hey, wait, there you are! So sorry and please enjoy your free bumper.

Apple is more green in terms of how it makes (AND recycles) its products than any other major electronics manufacturer.

Given that Apple's credibility has dropped straight through zero into the negative zone, I for one won't be taking that claim at face value.

How do you figure, "Apple's credibility has dropped straight through zero into the negative zone"?

http://www.apple.com/environment/
http://www.apple.com/environment/faq.html
http://www.apple.com/environment/renewable-energy/
http://images.apple.com/environment/reports/
http://images.apple.com/environment/progress/
http://www.apple.com/supplierresponsibility/reports.html

Find any other vendor with this level of commitment, or even this level of detail on what they're doing with their products on the environment front.

Apple is more green in terms of how it makes (AND recycles) its products than any other major electronics manufacturer.

Given that Apple's credibility has dropped straight through zero into the negative zone, I for one won't be taking that claim at face value.

How do you figure, "Apple's credibility has dropped straight through zero into the negative zone"?

http://www.apple.com/environment/
http://www.apple.com/environment/faq.html
http://www.apple.com/environment/renewable-energy/
http://images.apple.com/environment/reports/
http://images.apple.com/environment/progress/
http://www.apple.com/supplierresponsibility/reports.html

Find any other vendor with this level of commitment, or even this level of detail on what they're doing with their products on the environment front.

Apple is more green in terms of how it makes (AND recycles) its products than any other major electronics manufacturer.

Given that Apple's credibility has dropped straight through zero into the negative zone, I for one won't be taking that claim at face value.

How do you figure, "Apple's credibility has dropped straight through zero into the negative zone"?

http://www.apple.com/environment/
http://www.apple.com/environment/faq.html
http://www.apple.com/environment/renewable-energy/
http://images.apple.com/environment/reports/
http://images.apple.com/environment/progress/
http://www.apple.com/supplierresponsibility/reports.html

Find any other vendor with this level of commitment, or even this level of detail on what they're doing with their products on the environment front.

Apple is more green in terms of how it makes (AND recycles) its products than any other major electronics manufacturer.

Given that Apple's credibility has dropped straight through zero into the negative zone, I for one won't be taking that claim at face value.

How do you figure, "Apple's credibility has dropped straight through zero into the negative zone"?

http://www.apple.com/environment/
http://www.apple.com/environment/faq.html
http://www.apple.com/environment/renewable-energy/
http://images.apple.com/environment/reports/
http://images.apple.com/environment/progress/
http://www.apple.com/supplierresponsibility/reports.html

Find any other vendor with this level of commitment, or even this level of detail on what they're doing with their products on the environment front.

Apple is more green in terms of how it makes (AND recycles) its products than any other major electronics manufacturer.

Given that Apple's credibility has dropped straight through zero into the negative zone, I for one won't be taking that claim at face value.

How do you figure, "Apple's credibility has dropped straight through zero into the negative zone"?

http://www.apple.com/environment/
http://www.apple.com/environment/faq.html
http://www.apple.com/environment/renewable-energy/
http://images.apple.com/environment/reports/
http://images.apple.com/environment/progress/
http://www.apple.com/supplierresponsibility/reports.html

Find any other vendor with this level of commitment, or even this level of detail on what they're doing with their products on the environment front.

Apple is more green in terms of how it makes (AND recycles) its products than any other major electronics manufacturer.

Given that Apple's credibility has dropped straight through zero into the negative zone, I for one won't be taking that claim at face value.

How do you figure, "Apple's credibility has dropped straight through zero into the negative zone"?

http://www.apple.com/environment/
http://www.apple.com/environment/faq.html
http://www.apple.com/environment/renewable-energy/
http://images.apple.com/environment/reports/
http://images.apple.com/environment/progress/
http://www.apple.com/supplierresponsibility/reports.html

Find any other vendor with this level of commitment, or even this level of detail on what they're doing with their products on the environment front.

One thing I missed when I replied to your comment initially, that is most interesting:

The Retina MacBook Pro is EPEAT Gold in the US and Canada.

You mean the gold rating listed here?

http://images.apple.com/environment/reports/docs/macbookpro_retinadisplay_per_june2012.pdf

Apple helped create the EPEAT standards alongside the other stakeholders who helped define it.

Apple even has a contract to recycle products from ANY manufacturer, for free, with free shipping fees and boxes provided. What other vendor does this? Who puts their money where their mouth is on the environment?

Apple's products, in real, practical terms, are MORE recyclable, in terms of recyclable content contained therein, and the ability to actually recycle them — albeit by using Apple's programs for things like iPhone, iPad, and now the Retina MacBook Pro — and that many other EPEAT-certified products may be (and are) markedly worse than Apple's products in this sense, but can still be certified because they are able to be disassembled with conventional tools. How does that make them "more green"?

EPEAT alone isn't the end-all, be-all of green certifications. Organizations use EPEAT because it is a metric; a box that is easy to check; an easy way to define the "greenness" of a product. Apple helped develop the EPEAT standard, and has been one of the most committed and transparent manufacturers to green tech, environment, and recycling. No other major vendor has this level of transparency.

And Apple is STILL targeted by folks like Greenpeace, even as Apple is pursuing green more aggressively than its competitors, with Data Center Knowledge noting:

Greenpeace’s continuing use of this methodology, in light of Apple’s disclosure and permit data, raises several possibilities:

- Greenpeace is having difficulty developing estimates that accurately incorporate data center operations and power usage.
- Greenpeace is predisposed to cling to estimates that make Apple look less “green” because it generates more headlines for its awareness campaigns.

EPEAT didn't cave on anything — but the next generation of EPEAT would do well to consider the real, end-to-end recyclability and carbon footprint of electronic products.

Apple helped create the EPEAT standards alongside the other stakeholders who helped define it.

Apple even has a contract to recycle products from ANY manufacturer, for free, with free shipping fees and boxes provided. What other vendor does this? Who puts their money where their mouth is on the environment?

Apple's products, in real, practical terms, are MORE recyclable, in terms of recyclable content contained therein, and the ability to actually recycle them — albeit by using Apple's programs for things like iPhone, iPad, and now the Retina MacBook Pro — and that many other EPEAT-certified products may be (and are) markedly worse than Apple's products in this sense, but can still be certified because they are able to be disassembled with conventional tools. How does that make them "more green"?

EPEAT alone isn't the end-all, be-all of green certifications. Organizations use EPEAT because it is a metric; a box that is easy to check; an easy way to define the "greenness" of a product. Apple helped develop the EPEAT standard, and has been one of the most committed and transparent manufacturers to green tech, environment, and recycling. No other major vendor has this level of transparency.

And Apple is STILL targeted by folks like Greenpeace, even as Apple is pursuing green more aggressively than its competitors, with Data Center Knowledge noting:

Greenpeace’s continuing use of this methodology, in light of Apple’s disclosure and permit data, raises several possibilities:

- Greenpeace is having difficulty developing estimates that accurately incorporate data center operations and power usage.
- Greenpeace is predisposed to cling to estimates that make Apple look less “green” because it generates more headlines for its awareness campaigns.

EPEAT didn't cave on anything — but the next generation of EPEAT would do well to consider the real, end-to-end recyclability and carbon footprint of electronic products.

If Apple takes them all back for recycling, doesn't that work? I imagine that since we're talking very popular products, anyone who receives one for recycling (and isn't Apple) will send them to Apple because of Apple's agreement. Plus they get a gift card, which is an incentive for everyone to participate. http://www.apple.com/recycling/

You mean this thing? It feels like shit to type on, like a laptop keyboard.

I can name regressions: 1) "Save As..." has disappeared (an option that has been present since I can remember using a computer with a "file menu"). The "duplicate" function requires more keystrokes and is irritating to use. 2) Mail.app and every app that uses text editing has a bug that when you delete a block of selected text, the text gets deleted but the selection area remains. Just to be clear here: Apple can't even get a TEXT EDITING BOX correct now. 3) The Finder doesn't actually get selected sometimes when the Exposé is activated, 4) Faux stitching in iCal and a silly looking address book, need I say more?, 5) Stupid animations that take too damn long and don't convey any useful information and are sometimes impossible to turn off (including changing pages iCal, moving files with the Finder, etc.), 6) Resuming applications whether you like it or not, regardless of what settings you have selected.

I could say more, but I'm tired of thinking about it. I will give you that Lion does have one or two nice features, but for every nice thing, there's a step back or regression as well. I even went as far as to issue a feature request for Apple to issue a firmware update for snow leopard that allows it to be installed on modern macbooks. Jobs once said something to the effect that large companies stop innovating because they are run by their marketing and sales departments. I think what we're seeing with Lion and Mountain Lion is the truth of that statement. I also don't think it's a coincidence that once Serlet, the VP of software development who was responsible in part for OS Xes 10.4-10.6, retired and now there is no more VP of software development. It's all marketing and sales now (well maybe iOS too)...

Oh, and no Apple product cost twice what it should, they are comparable in price to any business-class Dell or HP. There is no 500GB HD for $200, so you are just a filthy fucking liar trying to spread propaganda which you can't back up.

They recently listed a 640 GB for $199

They list a 4GB ECC 1333 DIMM module for $150

Newegg has a 8GB ECC 1333 DIMM module for $68

So from where I sit it looks like Apple products cost twice what they should. .... just saying.

That's like comparing "EMC" hard drives to Seagate.
Show us Dell, IBM, and HP pricing for the se modules if you want to be fair, but thats not what you wanted /eyeroll

Huh, this is satire right? BTW, got a shitload of "EMC" drives that fail on a more than regular basis. Same damn drives different firmware.

Oh, and no Apple product cost twice what it should, they are comparable in price to any business-class Dell or HP. There is no 500GB HD for $200, so you are just a filthy fucking liar trying to spread propaganda which you can't back up.

They recently listed a 640 GB for $199

They list a 4GB ECC 1333 DIMM module for $150

Newegg has a 8GB ECC 1333 DIMM module for $68

So from where I sit it looks like Apple products cost twice what they should. .... just saying.

That's like comparing "EMC" hard drives to Seagate.
Show us Dell, IBM, and HP pricing for the se modules if you want to be fair, but thats not what you wanted /eyeroll

Huh, this is satire right? BTW, got a shitload of "EMC" drives that fail on a more than regular basis. Same damn drives different firmware.

As Yaz wrote above:
iOS devices have AES 256 encryption baked right into the hardware inside the DMA path between flash storage and the main system memory. It's always enabled, and can't be disabled by users, administrators, or anyone else. No custom kernel modules required -- XNU already has built-in AES 256 support, and the platform already implements it for each and every device.

Yes. Apple officially support Windows they created a free system for dual booting ( http://support.apple.com/kb/HT4818 ). There are a ton of good VM solutions http://www.parallels.com/products/desktop/ being the most popular. If you just want to blow away OSX and install Linux or Windows that's easy as well.

I'm a former Apple engineer, current independent consultant, so I'm not going to address the Android side. That's a lot more complicated -- I'll stick with talking about the iOS info that I know about.

That said, wow, there's a lot of snarky comments but not a lot of information posted.

iOS has full-device hardware encryption built-in on the iPhone 3GS and later, activated as soon as you set up a passcode. This top-level encryption layer is for quick device wipes, not for data protection. Each user data file is then encrypted on top of that using its own unique key, then set into a protection class by the app developer:

  - Complete Protection - decrypted only when the device is unlocked; file key is removed from memory when the device is locked.

  - Protected Unless Open - decrypted when the device is unlocked; if file is open when the device locks, the file stays open/decrypted.

  - Protected Until First User Authentication - decrypted on first unlock, stays decrypted until reboot

  - No Protection - file system encryption only; no per-file encryption key

Apple has really been on developers cases to tighten down the data protection classes for their apps on iOS.

In addition, iOS has a huge number of remote management options. Apple provides a basic management tool called Profile Manager in Lion Server, and there are third-party Mobile Device Managers (MDMs) that take the basics and go even further. You can force complex passcodes, pre-configure e-mail accounts, restrict usage of features, and so on. The enterpriseios.com site has a pretty complete listing.

One of the cool things about using iOS MDM is that all of the configuration profiles are tied to the management profile that gets installed when the device is first enrolled with the MDM. If you're in a BYOD situation and a user leaves on bad terms, the IT department can retract the management profile, which automatically retracts all of the other configuration profiles. This will delete corporate e-mail accounts, remove in-house apps (and their data!), take away VPN and 802.1X access, and so on, without erasing the person's device entirely. All of the pictures the person took are still there, not blown away as they would be after a complete device wipe.

Anyway, a few links that may help you out:

http://www.apple.com/iphone/business/integration/
http://images.apple.com/ipad/business/docs/iOS_Security_May12.pdf
http://www.enterpriseios.com/
http://consultants.apple.com/index.php - look for consultants with the Mobility specialization
https://help.apple.com/advancedserveradmin/mac/10.7/ - go into "Manage Users" --> "Profile Manager" on the right

Hope this helps.

--Paul

I'm a former Apple engineer, current independent consultant, so I'm not going to address the Android side. That's a lot more complicated -- I'll stick with talking about the iOS info that I know about.

That said, wow, there's a lot of snarky comments but not a lot of information posted.

iOS has full-device hardware encryption built-in on the iPhone 3GS and later, activated as soon as you set up a passcode. This top-level encryption layer is for quick device wipes, not for data protection. Each user data file is then encrypted on top of that using its own unique key, then set into a protection class by the app developer:

  - Complete Protection - decrypted only when the device is unlocked; file key is removed from memory when the device is locked.

  - Protected Unless Open - decrypted when the device is unlocked; if file is open when the device locks, the file stays open/decrypted.

  - Protected Until First User Authentication - decrypted on first unlock, stays decrypted until reboot

  - No Protection - file system encryption only; no per-file encryption key

Apple has really been on developers cases to tighten down the data protection classes for their apps on iOS.

In addition, iOS has a huge number of remote management options. Apple provides a basic management tool called Profile Manager in Lion Server, and there are third-party Mobile Device Managers (MDMs) that take the basics and go even further. You can force complex passcodes, pre-configure e-mail accounts, restrict usage of features, and so on. The enterpriseios.com site has a pretty complete listing.

One of the cool things about using iOS MDM is that all of the configuration profiles are tied to the management profile that gets installed when the device is first enrolled with the MDM. If you're in a BYOD situation and a user leaves on bad terms, the IT department can retract the management profile, which automatically retracts all of the other configuration profiles. This will delete corporate e-mail accounts, remove in-house apps (and their data!), take away VPN and 802.1X access, and so on, without erasing the person's device entirely. All of the pictures the person took are still there, not blown away as they would be after a complete device wipe.

Anyway, a few links that may help you out:

http://www.apple.com/iphone/business/integration/
http://images.apple.com/ipad/business/docs/iOS_Security_May12.pdf
http://www.enterpriseios.com/
http://consultants.apple.com/index.php - look for consultants with the Mobility specialization
https://help.apple.com/advancedserveradmin/mac/10.7/ - go into "Manage Users" --> "Profile Manager" on the right

Hope this helps.

--Paul

I'm a former Apple engineer, current independent consultant, so I'm not going to address the Android side. That's a lot more complicated -- I'll stick with talking about the iOS info that I know about.

That said, wow, there's a lot of snarky comments but not a lot of information posted.

iOS has full-device hardware encryption built-in on the iPhone 3GS and later, activated as soon as you set up a passcode. This top-level encryption layer is for quick device wipes, not for data protection. Each user data file is then encrypted on top of that using its own unique key, then set into a protection class by the app developer:

  - Complete Protection - decrypted only when the device is unlocked; file key is removed from memory when the device is locked.

  - Protected Unless Open - decrypted when the device is unlocked; if file is open when the device locks, the file stays open/decrypted.

  - Protected Until First User Authentication - decrypted on first unlock, stays decrypted until reboot

  - No Protection - file system encryption only; no per-file encryption key

Apple has really been on developers cases to tighten down the data protection classes for their apps on iOS.

In addition, iOS has a huge number of remote management options. Apple provides a basic management tool called Profile Manager in Lion Server, and there are third-party Mobile Device Managers (MDMs) that take the basics and go even further. You can force complex passcodes, pre-configure e-mail accounts, restrict usage of features, and so on. The enterpriseios.com site has a pretty complete listing.

One of the cool things about using iOS MDM is that all of the configuration profiles are tied to the management profile that gets installed when the device is first enrolled with the MDM. If you're in a BYOD situation and a user leaves on bad terms, the IT department can retract the management profile, which automatically retracts all of the other configuration profiles. This will delete corporate e-mail accounts, remove in-house apps (and their data!), take away VPN and 802.1X access, and so on, without erasing the person's device entirely. All of the pictures the person took are still there, not blown away as they would be after a complete device wipe.

Anyway, a few links that may help you out:

http://www.apple.com/iphone/business/integration/
http://images.apple.com/ipad/business/docs/iOS_Security_May12.pdf
http://www.enterpriseios.com/
http://consultants.apple.com/index.php - look for consultants with the Mobility specialization
https://help.apple.com/advancedserveradmin/mac/10.7/ - go into "Manage Users" --> "Profile Manager" on the right

Hope this helps.

--Paul

I'm a former Apple engineer, current independent consultant, so I'm not going to address the Android side. That's a lot more complicated -- I'll stick with talking about the iOS info that I know about.

That said, wow, there's a lot of snarky comments but not a lot of information posted.

iOS has full-device hardware encryption built-in on the iPhone 3GS and later, activated as soon as you set up a passcode. This top-level encryption layer is for quick device wipes, not for data protection. Each user data file is then encrypted on top of that using its own unique key, then set into a protection class by the app developer:

  - Complete Protection - decrypted only when the device is unlocked; file key is removed from memory when the device is locked.

  - Protected Unless Open - decrypted when the device is unlocked; if file is open when the device locks, the file stays open/decrypted.

  - Protected Until First User Authentication - decrypted on first unlock, stays decrypted until reboot

  - No Protection - file system encryption only; no per-file encryption key

Apple has really been on developers cases to tighten down the data protection classes for their apps on iOS.

In addition, iOS has a huge number of remote management options. Apple provides a basic management tool called Profile Manager in Lion Server, and there are third-party Mobile Device Managers (MDMs) that take the basics and go even further. You can force complex passcodes, pre-configure e-mail accounts, restrict usage of features, and so on. The enterpriseios.com site has a pretty complete listing.

One of the cool things about using iOS MDM is that all of the configuration profiles are tied to the management profile that gets installed when the device is first enrolled with the MDM. If you're in a BYOD situation and a user leaves on bad terms, the IT department can retract the management profile, which automatically retracts all of the other configuration profiles. This will delete corporate e-mail accounts, remove in-house apps (and their data!), take away VPN and 802.1X access, and so on, without erasing the person's device entirely. All of the pictures the person took are still there, not blown away as they would be after a complete device wipe.

Anyway, a few links that may help you out:

http://www.apple.com/iphone/business/integration/
http://images.apple.com/ipad/business/docs/iOS_Security_May12.pdf
http://www.enterpriseios.com/
http://consultants.apple.com/index.php - look for consultants with the Mobility specialization
https://help.apple.com/advancedserveradmin/mac/10.7/ - go into "Manage Users" --> "Profile Manager" on the right

Hope this helps.

--Paul

Considering that any meaningful encryption (I will assume you want some sort of volume group/full disk encryption) will require root access and probably a custom kernel module, you will need android.

iOS devices have AES 256 encryption baked right into the hardware inside the DMA path between flash storage and the main system memory. It's always enabled, and can't be disabled by users, administrators, or anyone else. No custom kernel modules required -- XNU already has built-in AES 256 support, and the platform already implements it for each and every device.

Yaz

Proper propaganda link, silly me, forgot the http

Oh, and no Apple product cost twice what it should, they are comparable in price to any business-class Dell or HP. There is no 500GB HD for $200, so you are just a filthy fucking liar trying to spread propaganda which you can't back up.

They recently listed a 640 GB for $199

They list a 4GB ECC 1333 DIMM module for $150

Newegg has a 8GB ECC 1333 DIMM module for $68

So from where I sit it looks like Apple products cost twice what they should. .... just saying.

That's like comparing "EMC" hard drives to Seagate.
Show us Dell, IBM, and HP pricing for the se modules if you want to be fair, but thats not what you wanted /eyeroll

Oh, and no Apple product cost twice what it should, they are comparable in price to any business-class Dell or HP. There is no 500GB HD for $200, so you are just a filthy fucking liar trying to spread propaganda which you can't back up.

They recently listed a 640 GB for $199

They list a 4GB ECC 1333 DIMM module for $150

Newegg has a 8GB ECC 1333 DIMM module for $68

So from where I sit it looks like Apple products cost twice what they should. .... just saying.

That's like comparing "EMC" hard drives to Seagate.
Show us Dell, IBM, and HP pricing for the se modules if you want to be fair, but thats not what you wanted /eyeroll

Oh, and no Apple product cost twice what it should, they are comparable in price to any business-class Dell or HP. There is no 500GB HD for $200, so you are just a filthy fucking liar trying to spread propaganda which you can't back up.

They recently listed a 640 GB for $199

They list a 4GB ECC 1333 DIMM module for $150
Newegg has a 8GB ECC 1333 DIMM module for $68

So from where I sit it looks like Apple products cost twice what they should. .... just saying.