That's awful to think about. I wonder how that slipped by HW, or
maybe they didn't think of it. Well, if this only works on XP or
earlier as Alex said, then maybe windows had something to do with
it too.
----- Original Message -----
From: Alex Hall<[email protected]
To: peter greco<[email protected]
Date sent: Fri, 1 Oct 2010 23:03:08 -0400
Subject: Re: [Braillenote] Warning: BrailleNote Apex Offers
Read/WriteFTPAndTelnet Access To All Comers
Precisely the problem. In theory, anyone else could do that same
thing
on a pc and see flash disk, sd card, and so on. They could then
download all the files they want, or erase them, or anything, and
you
would never know it is happening. Try opening the flash disk
link; you
will be able to go through all your folders and see all your
files,
and if you can, then anyone who gets your ip address and sees
that
your apex offers ftp/telnet can do that as well. Admitedly there
is
not a huge chance that this will happen, but it is a huge hole in
security that someone could find and use.
On 10/1/10, peter greco<[email protected]> wrote:
Hi Alex
I have followed your steps.
Now what?
I can see network, flash disk, s d card and so on.
Apologies if I'm missing something!
Peter
----- Original Message -----
From: Alex Hall<[email protected]
To: Sabahattin
Gucukoglu<[email protected]
Date sent: Fri, 1 Oct 2010 21:03:00 -0400
Subject: Re: [Braillenote] Warning: BrailleNote Apex Offers
Read/Write FTPAndTelnet Access To All Comers
This is crazy!!
1. Connect to a wifi network on an Apex (someone with an
mpower,
please try this as well).
2. Go to options> connectivity> active connection details and
space
down to the "ip address" item. Note this address.
3. On any computer, including the bn, go to:
fpt://a.b.c.d
where a.b.c.d is the ip you noted earlier.
4. You can see the contents of any drive available on the bn
(though
some drives have an odd timestamp), and download anything you
want.
This means that anyone could do the same and you would never
know
it!!
On the bright side, it does let you save the bn as a folder in
Windows
(on a pc) and manage files on the bn that way, eliminating the
need
for activeSync; just copy a file from your pc and paste it into
the
virtual folder you set up. Of course, if you are using dhcp,
you
will
have to specify the ip each time the bn re-connects, but it is
quite
convenient. Still, as nice as it is, it is a massive security
risk.
The best way to avoid this is to not use wifi anywhere you do
not
feel
secure, such as at home. This is an impractacle solution,
though. Your
only other hope is to keep everything in .kwb (keyword braille)
formatted files, since these files are difficult, if not
impossible,
to read without a bn. Thanks to the OP for discovering this; I
am off
to email hw, and I recommend that anyone else who understands
this
message do the same. Basically, the bn can be remotely accessed
by
anyone and files moved to or from it, and you will never know.
Again,
you can use this to your advantage to move files to and from the
bn
and the pc over wifi, which would be a great feature if it were
made
secure.
On 10/1/10, Sabahattin Gucukoglu<[email protected]
wrote:
On 2 Oct 2010, at 00:12, olivia wrote:
How can you access telnet on the apex? Thanks!
BrailleNote doesn't have a telnet or other remote client (but
it
should).
Unfortunately, the telnet server is running, and listening by
default, so
just connect with any telnet client. (If you do not know how
to
do this,
you probably have no need to. It gives you access to a
command-line
interface (cmd.exe).
Cheers,
Sabahattin
___
Replies to this message will go directly to the sender.
If your reply would be useful to the list, please send a
copy to the list as well.
To leave the BrailleNote list, send a blank message to
[email protected]
To view the list archives or change your preferences, visit
http://list.humanware.com/mailman/listinfo/braillenote
--
Have a great day,
Alex (msg sent from GMail website)
[email protected]; http://www.facebook.com/mehgcap
___
Replies to this message will go directly to the sender.
If your reply would be useful to the list, please send a
copy to the list as well.
To leave the BrailleNote list, send a blank message to
[email protected]
To view the list archives or change your preferences, visit
http://list.humanware.com/mailman/listinfo/braillenote
--
Have a great day,
Alex (msg sent from GMail website)
[email protected]; http://www.facebook.com/mehgcap
___
Replies to this message will go directly to the sender.
If your reply would be useful to the list, please send a
copy to the list as well.
To leave the BrailleNote list, send a blank message to
[email protected]
To view the list archives or change your preferences, visit
http://list.humanware.com/mailman/listinfo/braillenote
