Thread: BlackBerry Browser Certificate Vulnerability Brought To Light

weres da leak for the 8350 LoL

Did anyone get any information from VZW?

Originally Posted by TemperamentalMan

Did anyone get any information from VZW?

I called and they were clueless. Someone from Tech support is supposed to call me back tomorrow...if this actually happens I will post the findings.

Originally Posted by jordan89

I called and they were clueless. Someone from Tech support is supposed to call me back tomorrow...if this actually happens I will post the findings.

Thanks Jordan for the info. Look forward towards your findings.

I feel safe with my 5.0

Ok, so I woke up today and waited for a call which never came. I called VZW back and spoke with a VZW tech rep on the RIM side...he said that they are aware of this problem and are working on getting it corrected( I asked if this ment that they are close to an Official OS relesase and they had no comment on this)...the rep also proceeded to advise me that we should not use our blackberries to access "sensitive information"( I proceeded to advise him this is bogus seeing as VZW alone has account sensitive apps that they offer in the app zone i.e mobile banking & myverizon). Pretty much all I got was a run around and no information about what was actually being done to fix this problem. I did ask about 5.0..he said that it is not as vunerable as the 4.7 but since it is not official there is still some slips in the browsers security.

Originally Posted by jordan89

Ok, so I woke up today and waited for a call which never came. I called VZW back and spoke with a VZW tech rep on the RIM side...he said that they are aware of this problem and are working on getting it corrected( I asked if this ment that they are close to an Official OS relesase and they had no comment on this)...the rep also proceeded to advise me that we should not use our blackberries to access "sensitive information"( I proceeded to advise him this is bogus seeing as VZW alone has account sensitive apps that they offer in the app zone i.e mobile banking & myverizon). Pretty much all I got was a run around and no information about what was actually being done to fix this problem. I did ask about 5.0..he said that it is not as vunerable as the 4.7 but since it is not official there is still some slips in the browsers security.

I would have been surprised if they gave you an actual answer.

Originally Posted by sunkast

I would have been surprised if they gave you an actual answer.

Lol I know. I worked for VZW customer service and anytime someone would call in with problems with their blackberry I would refer them to this site...well that got me in trouble haha for some reason they like to keep everything a big secret.

1 would think that RIM would skip the usual carrier bs and somehow push this out as an ota update. I hate to say it but this is 1 area in which Apples way is better; all updates are pushed through iTunes and I'm sure the various carriers have no say so.

Wirelessly posted

Originally Posted by cj100570

1 would think that RIM would skip the usual carrier bs and somehow push this out as an ota update. I hate to say it but this is 1 area in which Apples way is better; all updates are pushed through iTunes and I'm sure the various carriers have no say so.

Agreed. RIM needs to man up and just push out the necessary updates.

Just to play devil's advocate for a bit... What do you think would happen if a RIM or a carrier released an OS that had some sort of bug that didn't work well with a carrier's network. Maybe resulting in poor signal or no MMS... I would think the backlash would be bad and everyone saying why did they release a crappy OS. It's the same thing we've seen with the OS 5.0 leaks.

Originally Posted by sunkast

Just to play devil's advocate for a bit... What do you think would happen if a RIM or a carrier released an OS that had some sort of bug that didn't work well with a carrier's network. Maybe resulting in poor signal or no MMS... I would think the backlash would be bad and everyone saying why did they release a crappy OS. It's the same thing we've seen with the OS 5.0 leaks.

Could there be another solution other than releasing an OS?

I wouldn't want RIM to release OS's blindly but some sort of security update would be nice...but maybe not possible?

Wirelessly posted

I think what bothers me is statement from RIM/VZW that until there is a fix we should not use our BB for sensitive data. For people on BES isn't all their data "sensitive"??? That is an insane response IMO. That to me is like saying here is a brand new PC, just don't install any software or use the web.

Originally Posted by sunkast

Just to play devil's advocate for a bit... What do you think would happen if a RIM or a carrier released an OS that had some sort of bug that didn't work well with a carrier's network. Maybe resulting in poor signal or no MMS... I would think the backlash would be bad and everyone saying why did they release a crappy OS. It's the same thing we've seen with the OS 5.0 leaks.

surely you jest? the leaks are unreleased/unsupported. we're discussing a browser vulnerability! all OS' ship with some sort of bug. it's just a matter of how serious it is. hell, the .75 Storm release is a classic example. but since RIM makes the OS for the phone anyway, they already know the correct settings, optimizations, etc. for the networks. As I stated earlier, somehow Apple manages to update the iPhone without carrier approval or bringing down the networks the iPhone is on. carriers shouldn't be the arbiters of what OS should or shouldn't be on a phone that's on their network. as long as the phone works within the parameters of the networks capabilities the carriers should keep their grubby little paws out of OS related upgrades, updates, etc.

Originally Posted by TemperamentalMan

Wirelessly posted

I think what bothers me is statement from RIM/VZW that until there is a fix we should not use our BB for sensitive data. For people on BES isn't all their data "sensitive"??? That is an insane response IMO. That to me is like saying here is a brand new PC, just don't install any software or use the web.

Agreed. Someone needs to do something. Because people can't just stop using their blackberries.