Forums
 

BB10 doesn't pass UK government's security test


Reply
 
Thread Tools Search this Thread
Old 20-03-2013, 17:21   #1
Mr. Cool
Forum Member
 
Join Date: Dec 2011
Services: Freeview, Sky, TalkTalk, Samsung Galaxy Note 10.1 and a Nexus 4.
Posts: 988
Blackberry 10 doesn't pass UK government's security test

Quote:
The Guardian reports a CESG assessment of BlackBerry Balance found it did not satisfy the requirements for "restricted" communications, the basic level of protection recommended for sensitive government information, because data leaked between the supposedly closed BYOD walled garden and the public areas of the phone.
I guess this is another blow for Blackberry if it can't be fixed with a simple update.

http://www.theregister.co.uk/2013/03...security_fail/
Mr. Cool is offline   Reply With Quote
Please sign in or register to remove this advertisement.
Old 20-03-2013, 20:28   #2
alan1302
Forum Member
 
Join Date: Jul 2008
Location: West Yorks
Services: Toshiba 42" Full HD, Humax Foxsat HDR, BT Broadband
Posts: 3,857
Quote:
Originally Posted by Mr. Cool View Post
I guess this is another blow for Blackberry if it can't be fixed with a simple update.

http://www.theregister.co.uk/2013/03...security_fail/
But it does mention in the article that they do expect it to be sorted out and no reason to think it can't be an easy fix.
alan1302 is offline   Reply With Quote
Old 20-03-2013, 20:36   #3
psionic
Forum Member
 
Join Date: May 2002
Location: Crystal Palace TX
Services: Youview, BT Infinity, O2
Posts: 17,330
It looks like Blackberry are going to sort it out. http://www.cesg.gov.uk/News/Pages/Bl...overnment.aspx
psionic is offline Follow this poster on Twitter   Reply With Quote
Old 20-03-2013, 20:47   #4
Mr. Cool
Forum Member
 
Join Date: Dec 2011
Services: Freeview, Sky, TalkTalk, Samsung Galaxy Note 10.1 and a Nexus 4.
Posts: 988
Quote:
Originally Posted by psionic View Post
It looks like Blackberry are going to sort it out. http://www.cesg.gov.uk/News/Pages/Bl...overnment.aspx
You'd think it wouldn't have shipped like that.
Mr. Cool is offline   Reply With Quote
Old 20-03-2013, 20:50   #5
alan1302
Forum Member
 
Join Date: Jul 2008
Location: West Yorks
Services: Toshiba 42" Full HD, Humax Foxsat HDR, BT Broadband
Posts: 3,857
Quote:
Originally Posted by Mr. Cool View Post
You'd think it wouldn't have shipped like that.
Governments have very specific requirements though - they would have been keener to get it out to the public first and then they know they can take time dealing with government contracts on a case by case basis
alan1302 is offline   Reply With Quote
Old 20-03-2013, 20:50   #6
psionic
Forum Member
 
Join Date: May 2002
Location: Crystal Palace TX
Services: Youview, BT Infinity, O2
Posts: 17,330
Quote:
Originally Posted by Mr. Cool View Post
You'd think it wouldn't have shipped like that.
Top execs would probably have been shot by shareholders if they even hinted at delaying it any more. They already missed the crucial holiday/Christmas market by releasing at the end of January.
psionic is offline Follow this poster on Twitter   Reply With Quote
Old 21-03-2013, 08:48   #7
Big Poy
Forum Member
 
Join Date: Oct 2010
Services: lucky people
Posts: 1,687
Quote:
Originally Posted by Mr. Cool View Post
You'd think it wouldn't have shipped like that.
Kindly cleared up here.

http://crackberry.com/UK-government-...-certification

And this:

http://crackberry.com/guardian-backt...security-story
Big Poy is offline   Reply With Quote
Old 21-03-2013, 09:10   #8
IvanIV
Forum Member
 
Join Date: May 2006
Posts: 18,880
Quote:
Originally Posted by Big Poy View Post
So well done Guardian, don't let the facts get in the way of a good story.
IvanIV is offline   Reply With Quote
Old 21-03-2013, 09:34   #9
clonmult
Forum Member
 
Join Date: Oct 2005
Location: UK
Services: V+ HD/10mb, 42" LG, N95, iPod Touch/5th Gen/Shuffle/Nano
Posts: 2,297
Our corporate mobile choice was based on government certification, and we could only go for those options that were apparently "certified".

Down the pub with a bunch of colleagues a few days back and despite our iPhones being locked, with Siri activated you could send emails .... even mine with Siri disabled activated voice control and would let me dial.

The certification process is far from perfect. But then it is a government process ...
clonmult is offline   Reply With Quote
Old 21-03-2013, 09:48   #10
Hugh_
Inactive Member
 
Join Date: Sep 2012
Services: Sky World HD, Sky FTTC, VM TiVO,VHD,60Mb,iPhone5/4s 3oneplan
Posts: 906
Quote:
Originally Posted by clonmult View Post
Our corporate mobile choice was based on government certification, and we could only go for those options that were apparently "certified".

Down the pub with a bunch of colleagues a few days back and despite our iPhones being locked, with Siri activated you could send emails .... even mine with Siri disabled activated voice control and would let me dial.

The certification process is far from perfect. But then it is a government process ...
In the settings on iPhone you can turn off Siri when the phone is locked, also turn off reply to message. I'm surprised niethrr you or any of your colleagues knew this.

No need to deactivate Siri,
Hugh_ is offline   Reply With Quote
Old 21-03-2013, 10:05   #11
IvanIV
Forum Member
 
Join Date: May 2006
Posts: 18,880
Quote:
Originally Posted by Hugh_ View Post
In the settings on iPhone you can turn off Siri when the phone is locked, also turn off reply to message. I'm surprised niethrr you or any of your colleagues knew this.

No need to deactivate Siri,
When I set up my work email via Exchange on my Lumia 920, it told me it will enforce a security policy on it that will configure and disable some options. I think this should be done similarly for other OSs that you just can't turn on options that are considered risky.
IvanIV is offline   Reply With Quote
Old 21-03-2013, 10:07   #12
IslandNiles
Forum Member
 
Join Date: Apr 2005
Services: Sky+; Virgin Media 60Mb broadband; PS3. PSN ID: islandniles
Posts: 11,675
Quote:
Originally Posted by IvanIV View Post
When I set up my work email via Exchange on my Lumia 920, it told me it will enforce a security policy on it that will configure and disable some options. I think this should be done similarly for other OSs that you just can't turn on options that are considered risky.
Exactly. The earlier poster's IT department should have disabled options that are considered a security risk.
IslandNiles is offline   Reply With Quote
Old 21-03-2013, 10:23   #13
TheBigM
Forum Member
 
Join Date: Aug 2004
Location: moon
Posts: 11,749
Quote:
Originally Posted by clonmult View Post
Our corporate mobile choice was based on government certification, and we could only go for those options that were apparently "certified".

Down the pub with a bunch of colleagues a few days back and despite our iPhones being locked, with Siri activated you could send emails .... even mine with Siri disabled activated voice control and would let me dial.

The certification process is far from perfect. But then it is a government process ...
So the native iPhone email app was certified as suitable? Because Siri can't control any other email app than the in-built one.

We use a more secure email app called Good which is wrapped in better encryption etc.
TheBigM is offline   Reply With Quote
Reply



Thread Tools Search this Thread
Search this Thread:

Advanced Search

 
Forum Jump


All times are GMT +1. The time now is 13:23.