What's stopping them from dumping the phone memory, run it into an emulator and try it there, ignoring the calls to erase data or the minute delay imposed after six attempts.
Or perhaps bypassing the entire passcode, which maybe it's only that and not an encryption key at all.
As far as I know, they can push new books to your device so they are probably able to update the existing ones.
Every time you configure a new BES e-mail account, they push a new service book to you.
They probably send you new books every time your device cold-starts (battery pull). I don't know it for sure, but most BB forums recommend fixing missing/incorrect books by doing a battery pull. Of course it could be the usual "did you try turning it off and on again?" voodoo.
That's why one of my rants mentions the right to run my CPU at 100% for 6 months and expect it not to die (unless I don't provide adequate cooling, but that just complicates the point)
Isn't that a bit unrealistic for a consumer device?
A better solution is to (re-) design the software so it can handle failures on its own. That way you can be protected from software errors as well as hardware ones.
As much as I agree with that sentiment, I'll be among the first to admit that that's unlikely to happen in a reasonable time-frame in a less than perfect world.
Ugly kludge solutions will always have a place in the industry because of this.
I remember that back in the day there was a movement to implement a distributed computing project (a la SETI at home) in order to crack the Xbox signing keys.
I guess there wasn't much support for it and other hacks were so very much available.
I think the parent's point only applies to products they intend to re-distribute, altho I don't see why. If it's in the kernel it must be GPL compliant and can be re-distributed.
The best advice is move sshd off of port 22, establish and configure your IDS and response, move sshd back to port 22.
I once considered doing that. Instead I firewalled the whole network and the only way to ssh into a box is to access via VPN (with password policies enforcement instead of certificates) and from there ssh into the machine.
If the VPN is down, tough. I'll have to have someone onsite to fix things.
Of course, one size does not fit all. This is the way we chose to do this at my place of work.
Oddly I've never seen evidence of someone trying to brute-force a vpn connection.
Traffic court was on Thursday night. Every Thursday nights would show our tiny town hall (a historic converted 19th century one-room schoolhouse) with a line of people winding around several times outside. Processed quickly, cha-ching.
Unless you were a country singer, in that case you had to spend an evening singing at the Boar's Nest.
Ultima V had NPC with rotating schedules (I think it was the first Ultima that implemented day/night cycles). At certain hours NPC would leave their post and go to eat or sleep or wander around.
Depends on where you played. There are times when you feel there's almost no one else logged on. You could possibly have entire zones for yourself in the less populated servers.
I hope this move increases server population. This is a fun game (not groundbreaking, tho) even if you are not a Tolkien fan.
Slashdot Mirror
What's stopping them from dumping the phone memory, run it into an emulator and try it there, ignoring the calls to erase data or the minute delay imposed after six attempts.
Or perhaps bypassing the entire passcode, which maybe it's only that and not an encryption key at all.
Shame on Romero for not knowing about Copy ][ Plus.
Whoa, nostalgia attack! I haven't thought of that name in ages!
Heck, they even restrict the driver downloads for Sun hardware.
No, it doesn't mean any such thing. I take it you've never heard of CARP or VRRP.
Or even something as common as the decades-old BGP.
As far as I know, they can push new books to your device so they are probably able to update the existing ones.
Every time you configure a new BES e-mail account, they push a new service book to you.
They probably send you new books every time your device cold-starts (battery pull). I don't know it for sure, but most BB forums recommend fixing missing/incorrect books by doing a battery pull. Of course it could be the usual "did you try turning it off and on again?" voodoo.
"Think different"*
* provided you do so within this borders we set for your own protection
Unless they make a tablet device with a mouse and keyboard *cough laptop cough*
My favourite new gadget:
http://www.asus.com.au/Eee/Eee_Pad/Eee_Pad_Transformer_TF101/
Also has USB host mode, so you can plug in mice, keyboards, nice big external drives, etc.
I have used it and it's pretty slick and useful, both with and without the keyboard.
I just wish they went ahead and released the 3g version already.
"...because Android is open." -- John Gruber
In all fairness, it's an Amazon restriction, not an Android one. What I don't get is why they allow the other devices but restrict Android.
Now if only Amazon would let me install the Android Kindle app in my country...
They let me my 3G Kindle, Kindle on my PC, on my Blackberry and on my iPod. But for some reason, not on the Android platform. Bummer.
That's why one of my rants mentions the right to run my CPU at 100% for 6 months and expect it not to die (unless I don't provide adequate cooling, but that just complicates the point)
Isn't that a bit unrealistic for a consumer device?
A better solution is to (re-) design the software so it can handle failures on its own. That way you can be protected from software errors as well as hardware ones.
As much as I agree with that sentiment, I'll be among the first to admit that that's unlikely to happen in a reasonable time-frame in a less than perfect world.
Ugly kludge solutions will always have a place in the industry because of this.
Unless it's a multiuser system. In that case YOUR DATA may be toast but everybody else's will be fine.
Funny and sad because it's true. I've gotten that answer along with "Word", "Peachtree" and "Nero".
I remember that back in the day there was a movement to implement a distributed computing project (a la SETI at home) in order to crack the Xbox signing keys.
I guess there wasn't much support for it and other hacks were so very much available.
I think the parent's point only applies to products they intend to re-distribute, altho I don't see why. If it's in the kernel it must be GPL compliant and can be re-distributed.
Considering one of MessageLab's clients is currently sending me spam with no way of opting out, I'm going to be a lone supporter of SORBS :)
Hell, yes! I'm gonna go one step further and turn off my mail servers. Good bye spam problem!
The best advice is move sshd off of port 22, establish and configure your IDS and response, move sshd back to port 22.
I once considered doing that. Instead I firewalled the whole network and the only way to ssh into a box is to access via VPN (with password policies enforcement instead of certificates) and from there ssh into the machine.
If the VPN is down, tough. I'll have to have someone onsite to fix things.
Of course, one size does not fit all. This is the way we chose to do this at my place of work.
Oddly I've never seen evidence of someone trying to brute-force a vpn connection.
Unless you were a country singer, in that case you had to spend an evening singing at the Boar's Nest.
Judgind by the picture, the resort is located in the picturesque Uncanny Valley.
I'm not a pilot but I thought this was required by regulation.
I used to tease my pilot friends that they looked like they were praying when going over their checklists. Almost like a responsorial psalm.
Ultima V had NPC with rotating schedules (I think it was the first Ultima that implemented day/night cycles). At certain hours NPC would leave their post and go to eat or sleep or wander around.
If you ever find yourself in that situation thank your lucky stars and feel pity for poor Ronaldo.
Depends on where you played. There are times when you feel there's almost no one else logged on. You could possibly have entire zones for yourself in the less populated servers.
I hope this move increases server population. This is a fun game (not groundbreaking, tho) even if you are not a Tolkien fan.
But those are my free bookmarkers!
And bring back the Clipper Chip!