ID: IRCNE2012011377
Date: 2012-01-14
According to "zdnet", Security researchers at the Intrepidus Group have found a way to listen in on the connection between the BlackBerry PlayBook tablet and a BlackBerry handset, a significant weakness that exposes corporate e-mail to malicious snoops.
Dennis Fisher explain that the weakness enables an attacker to listen in on the connection between the tablet and a BlackBerry handset. That connection, which is done via Bluetooth in the company’s Bridge application, is designed to allow users to access their corporate email, calendar and other data on the tablet.
In addition to the Bridge vulnerability, Fisher reports that the security team also found that the file names in the BlackBerry app store can be predictable, allowing a user to simply increment the file name to a desired number and download whatever app she chose.
- 2