Blackberry's also allow for the creation of custom applications. If
you're talking about the units from Motorola that I think you're
talking about (the new Accompli line), those have a
proprietary development environment which prohibits the development of
apps which aren't provisioned by a wireless provider.
Or is there a new unit coming out?
Be aware that when you use PIN-to-PIN messaging, the key used for
symmetric encryption is not secret. That's why RIM talks about those
messages being "encoded" rather than "encrypted". Decoding them is
trivial: the key is known to every RIM Blackberry device.
Email using their email backbone is encrypted using Triple-DES and a
key sharing scheme which has passed muster at a variety of very fussy
organizations.
But, as I asked in my previous message, we still don't know the threat
profile. RIM Blackberry units are probably susceptible to
electromagnetic eavesdropping (different than sniffing the DataTAC or
Mobitex packets). I haven't really explored the internals, but I
doubt they'd hold up to someone who has actually acquired the physical
device and wants the data inside.
What is the threat against which you define "secure"?
>>>>> On Tue, 26 Mar 2002 16:55:10 -0700, [EMAIL PROTECTED] said:
neitherj> The Blackberry units from RIM technologies utilize
neitherj> encryption schemes that are at least acceptable, and can
neitherj> use either email or their built in pins for transit.
neitherj> Very functional, not too pricey, and as secure as you
neitherj> are gonna get until Motorola brings forth that which
neitherj> they have been working on for the last 18 months or so,
neitherj> and even that will be military first, and cost
neitherj> prohibitive second.
neitherj>
neitherj>
neitherj>
neitherj> Jeff Neithercutt CNA, GSEC Wells Fargo Bank Corporate
neitherj> Information Protection 155 5th Street MAC 0186-030 San
neitherj> Francisco, CA. 94103 (415)243-5549
neitherj>
neitherj>
neitherj> -----Original Message----- From: Meritt James
neitherj> [mailto:[EMAIL PROTECTED]] Sent: Monday, March 25,
neitherj> 2002 8:44 AM To: [EMAIL PROTECTED]
neitherj> Subject: Secure mobile unit?
neitherj>
neitherj>
neitherj> As contradictory as this intuitively seems, is anyone
neitherj> aware of anything that even ADVERTISES itself as a
neitherj> secure mobile device? I've been asked about a 'secure'
neitherj> (whatever that means) mobile (say, wear on belt size, 6
neitherj> oz or so) unit. Haven't been able to find out if voice,
neitherj> IP or what. So far, I'm flexible. ;-)
neitherj>
neitherj> Thanks! -- James W. Meritt CISSP, CISA Booz | Allen |
neitherj> Hamilton phone: (410) 684-6566
neitherj>
neitherj>
--
John Karabaic
3545 Zumstein Ave, Cincinnati OH 45208-1309
513.321.3221
Probably the question asked most often is: Do one-celled animals have
orgasms? The answer is yes, they have orgasms almost constantly, which
is why they don't mind living in pools of warm slime.
-- Dave Barry, "Sex and the Single Amoeba: What Every
Teen Should Know"
