Slashdot Mirror

That's only true if you audit the entire Blackberry software stack for side-channel information leaks at the machine code level. I refer you to Ken Thompson's classic, Reflections on Trusting Trust. I've actually worked with a vendor that has tools for embedding special kinds of sentinels in object code, taking an even more direct and undetectable route than Ken did.

They're right to be wary.

This is similar to some of the technology developed by Arxan Inc. http://www.arxan.com/

I think Arxan has significant prior art here. They specifically mention obfuscation. I unfortunately can't say much more other than that I've seen some demos of what they offer under NDA. I wish their web site had more meat (e.g. a white paper). I will say they have some bright guys, some of whom come from the NSA, working with them. Heck, even Gene Spafford's on their technical advisory board.

And for the paranoid, I've mentioned nothing above I couldn't find on Arxan's or someone else's public website.

I think Arxan has significant prior art here. They specifically mention obfuscation. I unfortunately can't say much more other than that I've seen some demos of what they offer under NDA. I wish their web site had more meat (e.g. a white paper). I will say they have some bright guys, some of whom come from the NSA, working with them. Heck, even Gene Spafford's on their technical advisory board.

And for the paranoid, I've mentioned nothing above I couldn't find on Arxan's or someone else's public website.

I think Arxan has significant prior art here. They specifically mention obfuscation. I unfortunately can't say much more other than that I've seen some demos of what they offer under NDA. I wish their web site had more meat (e.g. a white paper). I will say they have some bright guys, some of whom come from the NSA, working with them. Heck, even Gene Spafford's on their technical advisory board.

And for the paranoid, I've mentioned nothing above I couldn't find on Arxan's or someone else's public website.