Sonos should learn from Facebook

by Volker Weber

0cf45ddc9e2aee095acc72e213e6c697

Apple pulled the rug out from under Facebook today by revoking their Enterprise Developer certificate. You deploy this on your employees' iOS devices so you can distribute apps without going through the App Store process.

Facebook used this mechanism to deploy their spyware and Apple simply killed those apps by revoking the certificate. Collateral damage: all other internal apps using the very same certificate also died the very same minute.

Sonos is still using the same process to distribute their betas outside the company and I would wager they violate the same terms and conditions as Facebook. The proper way to do this is use TestFlight, like everybody else.

Comments

Maybe Sonos is using private APIs in the beta versions of their iOS app and hence they have chosen this deployment approach?

Abdelkader Boui, 2019-01-30

I don't know. Maybe they are just lazy because they always did it this way, before TestFliight existed.

Volker Weber, 2019-01-30

As far as I understood, Facebook's main violation was, that they used it for spying. In days before Testflight, wasn't this the usual method for deploying betas?

Christian Gut, 2019-01-31

What Facebook did here was against Apple's privacy stance. That called them into action, and using the enterprise developer certificate for distributing apps outside the enterprise gave Apple a reason and means to stop them. They could do the same thing to Sonos if they ever chose to.

Volker Weber, 2019-01-31

Prior to Apple's acquisition of TestFlight the usual method was also the prescribed one — adding individual test device UDIDs to the build. TestFlight was created as nothing more than a streamlined workflow for use of the limited allocation of UDID slots provided to every developer account for testing on 'external' devices. There has never been a time when the issuing agreement for enterprise certificates permitted deployment to users not directly bound by the enterprise's legal obligations. Apple may have been less than aggressive in enforcement of this rule but also has no direct method of monitoring such breaches of the agreement.

Facebook egregiously flouted this rule for malign purposes with predictable consequences - including that their own internal apps and testing workflows, which daily operation of their business is dependent upon, are now non-functional.

Any organization using this mechanism in this way exhibits a shocking lack of foresight consistent with the absence of adult supervision. It makes one wonder what other bad decisions Sonos has made.

David Richardson, 2019-01-31

I can remember they used to add UDIDs way back when. Which in the olden days limited them to 200 test devices. I used to have to of them: one iPhone and one iPad.

Volker Weber, 2019-01-31

Recent comments

Ragnar Schierholz on Microsoft Surface Hub 2S Event Recap at 16:51
Volker Weber on Withings Waage erhält Funktion zur Herzgesundheit zurück at 06:11
Ingo Harpel on Amazon and Google stop fighting their customers at 18:27
Bernd Hofmann on Withings Waage erhält Funktion zur Herzgesundheit zurück at 17:21
Hannes Niebuhr on Amazon and Google stop fighting their customers at 17:21
Thomas Cloer on Amazon and Google stop fighting their customers at 16:53
Andreas Pfau on Amazon and Google stop fighting their customers at 16:23
Frank van Rijt on Samsung lebt in interessanten Zeiten at 15:45
Friedrich Holstein on Withings Waage erhält Funktion zur Herzgesundheit zurück at 13:47
Nina Wittich on Ein wunderbares Video at 13:19
Christoph Rummel on Withings Waage erhält Funktion zur Herzgesundheit zurück at 12:58
Andreas Weinreich on Withings Waage erhält Funktion zur Herzgesundheit zurück at 11:58
Hanno Zulla on Elektroschrott zum Schnäppchenpreis at 08:46
Karl Heindel on Samsung lebt in interessanten Zeiten at 08:38
Volker Weber on iPhone mit USB-C verbinden at 02:55
Ralf Weinmann on iPhone mit USB-C verbinden at 01:35
Armin Grewe on Elektroschrott zum Schnäppchenpreis at 20:16
Christian Hilburger on Arlo funktioniert at 17:21
Bruce Elgort on iA Writer for Windows with File Library and Outline at 17:11
Volker Weber on Arlo funktioniert at 10:33
Markus Mews on Arlo funktioniert at 09:46
Dominique Roller on Elektroschrott zum Schnäppchenpreis at 09:25
Volker Weber on Arlo funktioniert at 08:34
Maik Endler on Arlo funktioniert at 08:32
Dominique Roller on Perfektes Foto-Erklärbärvideo at 08:30

Ceci n'est pas un blog

I explain difficult concepts in simple ways. For free, and for money. Clue procurement and bullshit detection.

vowe

Contact
Publications
Stuff that works
Amazon Wish List
Frequently Asked Questions

rss feed  twitter  amazon

Local time is 16:53

visitors.gif

buy me coffee

Paypal vowe