Slashdot Mirror
Cracking the BlackBerry with a $100 Key
Hit Reply writes "Eweek is running the contents of a Symantec white paper that details how easy it is for a hacker to manipulate BlackBerry applications. Using a developer key that can be purchased by anyone for $100, an attacker can launch e-mail worms, SMS interception and backdoor attacks, and compromise the integrity of contacts, events and to-do items. The white paper has been yanked from Symantec's Web site." From the article: "Signed applications can send e-mail and read incoming e-mail. A malicious application could be used to allow third parties to send messages from the infected BlackBerry and also read all received messages. A malicious application could also use e-mail as a command and control channel to receive instructions to send and receive e-mails; send and receive SMS messages; add, delete and modify contacts and PIM data; read dialed phone numbers; initiate phone calls; and open TCP/IP connections."
I see Symantec is still sensitive to the charge that they create worms, etc, to drum up business for themselves.
Personally it doesn't bother me in the least that a security company is interested in, well, security. Having them actually detail vulnerabilities and produce papers like this would at least be a useful function for them.
Of course, so would producing a worthwhile product that doesn't devour processor cycles, hog system resources, and create system instability upon removal.
ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
So you can get a signature really cheap. The device owner still has to install the application on their Blackberry.
how many crackberries could a cracker crack if a cracker could crack crackberries?
intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
In other news, NTP just sued Blackberry, citing that the vulnerability was actually patented by them.
Help a man when he is in trouble and he will remember you when he is in trouble again.
This is a pretty stupid white paper. The whole point of the key is that you can easily tell which key is being used by the offending applications, and then revoke that key. And it costs the attacker $100 per attack. It's a good system which balances the needs of the network, the users, and developers.
Also it's not trivial to get additional keys. The Blackberry signing certificate program is managed by humans and they catch on pretty quickly. If you even use the signing keys from more than one computer, their signature server will become upset and you'll probably get a phone call from RIM operations.
I believe they already are, encryption keys are regenerated monthly on my blackberry, I always assumed that they were for this exact purpose.
I'm just a beginner bb developer, but I think it's even HARDER than is sounds to write Blackberry worm.
Even if you DO write a program that reads/sends email or connects to the internet.
And then pay the money and SIGN your malicious app--
and then somehow get somebody to INSTALL it..
Well on the BB releases I use - you will also get WARNINGS when you execute the program.
When the program first tries to access your email folder - it will pop up a warning asking you "do you want to allow this program to acesss your email folder?"
First time the application tries to open a TCP/IP connection to the outside world - same thing: "The application is attempting to open a conneciton to X.X.X.X - do you wish to allow it?". You can type "Allow" or "Deny" or "Allow always".
So BE WARNED: A person can a malicous program, that is signed with his name on it (RIM takes your info before they give you the keys), which you MIGHT install and then you MIGHT accidentally give it access to your emails, and address book, and access to internet. If all those things happen - then it would be bad!