08-08-2007, 01:53 PM
Retired BBF Moderator
Join Date: Aug 2004
Location: Ottawa, Ontario, Canada
Post Thanks: 1
Thanked 0 Times in 0 Posts
If you use the BES...
If you have the system Administrator's complete involvement (permissions, BES config, etc)...
It can be done. But in a infrastructure-intensive and admin-intensive manner, for security reasons.
In other words, it won't work unless the BlackBerry is activated only for that particular BES (i.e. one specific company's BlackBerries), and you have the full access to the BES with the administrator's full blessing (i.e. you've got direct control over the BES server).
So for a shareware application that a consumer downloads, this isn't pratical.
But on the other hand, if it's a business application for the whole of a company and you want to provide the ability to silently upgrade, yes the system administrator can configure the BES to push the upgarde out.
If this is an application you plan to sell, you'd have to write instructions for a BES administrator to push the application out silently and they'd have to intentionally follow it if they trusted your instructions -- you wouldn't be able to do it yourself as an outside software writer. For security reasons, it's impossible -- otherwise we'd have viruses and worms...
If this is an application you are writing for your company, and you got the administrator's full blessing to configure the BES anyway you like (or have ability to give him instructions on how to do so), then you can do what you need once you learn how to do so...
Be noted, installing, setting up, configuring BES, and finally pushing the app out -- Although simple stuff for an administrator, this is well over 100 times more complicated than those simple social engineering tricks of emails for trojan horses and the requirement to activate each and every BlackBerry onto the BES -- so impratical for virus/worm writers to trick an administrator to push an upgrade out silently because it requires so many steps to do it correctly and silently, that it can only be done intentionally -- an outside BlackBerry can't join BES without the BES server's knowledge, and the BES can't link to an outside BlackBerry without the BlackBerry's knowledge -- an Enterprise Activation procedure is necessary before there's a link to the BES. Passwords are involved too, in order to activate the BlackBerry onto the BES. In addition, all the connections are encrypted, and the BES is behind firewalls anyway.
But once the BlackBerry is finally activated on the BES, the BES pratically has complete remote control over the BlackBerry -- you can for example, even use BES to wirelessly lobotomize the BlackBerry if it's ever stolen. Wireless sync, wireless install, ability to remotely turn on/off Bluetooth/camera/memory card capability for security reasons, wireless insertition of company-wide calendar items, even remote snooping of the BlackBerry's screen (with a third party utility manually installed on the BlackBerry), you name it -- all can be done through BES if the company intentionally enables all these powerful features on the BES. Governments and companies love these because they can restrict the BlackBerry to do only what is allowed, such as disabling ability to install third party applications.
This question actually belongs in the BES Administrator forum. Just make sure you explain who you really are -- i.e. you're a developer for a company and you're setting up a BES for the company, and you need the ability to push an upgrade out. A simple answer may be provided, assuming you've already learned how to install and setup BES.
Last edited by Mark Rejhon : 08-08-2007 at 02:08 PM.