Slashdot Mirror
Russian Software Company Says Its App Can Crack BlackBerry Security
AZA43 leaps into the ranks of accepted submitters, writing "Russian security software vendor Elcomsoft has released an app that it claims can determine BlackBerry handheld passwords. The software supposedly hacks the BlackBerry password via an advanced handheld security setting that's meant to encrypt data stored on a user's memory card. And a hacker doesn't even need to have the BlackBerry to determine a password, just the media card."
...software cracks YOU!
It seems like the only time I read about anything Russians do with computer tech, it involves botnets, stealing passwords, and ripping off peoples bank accounts. Are there any Russians that contribute something positive to the world of software?
If you actually read this one you'll realize it's useless if the card isn't encrypted (ironically) or the user chose one of the other 3 options. Plus this option is designed to be less secure so you can put the card in another device and decrypt it with just a password. I also wonder what character set is included in their claim of cracking a 7 character password in just hours. http://xkcd.com/936/
Why would the password be stored, in any form recoverable by means that aren't computationally intractable brute forcing, anywhere in the device or storage expansion cards?
Isn't this the sort of thing that hashing is supposed to solve?
news at 11...big freaking deal...
You act like this is either unimportant or not news. I'm not sure which.
Fact is while there's a lot of FUD floating around regarding things like RIM "caving in" and dropping BIS servers in questionable countries, there haven't actually been very many actual real-life exploits for the phones or their communications. Blackberry phone remains the only ones on the market that encrypt all data traffic by default and that encryption can't be disabled. If you're on BIS or if you're on BES, your unencrypted web traffic, e-mail traffic (even POP3) is encrypted at the device. That's still worlds ahead of the other devices.
There's reports that one exploit exists that can decrypt Password Keeper data from a phone backup on a PC. There's this report that discusses recovery of phone unlock passwords. There's the widely discussed and misunderstood reports about RIM dropping BIS MDS servers in unfriendly countries and what that allows (hint: it has zero to do with Blackberries not in those countries).
RIM's stuff is by and large still very, very secure by any comparison and their phones are unique in that regard. So the way I see it, this is both news (being a genuine security hack) and relevant (these phones being the best on the market).
So stuff your ignorant sarcasm.
"Oh no... he found the
Russians are good at cracking software. It is a puzzle that they are so bad at creating it.
an ill wind that blows no good
Kaspersky?
Talk about getting pwned.
Boot Windows, Linux, and ESX over the network for free.
RIM will not even exists within a year or so. I'ts only a matter of time before they get completely slaughtered and file for bankrupcy etc..
Very well said. Though, I really hope this gets addressed, because I don't feel comfortable with having to make a choice between potentially exposing my device password or contents of my SD card..
Bow before me, for I am root.
quote you:
So stuff your ignorant sarcasm.
quote end...
Yep...stuff me, that will solve all issues right there.
unlike you, I actually know something about it, but then again, would you even care?
You write...RIM's stuff is by and large, very secure...etc... yep.. you do live in a cubicle of security beliefs don't you? Do I really care? Nope...not really..just trying to inform the likes of ya. Take the information any way you like it. I get my burger edgeways.
What this world is coming to - is for you and me to decide.
In other news "Other Russians Say They Cracked BlackBerry Years Ago" but kept mum about, for "financial and business reasons". ;)
Pure speculation here:
Since this only works with media encryption enabled, I'm guessing this is an alternative cipher attack. They can't directly obtain the Blackberry device password, but they can break the media encryption (perhaps because it is a much weaker cipher). The media encryption key is likely the same as or derived from the device password, allowing an expedited attack on that.
Moral of the story: If you derive a key for a weak cipher from a key used for a strong one, make sure you use an irreversible function to do so.
would you even care?
Yes.
just trying to inform the likes of ya.
Inform away. So far you've got zero information content in either of your posts. Mine summarizes the known exploits and security topics. Yours don't. Feel free to drop the newsburger edgestuff at 11 nonsense and communicate with us. Drop down to the lesser language of English and educate me.
"Oh no... he found the
Not sure about "useful", but Tetris sprints to mind as something positive
There is a lot of hype here, so be sure to read the full article. It only works for users who have encrypted the media card with device password only, and they only discuss the time to hack a single case 7 character password. If you use one of the encryptions options that includes the device key, then the attacker is stuck trying to crack AES.
Pics. Or it didn't happen.
Slapping your epenis around with ol Psycho isn't terribly entertaining. You know something? Tell us.
Faster! Faster! Faster would be better!
RIM stuff is largely security by obscurity at this point however, very few people have seemingly tried to pull their stuff apart, and the few that have didn't find good things, see the pwn2own contest from this year for one such example.
Android, iphone and even windows mobile devices are much easier to target because they are largely based on existing systems which are well understood... RIM are using a totally obscure black box that requires significant investment of time to reverse engineer. This doesn't mean it's secure, it just means that hackers will need to spend more time to find holes in it. On the other hand, it means that whitehats will also require more time to reverse engineer the system, whereas its highly possible that blackhats have already stolen the sourcecode.
Most devices provide the option to run a VPN between the handset and a server under your control, only RIM require that there be a server under their control sitting in between.
Most devices (RIM included) can also boot up and start talking to the network without requiring any user input, therefore the keys used for this encryption must be stored on the device somewhere, just waiting for someone appropriately skilled and motivated to work out how to extract them...
http://spamdecoy.net - free throwaway anonymous email - avoid spam!
http://en.wikipedia.org/wiki/Sergey_Brin
intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
if Putin crossed paths with Chuck Norris
intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
Many times over the past 2 decades. E.G.-> I was an avid Borland Delphi dev. circa 1995-2002, & a good % of those that contributed VCL were Russian coders.
(VCL prebuilt objects/libs, albeit, with added or better functionality than std. ones Borland gave you)
I'm SURE that the same goes for C/C++ over time & probably Assembly work before that, etc./et al...
* Then again, I am inclined to go with you on some grounds, online security ones, because I have been populating a custom HOSTS file vs. malware infested sites, botnet C&C servers, known bogus hosts-domain names, & adbanners too, & where do a LARGE %-age of them come out of? You guessed it: The U.S.S.R./Soviet Union/Russia...
"Are there any Russians that contribute something positive to the world of software?" - by Beelzebud (1361137) on Sunday October 02, @12:38PM (#37583738)
Per what I wrote above, you have a SMALL fraction of a possible answer...
(It's the same anywhere though - you've got your "normal folks" & you've got your "criminal elements" too...)
APK
P.S.=> As to what I opened with - Pretty much any custom VCL site can show folks this, & once there? Take a peek around @ the VCL authors' names: You'll see what I mean...
Then also, you've got the guys in the FREEWARE 64 bit world who did UltraDefrag64:
http://it.slashdot.org/comments.pl?sid=2435272&cid=37443252
(Which is 1 of INFOWORLD's "top picks" recently for good freeware)
They're russians too.
Honestly - I'm not even BEGINNING to scratch the surface here either, not really!
Face it - Every culture has "good" & "bad" folks (some are bad due to bad decisions forcing their hands too I'd imagine as well, so, i.e.-> They're not really "evil", just more desperate)...
... apk
"nigger" - by Anonymous Coward ANOTHER "ne'er-do-well" /. OFF-TOPIC TROLL on Sunday October 02, @05:43PM (#37585392)
"???"
Uhm... Could we get a translation of that off-topic "troll-speak/trolllanguage" of yours, please?
---
* And, you're an off-topic troll - no questions asked...SEE MY SUBJECT LINE ABOVE!
APK
P.S.=> Yes, it must have just have been another off-topic done nothing of significance with his life troll spewing his off-topic b.s. again & not contributing to the ongoing conversations. Oh well - No biggie!
("ReVeRsE-PsYcHoLoGy", for trolls - Courtesy of this code by "yours truly" in less than 1 second flat):
---
#TrollTalkComReversePsychologyKiller.py (Ver #2 by APK)
def reverse(s):
try:
trollstring = ""
for apksays in s:
trollstring = apksays + trollstring
except:
print("error/abend in reverse function")
return trollstring
s = ""
print reverse(s)
try:
s = "Insert whatever 'trollspeak/trolllanguage' gibberish occurs here..."
s = reverse(s)
print(s)
except Exception as e:
print(e)
---
... apk
"reggin" - by Anonymous Coward ANOTHER "ne'er-do-well" /. OFF-TOPIC TROLL on by Anonymous Coward on Sunday October 02, @05:43PM (#37585392)
"???"
Uhm... Could we get a translation of that off-topic "troll-speak/trolllanguage" of yours, please?
* And, you're an off-topic troll - no questions asked...SEE MY SUBJECT LINE ABOVE!
APK
P.S.=> Yes, it must have just have been another off-topic done nothing of significance with his life troll spewing his off-topic b.s. again & not contributing to the ongoing conversations. Oh well - No biggie!
("ReVeRsE-PsYcHoLoGy", for trolls - Courtesy of this code by "yours truly" in less than 1 second flat):
---
#TrollTalkComReversePsychologyKiller.py (Ver #2 by APK)
def reverse(s):
try:
trollstring = ""
for apksays in s:
trollstring = apksays + trollstring
except:
print("error/abend in reverse function")
return trollstring
s = ""
print reverse(s)
try:
s = "Insert whatever 'trollspeak/trolllanguage' gibberish occurs here..."
s = reverse(s)
print(s)
except Exception as e:
print(e)
---
... apk
This is the same company that employed Dmitry Skylarov, one of the first people to be arrested under the DMCA for breaking the encryption on Adobe's eBook format.
http://en.wikipedia.org/wiki/Dmitry_Sklyarov
Let's try not posting this as an Anonymous Coward by mistake.
This is the same company that employed Dmitry Skylarov, one of the first people to be arrested under the DMCA for breaking the encryption on Adobe's eBook format.
http://en.wikipedia.org/wiki/Dmitry_Sklyarov
Karma: Positive. Mostly effected by cowbell.
RIM's stuff is by and large still very, very secure by any comparison and their phones are unique in that regard. So the way I see it, this is both news (being a genuine security hack) and relevant (these phones being the best on the market).
This seems to be misunderstood as either a crack or a break in the security of the BB. It is neither. Elcomsoft is using a crib that they have found to attempt dictionary and/or brute force attacks, nothing more. See this blog post for the specific details about the file they are using. Unless there is something else that they haven't mentioned, this is a garden variety known plaintext attack.
'The tyrant will always find pretext for his tyranny.' - Aesop's Fables
It seems like the only time I read about anything an American wrote, it involves ignorance, bad generalizations, and a us versus them mentality. Are there any Americans that contribute something positive to the world?
This is simply brute-forcing the password, relying on a short user password. It is only viable if the user has set up the phone security options in a weak way: selected to encrypt media card with user password only, rather than user password plus device key. So really there is nothing surprising in this attack. If you want good security on a Blackberry, it's a matter of setting it up in the options.
"Politicians and diapers must be changed often, and for the same reason."
If you understand what a known-plaintext attack is you have explained it very badly. It may well be that a known plaintext attack is possible because you expect certain files or file structure to be in place but known plaintext means that you know specific parts of the plaintext not just that you are looking for anything that isn't gibberish.
Posted anonymously so that I can mod you down.
fuck rule 10, i'm more interested in rule 34. where's the porn of these security vulnerabilities?
insensitive clod overlords obligatory xkcd car analogy russian reversals whoosh pedant fanbois ftfy in 3...2...1..PROFIT