Hacker News Reader

"All software installed on Bizztrust-enabled Androids is automatically scanned before the user logs on to their company's network via VPN; if any irregularities are detected, the user will not be able to use compromised apps"

What exactly does that mean? Do they keep a blacklist of apps? Perhaps they only mean the "work apps"?

View on HN

And if the phone is compromised, how can you trust the "scan"?

A compromised phone scanning itself does not make a lot of sense. If the server scans the phone, it still can't be trusted since you're asking an insecure device: "are you compromised?".

Guess the point is just to know if there are any unwanted apps, that did not gain "root", on the phone. Is this useful?

I think that an individual user would be unable to modify much in the "work" partition:

>> Control over apps in the "work" partition is handled by the end user's corporate IT team

So maybe each time the phone checks in to the network, some sort of hash is computed to see if anything is different than the expected system?

Reply on news.ycombinator.com