full-disclosure - KeySoft (BrailleNote Apex) 9.1 Fixes Gaping Security Hole

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <6B0958AC-0E2A-44CB-AEC9-133585C5BC08@sabahattin-gucukoglu.com>
Date: Fri, 11 Feb 2011 03:57:36 +0000
From: Sabahattin Gucukoglu <mail@...ahattin-gucukoglu.com>
To: full-disclosure@...ts.grok.org.uk
Subject: KeySoft (BrailleNote Apex) 9.1 Fixes Gaping
	Security Hole

>>From the release notes:

> Password protected login
> BrailleNote Apex can be password protected.  In case you forget your password, you can contact our Technical Support services to obtain a password unlock file. User identification and device serial number will be required. For security purposes, ActiveSync is disabled at this stage.)
> 
> Improved security
> Access to communication protocols has been protected to prevent unwanted access to file system. When password protection is activated, ActiveSync is disabled. 
> 

I'll leave the reader to draw his/her own conclusions concerning the "Password protected login" feature, pausing only to doubt its usefulness in protecting my data when it doesn't use any encryption, but it's nice to know they've *finally* addressed the telnet/FTP problem.  And just in time for a shiny new release, too.  I'll be the most handsome web surfer at the local cafe.

Cheers,
Sabahattin

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/