BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 02-15-2005, 07:06 AM   #1 (permalink)
New Member
 
Join Date: Feb 2005
Posts: 1
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Blackberry security

Please Login to Remove!

Hi all,

please imagine the following scenario:

- user receives virus infected e-mail on its handheld device, but doesn't know about the virus

- user connects handheld to its desktop PC for synchronization

- infected mail and therefore virus gets into the corporate network and could cause damage

I don't know if this security issue is covered.

What do you mean?

Thanks, Paolo!
Offline  
Old 02-15-2005, 07:34 AM   #2 (permalink)
BBF Veteran User
 
Join Date: Aug 2004
Location: Hotwiring another Cessna
Model: OU812
Carrier: Nintendo
Posts: 3,492
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

I'm not sure this would exactly apply here... But the emails don't get transferred from your device to your PC. If you are on your corporate network, the redirector or BES will send the message to your handheld, so the infected message will already be on your corporate network once it's sent to the device.

So it's not the device you need to worry about, but the security and protection of your corporate network email system.
Offline  
Old 09-07-2005, 09:01 PM   #3 (permalink)
New Member
 
Join Date: Sep 2005
Model: Yes
Posts: 1
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

What about Pin to Pin messaging? Can you introduce viruses in your corporate network if someone sends an infected e-mail directly to you via pin messaging. You are unaware. You sync your device and infect the network.
Offline  
Old 09-07-2005, 09:33 PM   #4 (permalink)
Grumpy Moderator
 
NJBlackBerry's Avatar
 
Join Date: Aug 2004
Location: Somewhere in the swamps of Jersey
Model: iPh6
Carrier: AT&T
Posts: 27,813
Post Thanks: 33
Thanked 442 Times in 382 Posts
Default

Wow; you woke up a 7 month old thread...

OK - let's look at this: How do viruses, worms or trojans spread:

1) Attachments. The BES does not execute any code in the attachment when translating the attachment to text for the BB, so that isn't doing anything.

2) Malicious code/spyware. Doesn't get executed on the BB, since, well, it doesn't execute Windows code. So it can't spread anything.

3) Windows Exploits. Ain't happening. Will not impact a BB even if the code, which isn't executed, gets to the BB.

4) PIN messages are simply text. Viruses do not get spread via text. This isn't happening..

Sooner or later (hopefully later) someone will write a J2ME virus that will impact the BlackBerry. But all it could do is (somehow) spread to other BlackBerrys. Not via a PC. And not via text or SMS.
Offline  
Old 09-08-2005, 12:03 AM   #5 (permalink)
Thumbs Must Hurt
 
iamchrismullins's Avatar
 
Join Date: Jul 2005
Location: North Georgia..
Model: 7290
Posts: 162
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

i have to provide comment here on #1, the only current liability.

if i rcv an email on my bb and fwd/auto fwd to personal or corp email w/o ever opening or executing anything on the bb..then yes, you are correct.. the bb is not the trigger point for the virus but it can be spread via/thru the bb. bearing in mind how the message is being transmitted, medium(s/w)..
and although the virus cannot be executed via the bb it can be communicated to other vulnerable/exposed platforms/services that can execute/trigger the virus.

the question i would ask at this point is:

does @myblackberry.net or @imcingular.com A/V scan and/or filter for executables, vbs, etc..?

my opinion is that mybb.net doesn't but cingular.com does. this could be tested but i dont have the cycles for it.

thanks for clarifying NJBB..pls provide comment/correction as needed.
__________________
BB 7290@Cingular
BK/Logitech MF

Been there: PDA/Palm/Handspring/Treo, motorola, nokia, t-mobile, BB 970,975,7100, motorola BK devices
Offline  
Old 09-08-2005, 12:22 AM   #6 (permalink)
BlackBerry God
 
jibi's Avatar
 
Join Date: Oct 2004
Location: Jibi's Secret Place
Model: 8900
OS: 4.6.1.174
Carrier: AT&T
Posts: 11,310
Post Thanks: 0
Thanked 1 Time in 1 Post
Default

hmm, good point. i'll test your theory tomorrow, assuming i remember.
__________________
In the beginning the Universe was created. This has made a lot of people very angry and is widely regarded as a bad move.
Offline  
Old 09-08-2005, 01:38 PM   #7 (permalink)
Thumbs Must Hurt
 
Join Date: Sep 2005
Model: 7290
Posts: 52
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default re

@bb.net does not scan for viruses/trojans etc.

usually most ppl will find that their corporate system will either 1) strip the attachment and forward the message or 2) divert the message to Junk or Quarantined thereby "skipping" the inbox and therefore the message will never be delievered to the bb device.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.