18

A SIM card is a smart card. It follows all the relevant standards for smart cards, it is produced by smart card vendors. A smart card is "just" a tamper-resistant computer. It has its own CPU, RAM, ROM, storage area (often EEPROM). Power and clock are provided from the outside. The device is supposed to be resistant to physical extraction of the internally ...


8

How dare you! How dare you question the most secure mobile platform available to mankind! My attempt at humor there.. now to a serious answer before the mods attack. Blackberry has some whitepapers regarding security here: http://us.blackberry.com/ataglance/security/ I would argue the network is not RIM's strongest asset. Corporate and government adoption ...


7

I know there is a great example and discussion on this for Samsung devices and Android, so you might want to start there and see if it takes you to where you want to go with everything else. http://developer.samsung.com/android/technical-docs/Neat-tricks-when-implementing-a-kiosk-app Removing the title bar and status bar ... you may want to ... remove ...


6

Obscurity. No seriously though. Thanks to Blackberry enterprise server (which has been out for years), corporate mobile phones were able to be managed and controlled through a policy set or a group of "rules".. Not altogether unlike your windows user account at work on your company domain controlled by Active Directory GPO. I think this was initially what ...


6

Your operating system knows everything about you. Everything you do, everything you see, everything you type can be stored, manipulated or transferred by your OS. If you are not able to see the source code of the OS, you are at the mercy of the supplier and have to trust him that he is not malicious. This, of course, is not just a problem of iOS but of any ...


5

This solution is easily handled in iOS, if you use Apple Configurator, which allows for a device to be deployed in what they call "supervised" mode. In this mode you can set a single application for the device to use. In this case the device will auto-load that application on boot and will not allow a user to exit through any normal means. It's designed, ...


5

Android Use SHREDroid. Perform a factory reset. iPhone As of iOS 2.0, the "Erase All Content and Settings" option will actually delete and overwrite the data on your phone, rendering them unrecoverable, or remove encryption keys on devices that supports hardware encryption. BlackBerry The "Security Wipe" option will delete and overwrite the data on your ...


5

I recently did a Blackberry handheld security review and used this checklist from the DoD as my source information - http://web.nvd.nist.gov/view/ncp/repository/checklistDetail?id=252 This is also a useful list of resources from RIM http://docs.blackberry.com/en/admin/deliverables/7533/List_of_available_BB_AMT_tools_555278_11.jsp This looked interesting ...


4

This might be of interest to you: http://www.defcon.org/images/defcon-14/dc-14-presentations/DC-14-X30n.pdf This is a slide presentation from the 2006 Defcon event, where the researcher into detail on how an attacker might use the BlackBerry device to run proxying software, granting the attacker remote access to the company LAN (due to how BlackBerry's set ...


3

Blackberry Architecture is designed in such a way that the entire communication (data and not voice channel) is managed by the blackberry servers ecosystem in highly secured manner. The telco data channel acts as a carrier and transport medium of data packets to and fro between the mobile device and the blackberry servers like BIS and BES. For establishing ...


3

2G communications is proven to be very unsafe for both voice and data. GPRS/UMTS use A5/3 encryption and the encryption for that has not been broken. It's possible that his blackberry only uses GPRS/UMTS networks


2

The Blackberry browser is now based of webkit, I would start by looking at fairly recent webkit exploits because you can be pretty sure that the same vulnerabilities if present on the blackberry browser will take a good while to be patched. Here is an example of a recent BB security advisory reporting a vulnerability in webkit. http://btsc.webapps....


2

Try to block the IP at firewall level, use DROP not REJECT. Monitor, if he does it again, add that IP too. They are probably scanning for an open relay or a way to use your mailserver as a relay for spam. Don't panic because these scans are quite common. You can try to look for IDS solutions to automatically block this behavior if it bothers you too much. ...


2

The security issues related to Android is mostly due to three things: most users choosing weak security settings (e.g. swipe screen locks), BlackBerry tries to resolve this by adding an application that nudge you to changing these settings lack of commitment from manufacturers to push updates for old devices, BlackBerry seems to signal that they want to ...


2

So many questions, let's tackle one-by-one. Recently, Blackberry began selling smartphones that run the Android OS. If the Android OS has so many security issues out-of-the box, then why bother paying extra for it? Because Android has many useful applications which are not otherwise available on Blackberry. Android has approximately 10x more apps, so ...


1

On iOS you can achieve it using Guided Access: Settings -> General -> Accessibility -> Guided Access -> On, Launch the app you want iPhone/iPad to be locked in, triple click Home button and follow instructions on screen.


1

The IP addresses for blocking BIS service are listed here (updated 11/10/11) http://www.blackberry.com/btsc/KB11036 Preventing these IPs from accessing the OWA servers will prevent end users from bypassing security policy via BIS.


1

From my basic searching I wasn't able to find anything specific, and I don't believe I'm likely to find anything as the details aren't released to the public. There's some basic information out there from this article (https://www.nytimes.com/2009/01/23/us/politics/23berry.html) though that lets us draw our own conclusions: "First, only a select circle of ...


Only top voted, non community-wiki answers of a minimum length are eligible