RIM’s Playbook Gets Jailbroken

Three hackers say they have taken advantage of a vulnerability in Research In Motion’s PlayBook tablet to gain root access to the device, a claim that could damage the BlackBerry maker’s stellar reputation for security.

Root access means a user has permission to change any file or program on a device and can control hardware functions.

In a response to questions concerning the issue, RIM said it is investigating the claim, and if a “jailbreak” is confirmed will release a patch to plug the hole.

The three hackers – who identify themselves as xpvqs, neuralic and Chris Wade – plan to release their data within a week as a tool called DingleBerry.

Apple’s iOS and Google’s Android operating systems are frequently attacked by users who want to run programs that have not been authorized by the manufacturers, but breaches of RIM’s software are more rare.

The PlayBook runs on a different operating system than RIM’s current BlackBerry smartphones. However, the QNX system will be incorporated into its smartphones starting next year.

Source…

Google, which last week created a bit of chaos with the launch of a Gmail application for Apple iOS devices, has decided to put out discontinue its Gmail application for the BlackBerry.

As of Nov. 22, Google will no longer offer technical support to users of the application, nor will it allow people to download it anymore, the company wrote in a blog post.

However, people will be able to continue using it, although Google will put its development efforts on the version of the application for mobile browsers, available at gmail.com.

Source…

30% Of BlackBerry Users Want Out

The BlackBerry smartphone and its maker, Research in Motion, were in serious trouble even before last week’s global service disruption.

More than 30% of BlackBerry users in large companies said in September, a month before the outage, that they were looking to use a different smartphone device in 2012, according to a survey of 243 smartphone users in companies with more than 10,000 workers by Enterprise Management Associates (EMA).

“With last week’s outage, I suspect the 30% number is even higher,” said Steven Brasen, the EMA analyst who conducted the survey. “User satisfaction with BlackBerry is by far the lowest of smartphones. A huge number are dissatisfied.”

Brasen said the survey found that 11% of BlackBerry users in large companies are “completely dissastisfied” with the device, while only 2% of iPhone users and 0% of Android users are completely dissatisfied with their smartphones.

Brasen said the opinions of end users are becoming very important to IT executives.

Source…

RIM’s Troubles May Not Be Over

Law firms in the United States and Canada are considering possible consumer lawsuits against Research In Motion Ltd for last week’s BlackBerry outages, which for three days crippled email and messaging for tens of millions of users around the world.

Consumer lawyers say they are investigating whether customers have common claims against the BlackBerry manufacturer and might be able to band together in a single lawsuit.

While the outage did not rise to the level of seriousness comparable to a dangerous medication or tainted food, it inconvenienced and angered customers. Frustrated BlackBerry users, turning to blogs, message boards, Twitter and Facebook, complained about losing important emails and missing meetings last week.

Law firms are considering breach-of-contract or consumer-fraud claims, attorneys said.

A breach-of-contract claim could argue the company failed in its obligations to provide service and could include carriers for BlackBerry service as additional defendants, said attorneys exploring litigation against RIM.

Source…

Tool Created To Hack BlackBerry Passwords

A Russian security firm has upgraded a phone-password cracking software with the ability to figure out the master device password for Research in Motion’s BlackBerry devices.

Elcomsoft said on Thursday that before it developed the product, it was believed that there was no way to uncover a device password on a BlackBerry smartphone or PlayBook tablet. BlackBerry smartphones are configured to wipe all data on the phone if a password is typed incorrectly 10 times in a row, the company said.

Elcomsoft said it figured a way around the problem using a BlackBerry’s removable media card, but only if a user has configured their smartphone in a specific way. In order for Elcomsoft’s software to be successful, a user must have enabled the feature to encrypt data on the media card.

The feature is disabled by default, but Elcomsoft said around 30% of BlackBerry users have it enabled for extra security.

The company’s software can then analyze the encrypted media card and use a brute-force method to figure out a password, which involves trying millions of possible password combinations per second until one works.

Elcomsoft said it can recover a seven-character password in less than an hour if the password is all lower-case or all capital letters. The software does not need access to the actual BlackBerry device but just the encrypted media card.

Read More..

BlackBerry Falls Behind In Workplace

More workers use iPhone and Android smartphones combined than BlackBerry devices, according to a survey of 1,681 U.S.-based workers released today by Forrester Research.

That finding highlights what many have known for a while about the entrenched workplace smartphone veteran: the BlackBerry faces trouble from its competitors.

The BlackBerry, made by Research in Motion, still leads among U.S. workers, with 42%, the survey said, with Apple’s iPhone accounting for 22% and Android devices, 26%.

The survey also found that nearly half, or 48% of the group, said that they chose the primary smartphone used for their work without considering what their company supports. Only 29% said they chose the smartphone from a list of phones the company supports, while 23% said they had no choice in the matter.

Often, corporate IT shops will choose BlackBerry smartphones when requiring a worker to use a specific smartphone, partly because of the perceived security benefits, many analysts, including at Forrester, have found. The growth in Android phones and the iPhone — many of them brought to workplaces by workers independently — are forcing IT shops to rethink that decision, however.

Ted Schadler, a Forrester analyst, said the survey points to two major trends. The first is that more workers than ever are bringing consumer-focused devices, such as Android and iPhone smartphones, to use for work, and more companies are supporting those devices.

Read More…..

Adobe Patches Security Holes in Flash

Adobe has released a security update for Flash Player in order to address several critical vulnerabilities, including one that is being exploited in the wild.

The Flash Player 10.3.183.10 for Windows, Mac and Linux, and Flash Player 10.3.186.7 for Android, contain patches for six security flaws.

One of them is a cross-site scripting (XSS) weakness that can be exploited to execute rogue actions on behalf of web sites or webmail providers if victims click on maliciously-crafted links.

“There are reports that this issue is being exploited in the wild in active targeted attacks designed to trick the user into clicking on a malicious link delivered in an email message,” Adobe warns in its security advisory.

XSS vulnerabilities are the result of improper user input validation and allow attackers to execute rogue code in the context of the current web site. For example, they can be leveraged to extract session cookies or load rogue forms into legitimate pages, which makes for very credible phishing attacks.

Adobe credits Google for reporting this cross-site scripting vulnerability, which is identified as CVE-2011-2444. This means it might have been detected in attacks against Gmail users.

Two other patched vulnerabilities allow for arbitrary code execution and are located in the AVM stack. One of them can also lead to a denial of service condition. Two remote code execution logic errors and a Flash Player security control bypass have also been addressed.

Users should deploy the new update as soon as possible because browser plug-ins like Java, Adobe Reader or Flash Player are amongst the most attacked pieces of software one can have on a computer. However, unlike Adobe Reader X (10.0) which features sandboxing technology, Flash Player doesn’t have any anti-exploitation mechanism built-in.

Read More……

Flash Player 11 Launched With 3D Gaming

Adobe Systems announced Flash Player 11 and Adobe Air 3 software Wednesday to assist developers in building more sophisticated applications with dozens of new features across smartphones and tablets as well as desktop computers.

The releases are Adobe’s biggest in two years, and will be available free of charge in early October, said Anup Murarka, Adobe’s director of product marketing. The related tools, Flash Builder and Flex, will support new features in Flash Player 11 and Adobe Air 3 by the end of the year.

The releases will enable delivery of 2D and 3D games over the Internet to various devices, Murarka said. Developers of enterprise applications will also find the 3D capabilities popular for data-centric apps. Enterprises, for example, will be able to build application dashboards to “visualize complex data sets” with 3D images, he said.

Developers will also be able to use the tools to more deeply integrate business software like Excel and Outlook in devices and to access hardware programming interfaces for functions such as Near-Field Communication being used more widely in smartphones, Murarka said.

The new versions will also help developers build more secure applications with the ability to leverage cryptographically secure random number generation, he said.

Read More…..

RIM’s Woes Continue

PlayBook shipments dropped in half for Research In Motion during its second quarter, which also saw revenue continue its steep decline.

RIM shipped just 200,000 PlayBooks in the second quarter, down from 500,000 last quarter, when it started offering the tablet device.

Revenue was US$4.2 billion, hitting the low end of the company’s expectation and down 10 percent from the same quarter last year. Analysts polled by Thomson Financial expected $4.47 billion.

RIM’s net income was $329 million, or $0.63 per share. Adjusted net income was $419 million, or $0.80 per share. Analysts were expecting better: Those polled by Thomson predicted $0.87 per share.

RIM shipped 10.6 million smartphones during the second quarter. In June, RIM warned that the second quarter might be weak because of delays in shipping new phones. The delays meant RIM would miss the back-to-school sales period, negatively impacting sales, it said at the time.

Executives who spoke during a conference call to discuss the results put a positive spin on phone sales, however. The company only began launching phones running the new BlackBerry 7 software within the past few weeks, and so far it’s the “largest and most successful launch in our history,” Mike Lazaridis, co-CEO of RIM, said during the call.

Read More…

Shareholder Group Demands RIM Shake-up

An activist shareholder in Research In Motion said on Tuesday it wants the struggling BlackBerry maker to seriously ponder selling itself or spinning off its patent portfolio, sending RIM’s share price higher.

Jaguar Financial Corp said it wants the Canadian company’s board to take control from co-Chief Executives Mike Lazaridis and Jim Balsillie and for up to five of RIM’s independent board members to explore options to maximize shareholder value.

RIM shares were up 1.3 percent at midday Tuesday at $30.52 on the Nasdaq and gained 2.3 percent to C$30.26 on the Toronto Stock Exchange. Both markets were down sharply
overall. RIM shares have lost almost half their value since the start of the year.

“Our call is for (RIM’s board) to take action; no more study, take action. Take action now, before it’s too late,” Jaguar Chief Executive Vic Alboini said in an interview.

Alboini said Jaguar has talked to a select group of shareholders and received broadly positive feedback for its plan.

“We haven’t found one who wasn’t supportive,” he said. “We haven’t found any opposition.”

Read More…

« Previous Page — Next Page »