Precisely the problem. In theory, anyone else could do that same thing on a pc and see flash disk, sd card, and so on. They could then download all the files they want, or erase them, or anything, and you would never know it is happening. Try opening the flash disk link; you will be able to go through all your folders and see all your files, and if you can, then anyone who gets your ip address and sees that your apex offers ftp/telnet can do that as well. Admitedly there is not a huge chance that this will happen, but it is a huge hole in security that someone could find and use.
On 10/1/10, peter greco <[email protected]> wrote: > Hi Alex > I have followed your steps. > Now what? > I can see network, flash disk, s d card and so on. > Apologies if I'm missing something! > Peter > > ----- Original Message ----- > From: Alex Hall <[email protected] > To: Sabahattin > Gucukoglu<[email protected] > Date sent: Fri, 1 Oct 2010 21:03:00 -0400 > Subject: Re: [Braillenote] Warning: BrailleNote Apex Offers > Read/Write FTPAndTelnet Access To All Comers > > This is crazy!! > 1. Connect to a wifi network on an Apex (someone with an mpower, > please try this as well). > 2. Go to options > connectivity > active connection details and > space > down to the "ip address" item. Note this address. > 3. On any computer, including the bn, go to: > fpt://a.b.c.d > where a.b.c.d is the ip you noted earlier. > 4. You can see the contents of any drive available on the bn > (though > some drives have an odd timestamp), and download anything you > want. > This means that anyone could do the same and you would never know > it!! > On the bright side, it does let you save the bn as a folder in > Windows > (on a pc) and manage files on the bn that way, eliminating the > need > for activeSync; just copy a file from your pc and paste it into > the > virtual folder you set up. Of course, if you are using dhcp, you > will > have to specify the ip each time the bn re-connects, but it is > quite > convenient. Still, as nice as it is, it is a massive security > risk. > The best way to avoid this is to not use wifi anywhere you do not > feel > secure, such as at home. This is an impractacle solution, > though. Your > only other hope is to keep everything in .kwb (keyword braille) > formatted files, since these files are difficult, if not > impossible, > to read without a bn. Thanks to the OP for discovering this; I > am off > to email hw, and I recommend that anyone else who understands > this > message do the same. Basically, the bn can be remotely accessed > by > anyone and files moved to or from it, and you will never know. > Again, > you can use this to your advantage to move files to and from the > bn > and the pc over wifi, which would be a great feature if it were > made > secure. > > On 10/1/10, Sabahattin Gucukoglu <[email protected]> > wrote: > On 2 Oct 2010, at 00:12, olivia wrote: > How can you access telnet on the apex? Thanks! > > BrailleNote doesn't have a telnet or other remote client (but it > should). > Unfortunately, the telnet server is running, and listening by > default, so > just connect with any telnet client. (If you do not know how to > do this, > you probably have no need to. It gives you access to a > command-line > interface (cmd.exe). > > Cheers, > Sabahattin > > ___ > Replies to this message will go directly to the sender. > If your reply would be useful to the list, please send a > copy to the list as well. > > To leave the BrailleNote list, send a blank message to > [email protected] > To view the list archives or change your preferences, visit > http://list.humanware.com/mailman/listinfo/braillenote > > > > > -- > Have a great day, > Alex (msg sent from GMail website) > [email protected]; http://www.facebook.com/mehgcap > > ___ > Replies to this message will go directly to the sender. > If your reply would be useful to the list, please send a > copy to the list as well. > > To leave the BrailleNote list, send a blank message to > [email protected] > To view the list archives or change your preferences, visit > http://list.humanware.com/mailman/listinfo/braillenote > > -- Have a great day, Alex (msg sent from GMail website) [email protected]; http://www.facebook.com/mehgcap ___ Replies to this message will go directly to the sender. If your reply would be useful to the list, please send a copy to the list as well. To leave the BrailleNote list, send a blank message to [email protected] To view the list archives or change your preferences, visit http://list.humanware.com/mailman/listinfo/braillenote
