Feeds

Handset makers, the criminal's friend

See no evil, speak no evil

Beginner's guide to SSL certificates

Don't care to share

Network operators probably wouldn't share if they weren't legally obliged to, and compensated for their costs. But while a network operator will be subject to national laws, a handset manufacturer will likely be located outside such a jurisdiction.

International agreements cover national security issues, and you can be sure that the more secret services have tools at their disposal. But that's no use to a cop trying to work out the identity of the corpse he is putting into the body bag.

The manufacturers don't want to share security models, or codes, for fear that once shared they're unlikely to stay secret for long. Miscreants getting hold of such codes might be bad publicity, for starters. But manufacturers are even more worried about what their competitors will think.

There are no standards for device security. One handset might yield to simple command, while another will stay secure against any attack: legally authorized or otherwise. The industry is very reticent to talk about specific models, but we understand that the police Phone Examination Units particularly dread receiving handsets from Sony Ericsson.

A few years ago the Metropolitan Police tried to set up a working group with the manufacturers, to define some common-access standards that would allow legitimate law enforcement access to mobile-phone handsets. With no motivation and no legal threats to make against them, the manufacturers saw no advantage in taking part and the project was stalled.

SIMs remain secure, within a legal framework that allows law enforcement to break that security. But until the same thing can be applied to mobile phones, the manufacturers will create more secure systems. The UK taxpayer, meanwhile, will continue to fund police forces and private companies in order to break that security, to the enormous frustration of everyone involved.®

Remote control for virtualized desktops

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Top 5 reasons to deploy VMware with Tegile
Data demand and the rise of virtualization is challenging IT teams to deliver storage performance, scalability and capacity that can keep up, while maximizing efficiency.
Mitigating web security risk with SSL certificates
Web-based systems are essential tools for running business processes and delivering services to customers.