Readit Newszalmoxes commented on Show HN: MicroMDM – Open Source MDM Server for Apple Devices micromdm.io/... · Posted by u/zalmoxes
> purchase devices from apple direct, or from an approved reseller. Unfortunately you cannot retroactively add devices that were already purchased.
So you need to provide a DEP-authorized account number to the salesperson in an Apple store? Is this possible when buying online from apple.com?
Any idea why Apple does not provide a service to test whether a device serial number is DEP-managed? It would deter attempts to resell DEP-managed devices.
You must buy your devices through the enterprise store, and then it is automatically linked to DEP.
Any idea why Apple does not provide a service to test whether a device serial number is DEP-managed?
Because once you know the serial number of a DEP device you can enroll into the MDM. There is virtually no security. See https://duo.com/labs/research/mdm-me-maybe
zalmoxes commented on Show HN: MicroMDM – Open Source MDM Server for Apple Devices micromdm.io/... · Posted by u/zalmoxes
Are those the same profiles generated by Apple Configurator 2? I was able to get per-site Safari VPNs added by manually editing XML in the profile, but no success with per-application VPNs.
Commercial MDM providers only whitelist a handful of VPN client apps for per-app VPN profiles. Why are those needed when there is already a native iOS VPN client for IPSEC?
they should be the same, yes. You can compare the .mobileconfig file with the spec from the PDF.
That's all commercial vendors do, push these XML files to your device.
zalmoxes commented on Show HN: MicroMDM – Open Source MDM Server for Apple Devices micromdm.io/... · Posted by u/zalmoxes
Do you know if a small business can use DEP features?
Could per-app VPNs be used without DEP? If so, could they be used with MicroMDM, native iOS IPSEC client and an open-source VPN server, or is a 3rd-party VPN client like Cisco required for per-app VPN?
Anyone can use DEP, just need a DUNS number to enroll into the program, and then to purchase devices from apple direct, or from an approved reseller.
Unfortunately you cannot retroactively add devices that were already purchased.
DEP is not required for the VPN profile configs, that can be applied with just MDM (or even manually). The VPN payloads are documented here https://developer.apple.com/enterprise/documentation/Configu...
zalmoxes commented on Show HN: MicroMDM – Open Source MDM Server for Apple Devices micromdm.io/... · Posted by u/zalmoxes
zalmoxes commented on Show HN: MicroMDM – Open Source MDM Server for Apple Devices micromdm.io/... · Posted by u/zalmoxes
Hi, I'm the author(along with several other developers).
MicroMDM is used in some enterprise environments and was recently mentioned in a number of security presentations regarding Apple's MDM and Device Enrollment Program services.
https://duo.com/labs/research/mdm-me-maybehttps://i.blackhat.com/us-18/Thu-August-9/us-18-Endahl-A-Dee...
zalmoxes commented on Show HN: MicroMDM – Open Source MDM Server for Apple Devices micromdm.io/... · Posted by u/zalmoxes
I'm curious do any HN readers manage their personal devices through MDM with their own profiles, and what benefits are you seeing from that?
The server is only meant for enterprise deployments. It would be pretty hard to do this on a personal level because you need to apply for an enterprise account with Apple, and request a very specific push certificate option.
zalmoxes commented on Go best practices, six years in (2016) peter.bourgon.org/go-best... · Posted by u/metmirr
At [Kolide](https://kolide.com/) we're heavy users of Go Kit, and as a result have also adopted a lot of the style Peter recommends here. We've been slowly expanding on it with a style guide and company specific set of common libraries [here](https://github.com/kolide/kit#kolide-kit). My coworker also wrote a [blog post](https://blog.kolide.com/using-go-for-scalable-operating-syst...) on how Go has been fantastic for us and references the above style guide.
The code from go kit and [oklog](https://github.com/oklog/oklog) are great examples of idiomatic Go. Unfortunately the community at large doesn't really follow the "no init"/"no package global vars", which can sometimes lead to bad experiences importing opensource Go libs.
Second, Backplane really looked like great tech https://www.youtube.com/watch?v=43wFJBRTHG0