RE: how do you secure a blackberry

["Joseph Williams" <joseph.s.williams () gmail com>]

This isn't true. Through "Service Books" a provider can basically push
anything software they want to the device.

Joe

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Aarón Mizrachi
Sent: Tuesday, July 28, 2009 1:26 AM
To: Shawn Merdinger
Cc: security-basics () securityfocus com; enquiries () globalart4u com
Subject: Re: how do you secure a blackberry

On Lunes 27 Julio 2009 15:38:20 Shawn Merdinger escribió:
> Hi Aarón,
>
> On Wed, Jul 22, 2009 at 1:55 PM, Aarón Mizrachi<unmanarc () gmail com> wrote:
> > The answer:
> > deciding not to install the update.
>
> I don't think it is that simple if the service provider is pushing 
> down software and controls the update process.  For the user to decide 
> not to install the update, the user must be presented with a choice.
> If the install is done silently over the network in the background, 
> then there is no choice for the user.

cheers, i don't really had a time to take a look in deep on this specific
case.

I'm talking the "generic". Usually, the blackberry handheld device does not
came with an automatic update software owned by your "telephony provider" or
rim. Therefore and moreover, any update should be done by hand. 

Moreover, real software updates provided by RIM should be installed using
the desktop manager application. Usually this is not an automatic process
and sometimes requires your handheld password to be done.

I understand that you can download blackberry updates from rim websites
according to your provider, but the trust rely in RIM who publish this
software.

> Cheers,
> --scm

-- 
Ing. Aaron G. Mizrachi P.    

http://www.unmanarc.com
Mobil 1: + 58 416-6143543
Mobil 2: + 58 424-2412503
BBPIN: 0x 247066C1


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------