backtop


Print

Much like Apple, RIM was quickly outwitted by hackers

When an Apple, Inc. (AAPL) iPhone gets hacked, it's no big surprise.  When a Google Inc. (GOOG) Android smartphone gets turned into a slave in a massive botnet, it's an average day on the market.  But when Canadian smartphone maker Research In Motion, Ltd. (TSE:RIM) gets hacked, it's major news, as the devicemaker has built a reputation on underlying rock-solid security.

Questions about the security of the company's recent acquired QNX operating system were raised when a trio of hackers released a tool called Dingleberry, which gave root access to RIM's first QNX tablet, the PlayBook.  The tool allowed users to jailbreak their device -- a process of granting yourself administrative rights on legally purchased devices through atraditional means, as authorized by the Library of Congress's Summer 2010 amendments to the Digital Millennium Copyright Act [PDF] (DMCA).

RIM yesterday confirmed the vulnerability in a Knowledge Base (KB) post, which revealed its origin to be a weakness in QNX's file sharing system.  When the OS interacts with the company's BlackBerry Desktop Software users can manipulate it to achieve an escalation of privileges.

The company quickly pushed a fix down the pipe to users.

But as Apple has unpleasantly experienced in the past, the hackers were one step ahead.  They had already updated the jailbreak tool to still work post-patch.  Hacker "Chris Wade" writes on Twitter:

all firmware are currently jailbreakable

While that claim has not been confirmed definitively, if it's true it looks like it's back to the drawing board for RIM, and more embarrassment from the company who was traditionally a leader in security.

Sources: RIM [Patch Press Release], RIM [KB Security Advisory], Twitter-Chris Wade





"Well, there may be a reason why they call them 'Mac' trucks! Windows machines will not be trucks." -- Microsoft CEO Steve Ballmer






Most Popular ArticlesSony’s 4K OLED Smart TV
August 13, 2017, 6:20 AM
SoundCloud survives the budge scare
August 12, 2017, 6:38 AM
Ticwatch E and S on Kickstarter
August 11, 2017, 6:00 AM
MSI GL62M 7REX Gaming Laptop
August 14, 2017, 6:00 AM
HTC U11 – Newly Certified for Bluetooth 5.1
August 14, 2017, 6:58 AM

Latest Blog Posts
Xiaomi Mi 6 Smartphone.
Nenfort Golit - Aug 8, 2017, 6:00 AM
ASUS 23-inch Monitor
Nenfort Golit - Aug 4, 2017, 6:00 AM






botimage
Copyright 2017 DailyTech LLC. - RSS Feed | Advertise | About Us | Ethics | FAQ | Terms, Conditions & Privacy Information | Kristopher Kubicki