Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Re:And the next step? (Score 1) 74

Another option is to write an app implementing PGP using BB PIN messages with a BBM style UI. The only text they would intercept is a public key and base 64 encoded encrypted data. Even of they got one persons private key they'd only see half a conversation. Also, they wouldn't need their own server because they would just use RIM's as the transport. This probably wouldn't be too difficult for the more sophisticated groups. The problem with lawful access is it only catches the dumb ones, but still exposes the innocent.

Comment Re:RIM is in Danger (Score 2) 109

There are actually plenty more hurdles. For example S/MIME support, which BB has supported for years has just been included in iOS 5, as far as I know there's no good solution for it on Android. How about support SmartCards like DoD CAC? Currently an adapter seems to be required for the iPhone (besides the reader itself). Don't forget about FIPS 140-2 (which is only in progress on iOS4), CAPS, CC and the various international governments and NATO certifications. These are all time consuming to achieve and maintain. Android and iPhone still have a long way to go before they can actually challenge BB security. I'd also like to add that I've never heard of anyone rooting/jailbreaking a BlackBerry. I know it gets less attention for that kind of thing since users aren't locked into AppWorld but I'm sure it's been attempted.

Comment Re:RIM is in Danger (Score 3, Informative) 109

Apparently everyone missed that RIM is already doing this: http://us.blackberry.com/apps-software/business/server/full/balance.jsp They're taking a bit of a beating right now but I have to say, if I want to actually type quickly and accurately I won't be using my Android, I'd rather do it on a BB. I can type about twice as fast when there's a real, well designed, keyboard.

Comment Not reliable... (Score 5, Interesting) 78

If you actually read this one you'll realize it's useless if the card isn't encrypted (ironically) or the user chose one of the other 3 options. Plus this option is designed to be less secure so you can put the card in another device and decrypt it with just a password. I also wonder what character set is included in their claim of cracking a 7 character password in just hours. http://xkcd.com/936/

Comment Re:If you are unsure and fear runabouts (Score 1) 1173

These are getting popular in Canadian cities as well. I don't know about in the US but there is nothing in the driving handbooks put out by our Ministry of Transportation on proper use of them, so many people are unsure and just "wing it". Years after the city I'm in started installing them the city finally took upon themselves to educate the public with pamphlets sent to every house.

Comment It's the responsibility of the people (Score 1) 329

The fact of the matter here is that in these countries, this kind of access is lawful for the government. The people of these countries are responsible for fighting for their privacy rights, not foreign corporations. I also believe that by "dealt with this already", Lazaridis is talking about RIM having made concessions (which were announced to the press long ago) but assuring customers that BES traffic would remain as private as 3DES or AES256 encryption will allow. Until the people of these countries decide they want privacy this kind of access will remain lawful and foreign corporations will have to concede to their demands. From what I've heard, they want the government to have this kind of access to prevent attacks. Who are we (as the rest of the world) to force our ideas of privacy on societies that value something else more highly?

Comment Re:What could possibly go wrong? (Score 5, Informative) 58

BlackBerry has been tested under FIPS 140-2, CC and CAPS and has been approved for NATO RESTRICTED, UK IL3 and Canada Protected B (among others). It's all available for review here. BlackBerry also supports S/MIME and/or PGP, device and media card encryption, DoD CAC/smartcards (for two factor authentication to the device), Bluetooth encryption, AES256 encryption between the device and it's BlackBerry Enterprise Server, several options for secure remote wipe of the data (even if there is no cellular connection) and all of this can be enforced from a centrally administered server and compliance verified from there as well. Show me how iPhone or Android can even come close to not only the certifications but the security features that can be easily audited for compliance. The only other phone that beat some of this is the Sectera Edge by General Dynamics (which can encrypt voice as well) but I wouldn't call their solution COTS. I know that reads like an advertisement but BlackBerry is really the only one doing all of that (afaik anyway).

Slashdot Top Deals

Too many people are thinking of security instead of opportunity. They seem more afraid of life than death. -- James F. Byrnes

Working...