Personal digital assistants and smartphones produced by Research in Motion (RIM) starting in 1999.
17
votes
3answers
3k views
Deleting a Java Object securely
I know that in order to delete a Java object I should use character array instead of String, since I can safely erase (rewrite the character array with other data) its content. This seems not to be ...
10
votes
1answer
297 views
What did Blackberry do wrong?
The NIST defines a vulnerability in RIM Blackberry encryption discovered last October.
Apparently, Blackberry's flavour of PBKDF2 was weak. They say:
The offline backup mechanism in Research In ...
5
votes
3answers
749 views
What makes the Blackberry device and network more secure?
One of Blackberry's strongest assets is the "network" that it uses. Can someone explain, or link to technical information that covers what this secure network is, and what it does better than the ...
4
votes
3answers
415 views
Why would configuring a Blackberry to turn radio off when charging help with security?
A friend's work Blackberry is configured so that phone and Internet access are disabled while the device is charging. I assumed this was a fault, but apparently it's a deliberate security policy.
Has ...
4
votes
3answers
753 views
BlackBerry handheld penetration testing
Are there any relevant resources, tools or documents about penetration testing of BlackBerry handhelds?
3
votes
1answer
213 views
Is there cryptographic material in a phone's SIM card that can be used with RSA encryption?
Given that a smart card stores a private key that can't be extracted, it appears that a SIM card is similar to a smart card in these respects.
I need to store (or use an existing) private key on a ...
2
votes
1answer
221 views
Secure implementations of G2/G3/G4 cellular technology
It appears that GSM is like any other technology, and is only as secure as its implementation.
What implementations are known to be secure or insecure due to a fault on the implementor's side, or due ...
2
votes
2answers
297 views
What is the correct way to assess and compare Certicom's products to the alternatives?
I'm investigating Certicom's API because they are "free" with the Blackberry implementations, and have come to realize that I have several alternatives for implementing crypto such as BouncyCastle, ...
2
votes
1answer
683 views
How does a BlackBerry handheld connect to BES?
How does a Blackberry device connect to BlackBerry Enterprise Server (BES) for the first time? What are the security mechanisms used to protect against a rogue BlackBerry handheld trying to connect to ...
2
votes
1answer
352 views
Possible to use “Blackberry Protect” in conjunction with a BES IT Policy?
Is it possible to use Blackberry Protect in conjunction with a BES IT policy? If so, what settings are incompatible?
So far I discovered that Memory encryption appears to be incompatible, but I'd ...
2
votes
1answer
1k views
How do you erase a Blackberry without having direct access to the server?
I have a Blackberry with no access to the BIS or BES server that managed it.
How does one erase and reset the device to defaults?
1
vote
1answer
245 views
How should I block BIS connections from accessing my Exchange Server
BIS is a technology from Blackberry that allows end users to connect to an Exchange server without a BES server.
The problem is that BES asserts a security policy on the devices, and BIS does not ...
0
votes
1answer
199 views
block changing IP addresses on port 25 SMTP
A script is currently being run against my exchange server attempting to access resources on port 25 SMTP. This is generating event 4776 within Windows event logs. How can I stop this? Would I need to ...
-4
votes
0answers
26 views
Blackberry Application Security; Get The Application Binary. [closed]
I'd like to perform security testing on a blackbbery application.
Nowadays, the application world is only accessible with a blackberry service. At first, I'd like to install the application from ...
