Blackberry: Mass storage Mode disable - blackberry

Is there any API for disabling the mass storage mode in blackberry?

There is no RIM SDK API available to disable storage mode neither disable usb on the device.
Some restrictions can be made by the BlackBerry Enterprise Server administrator. But it will work only for the devices connected to BES (BlackBerry Enterprise Server).
To protect your data use encryption means provided by RIM SDK.

I am not aware of an API to do that. The user has the option to set mass storage mode to enable, prompt or disable. The user may configure the SDCard to be encrypted. For devices attached to a BES there are ITPolicies that control use of and access to the SDCard and encryption, but I am not familiar with the details.
In general, on the BlackBerry platform, third party programs are not given the ability to over ride the BES admin or user security decisions.
If you can use TinySQL data base there are methods of encrypting the database file and limiting access to the database to module that have been signed by a specified signing authority.

Related

How can I get all account info saved in iPhone?

I want to get information of all logged in accounts like Google, Outlook, iCloud, etc. saved in iPhone (iOS 12).
I found ACAccountStore in Swift to get this info but I can't use it.
Actually, you can't do this.
These Internet services have been built with the same security goals
that iOS promotes throughout the platform. These goals include secure
handling of data, whether at rest on the device or in transit over
wireless networks; protection of users’ personal information; and
threat protection against malicious or unauthorized access to
information and services. Each service uses its own powerful security
architecture without compromising the overall ease of use of iOS.
From iOS Security (PDF), page 58.
You can obtain data which is "binded" with your app only, and if user allowed access.

Is it possible to pre-configure apps like OneDrive, DropBox using MDM or Apple Configurator?

I am using MDM to configure Email accounts on the devices using
Mail/Exchange ActiveSync payload.
I was wondering if there is a way where I can also configure OneDrive and DropBox accounts using MDM or Apple Configurator.
I know we can install the Apps but is there a way where I can add a specific account too?
Each application has different capabilities for being provisioned as it's being sent down to the device, therefore, there's no easy answer to this
However, firstly, I'd start with https://appconfig.org which is an initiative to getting developers to use the same format for Managed App Config. This also allows MDM vendors to "read" the Managed app config capabilities of an app, saving you the hassle of having to look this information up on the web
You'll struggle with Microsoft apps beyond VERY basic capabilities. However, for DropBox, there's some information here: Dropbox EMM support

How to access to caller details with Avaya?

Our support team uses Avaya phones, they use in-house CRM. One of the requirements from them is to get access to caller id so that CRM application can display caller specific details. Does Avaya provides any API to achieve the same?
That depends of what equipment they have.
If the Agents user One-x Agent you already have screenpop. You can launch a custom URL with the data that One-X have (ANI -callerID-, VDN, DNIS, UUI, etc).
If they have physical phones (desktop phones) you will need to go in other way like a custom development but in this case you will need to have licenses and other servers like AES (Application Enablement Services) and advanced Tsapi development knowledge about how to do it.
Do a little research over the Avaya support site about AES SDK Tsapi, and DMCC SDK.

understanding kSecAttrAccessGroup

I was just reading through some source code for an iOS application and I'm curious about the security of the same. It seems that the access group of an application can be specified in the entitlements it was built with. However, if a user unknowingly installs malware which tries to be part of a particular group and read the data stored in the storage, isn't it a security issue?
Is the Apple Application Screening process the only thing that stops the above attack? Or is there some permission management concept that im missing out? Thanks!
No, this is not a security risk. Provisioning profiles determine which access groups apps are allowed to claim access to, and provisioning profiles must be signed by Apple in order to function. Apple will only let you claim access to access groups created by other apps in your developer account.
The other answerer is mistaken; he/she links to a tool which is only for jailbroken devices and must be run as root, bypassing the standard iOS security mechanisms which apply to most devices.
Yes, it's a security hole. For example, this tool can dump all the sensitive info in the keychain, including Wi-Fi and mail/facebook/any passwords off of your device.

Blackberry access to administrative API without BES

I have to disable mass storage. Can I do this with administrative API without using BES?
No.
Administrative api is used for BES so if you want to control the device you need the bes server otherwise you have to built custom application.

Resources