RE: how do you secure a blackberry

["Joseph Williams" <joseph.s.williams () gmail com>]

Atleast with Verizon, when you battery pull the phone. The service books
that are pushed out by the provider are repushed out. My girlfriend's sprint
blackberry comes with some "Quick Launch" icons and a small program from
Sprint. Every time she has to battery pull they are redownloaded. 

Joe

-----Original Message-----
From: Aarón Mizrachi [mailto:unmanarc () gmail com] 
Sent: Tuesday, July 28, 2009 11:51 PM
To: joseph.s.williams () gmail com
Subject: Re: how do you secure a blackberry

On Miércoles 29 Julio 2009 00:03:03 joseph.s.williams () gmail com escribió:
> http://www.berryreview.com/2009/01/22/faq-explanation-of-each-blackberr
> y-se rvice-book-type/ Sent from my Verizon Wireless BlackBerry

I already read that looking in google. Seems to be a configuration for some
services. 

I run my blackberry with a foreign country service book, since i bought my
blackberry on a foreign country, and the limitation is very low (mms, tcp
connections, and others). But, i'am connected to bis without issues.

I don't know if the service book are automatically updated when i turn on my
blackberry.

---

In the past i tried to mitm my blackberry connection through some software
for ssl mitm, and my surprise was that the data encrypted with SSL is also
encrypted with another algorithm into.

But, how a "mechanism for connections" could be transformed in "software
installer"?


Regards.
Aaron.

;-)


> -----Original Message-----
> From: Aarón Mizrachi <unmanarc () gmail com>
>
> Date: Tue, 28 Jul 2009 23:45:47
> To: Joseph Williams<joseph.s.williams () gmail com>
> Subject: Re: how do you secure a blackberry
>
> On Martes 28 Julio 2009 13:17:45 usted escribió:
> > This isn't true. Through "Service Books" a provider can basically push
> > anything software they want to the device.
> >
> > Joe
>
> how?.
>
> > -----Original Message-----
> > From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> > On Behalf Of Aarón Mizrachi
> > Sent: Tuesday, July 28, 2009 1:26 AM
> > To: Shawn Merdinger
> > Cc: security-basics () securityfocus com; enquiries () globalart4u com
> > Subject: Re: how do you secure a blackberry
> >
> > On Lunes 27 Julio 2009 15:38:20 Shawn Merdinger escribió:
> > > Hi Aarón,
> > >
> > > On Wed, Jul 22, 2009 at 1:55 PM, Aarón Mizrachi<unmanarc () gmail com> 
wrote:
> > > > The answer:
> > > > deciding not to install the update.
> > >
> > > I don't think it is that simple if the service provider is pushing
> > > down software and controls the update process.  For the user to decide
> > > not to install the update, the user must be presented with a choice.
> > > If the install is done silently over the network in the background,
> > > then there is no choice for the user.
> >
> > cheers, i don't really had a time to take a look in deep on this
specific
> > case.
> >
> > I'm talking the "generic". Usually, the blackberry handheld device does
> > not came with an automatic update software owned by your "telephony
> > provider" or rim. Therefore and moreover, any update should be done by
> > hand.
> >
> > Moreover, real software updates provided by RIM should be installed
using
> > the desktop manager application. Usually this is not an automatic
process
> > and sometimes requires your handheld password to be done.
> >
> > I understand that you can download blackberry updates from rim websites
> > according to your provider, but the trust rely in RIM who publish this
> > software.
> >
> > > Cheers,
> > > --scm

-- 



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------