Feeds

Homebrew Pre apps find easy install

We've got ourselves a security hole, Rubber Duck

Intelligent flash storage arrays

Developers unwilling to wait for the Mojo SDK for Palm's Pre, or to be bound by its restrictions, have discovered that unsigned applications can be installed using a specially-formatted e-mail rather than any mucking about with unlocking the handset.

The process, as explained at Pre Central, simply requires an e-mail containing a link to an ".ilk" file containing the application.

Installing the file any other way falls foul of the Pre's requirement for native applications to be signed, but downloading from a link in an e-mail message bypasses that security check and allows the installation of anything the user desires.

Palm is being pretty good about homebrew applications at the moment. Though officially only supporting the WebOS-extended AJAX platform - the company has politely asked homebrew sites to remove content about tethering, for fear of offending Sprint - Palm obviously sees a small-scale homebrew market as no threat to its business model.

Native applications are allowed, but only by working with Palm, and only when digitally signed by the company. Until recently, the only way to bypass that security check was to unlock the device, but it now seems receiving the link via e-mail works equally well.

The more observant reader will have noticed that this is a security issue you could easily drive a convoy through. Malware could be distributed this way, even though a server would be needed from which the malware could be downloaded, so Palm would be remiss if it didn't patch this pretty quickly.

But, for the moment, Pre owners can happily install the demonstration application and enjoy the unauthorised apps without unlocking their handset. Until the next patch from Palm, at least. ®

Remote control for virtualized desktops

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Seattle children’s accelerates Citrix login times by 500% with cross-tier insight
Seattle Children’s is a leading research hospital with a large and growing Citrix XenDesktop deployment. See how they used ExtraHop to accelerate launch times.
10 threats to successful enterprise endpoint backup
10 threats to a successful backup including issues with BYOD, slow backups and ineffective security.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?