Lost Device and Work Profiles
Lock, encryption, remote locate on YOUR Google/Apple account.
Visual · lost_device_work_profiles
A strong lock unwraps encryption. Find My / Find My Device is YOUR account. Work profiles separate employer data — do not bypass MDM.
A taxi has the glass. The defense is a lock you set last month, encryption tied to it, and locate on YOUR account — not a wipe you run on a roommate.
Lessons 1–2 named the vault and the install doors. This lesson names what happens when the pocket leaves your pocket, and what a work profile is for. Topic 6 already taught Android’s quiet stack: OS and Play system updates, a PIN that is not 1234, file-based encryption that unwraps when you authenticate, Find My Device on YOUR Google account. iOS is the same job: passcode or alphanumeric lock, encryption at rest, Find My on YOUR Apple ID. Remote lock, locate, and erase exist so YOU can protect YOUR hardware after a loss. They are not a hunting license, not a jealous-partner tool, and not a “Ethical Hacking wipe lab” on a classmate. Work profiles and MDM (mobile device management) are the employer’s least-privilege box: work mail and apps in a managed container, personal photos out of that container, policies you do not jailbreak. This is original Cyberlium teaching mapped to the Ethical Hacking mobile-platforms domain — not official Official Certification training, not a cert, not exam dumps. You will not remotely wipe anyone else’s phone. You will not bypass MDM. You will not use locate to find a person. Next is Lab — Android/iOS Hygiene on YOUR Phone: unknown sources off, lock screen, one extra MFA. Here you write the lost-device and work-profile rules, lock lost-device-notes.txt, and keep other people’s accounts out of the file.
1. Lock screen unwraps encryption — 1234 and swipe are an open vault with a polite sign
On modern Android, a secure lock unwraps file-based encryption after a reboot. Swipe, no lock, or 1234 / birthday is a weaker practical story. Use a PIN of at least six digits that is not a date, or a passphrase. Biometrics sit on top of that secret. Auto-lock in seconds. Hide OTPs and bank alerts on the lock screen — Topic 6 already taught notification access; the glass is the analog version. iOS: a strong passcode makes Data Protection meaningful; Face ID sits on top. Do not leave the device unlocked on a public charge port. For a daily driver you bank on, keep the lock boring and strong so opportunistic theft and bathroom-install spyware get expensive.
Command guide
Lock screen unwraps encryption — WHAT/WHY
═══ COMMANDS ═══
Command — copy this
cat >> "$NOTES" << 'EOF' lock: strong PIN/phrase/biometric — not swipe/1234 job: unwrap encryption for ME only EOF
2. Remote locate, lock, erase — YOUR Google account or YOUR Apple ID, before the bag is gone
Find My Device (Android) and Find My (iOS) must be on before the loss, on a phone YOU own, signed into YOUR account, MFA’d from Topics 4 and 5. After a loss: lock, locate only if recovery is safe, erase if the data would hurt — from a browser or device you own. That erase is for hardware you enrolled. It is not a roommate wipe, a partner hunt, or a “Ethical Hacking joke.” If the situation is abuse or stolen-identity crime, use official recovery and local safety resources — not a find-the-person op. Do not “test Find My” on a roommate. Do not share find-account passwords into this app. OEM lag is not a reason to skip the lock or find toggle.
3. Work profiles and MDM: separation of work data, not a bypass puzzle
A work profile or MDM-enrolled phone is the employer’s container: corporate mail and wipe policy without necessarily owning your entire camera roll — or a company phone that stays a company phone. Greyed toggles, required PIN, blocked unknown sources, and Integrity checks are policy, not a CTF. Circumventing MDM is out and often a policy problem. Use the device as issued. BYOD means read what IT actually manages. If you do not want employer wipe on your only photos, do not enroll that phone — that is an IT conversation, not a jailbreak assignment. Do not enroll a classmate into a test MDM. If YOUR enrolled device shows YOUR status to YOU, reading it is in scope; changing someone else’s policy is not.
4. Lost vs stolen vs “I still see it on the map” — what you actually do
Lost in a taxi: lock from find, rotate important passwords from a CLEAN device if it may have been unlocked, call a number you already have. Stolen: safety first, then lock/erase, then bank and mail revoke. A map pin in a place you cannot safely go is not a movie chase — erase if the data hurts. Do not hire a shady tracker APK. Do not dox a pin. If you find a stranger’s phone, official lost-and-found or staff — not opening it, not “checking for malware as a favor.” Returning it locked is kindness. Browsing it is unauthorized access. Ethical Hacking-shaped curiosity plus a found phone is how people get expelled.
5. What you record: lock type (not the PIN), find-on, MDM yes/no — YOUR accounts only
Date (UTC). Lock type in words — never the secret. Auto-lock. Notification hide. Find My Device or Find My: on, YOUR account (not the address). Work profile / MDM: yes/no/n/a, issued as issued. Ethics: no roommate wipe, no locate-a-person, no MDM bypass, no found-phone browsing. Legal: original Cyberlium teaching mapped to the Ethical Hacking mobile-platforms domain — not official Official Certification training, not a cert, not exam dumps. Path: $HOME/cyberlium-lab/lost-device-notes.txt, chmod 600. Honest “Find My was off; I turned it on” passes. Testing erase on a partner, posting a classmate locate screenshot, or chmod 644 on a shared PC fails. Reading the find toggle is the lab. Erase is for actual loss.
6. Wrong vs right: wipe-the-roommate / bypass-MDM vs YOUR lock, find, and policy as issued
Worked failure — same “lost phone” energy, opposite owner. Right never needs a second person’s account when yours answers.
- Wrong: PIN 1234, Find My off. Open Find Hub on a roommate’s glass “as a joke.” Remotely erase a partner. Jailbreak MDM. Browse a found phone. Download a Telegram “patch APK.” Paste someone else’s Apple ID into notes chmod 777. Call it Ethical Hacking. This course is not official training and does not grade that hunt.
- Right: Six+ non-birthday PIN or passphrase; auto-lock; hide OTPs on glass. Find My / Find My Device on YOUR account, MFA’d. MDM as issued; no bypass. Write lost-device-notes.txt, chmod 600. Next: Lab — Android/iOS Hygiene on YOUR Phone — Topic 6 checklist, mobile-hygiene-lab.txt.
7. Hands-on: lock lost-device-notes.txt — YOUR lock and find, not a wipe trophy
Open Settings on a phone YOU own. Copy facts, not secrets. Run the checker; extra args are refused so this cannot become a remote-wipe tool. chmod 600. Enable Find My / Find My Device if it was off. Do not erase a working phone for the screenshot.
Command guide
Work profiles / MDM — WHAT/WHY then lock
═══ COMMANDS ═══
Command — copy this
cat >> "$NOTES" << 'EOF' work_profile: separate work data refuse: MDM bypass puzzles EOF
Mission: lost-device-notes.txt in cyberlium-lab (mode 600)
1) On a phone YOU own, record lock type (not the PIN), auto-lock, notification hide, Find My / Find My Device on YOUR account, MDM yes/no. 2) Fill $HOME/cyberlium-lab/lost-device-notes.txt; run the checker; chmod 600. Enable find if it was off. 3) Ethics: no roommate wipe, no locate-a-person, no MDM bypass. Not official Official Certification training.
Stuck? Ask Cyberlium AI Mentor
If “encryption is on by default so the PIN can stay 1234” or “Find My is for hunting” still feels true, ask for a hint — not a bypass. Try: "Hint only: why a secure lock unwraps mobile encryption, why Find My / Find My Device is only for a phone I own, why MDM grey toggles are policy not a CTF, and why lost-device-notes.txt is chmod 600?" You still fill the file. No roommate. No erase trophy.
You now treat lock, encryption, and find-on-YOUR-account as one stack, and MDM as a container you do not bypass. Other people’s wipes and found-phone browsing are out. Notes are locked. This is original Cyberlium teaching mapped to the Ethical Hacking mobile-platforms domain — not official Official Certification training, not a cert, not exam dumps. Next — Lab — Android/iOS Hygiene on YOUR Phone — unknown sources off, lock screen, one extra MFA; Topic 6 checklist; mobile-hygiene-lab.txt chmod 600.
APPLY: You left YOUR phone in a taxi. Find My Device / Find My is on. Which action is in-scope?
APPLY: True or False: Greyed MDM toggles mean you should jailbreak the work profile so personal hardening can complete Module 17.
APPLY: Which note pairing matches this lesson’s ethics and hygiene?
APPLY: curl of http://192.168.0.1/ shows a home router login (TP-Link / Netgear / Huawei / "Router Admin"). Is that DEMO in scope as a hacking target?