New BlackBerry PlayBook OS 1.0 Bridge Vulnerability: article inside

[CanadianThomas]

New BlackBerry PlayBook OS 1.0 Bridge Vulnerability & App World Bug Details - BerryReview

From article:

We told you earlier today about the Intrepidous Group who gave a speech at the Infiltrate conference about “several high risk vulnerabilities with RIM’s Blackberry Playbook that allows malicious applications to access personal information, contacts, and emails from connected Blackberry phones.” We finally had a chance to chat with both of the principles, Zach Lanier & Ben Nell, working on these vulnerabilities from Intrepidous Group. Both of them have a background in mobile penetration testing and security research and decided to step out of their usual iOS/Android box and test out the PlayBook.


Well my friends, any thoughts?

[Dapper37]

Its an ongoing game, on the bright side the to smart guys are giving PB some respect.

[bbpandy]

Yea I read that. It only works on 1.x OS & is not an easy bug to exploit. Making it almost imposible for someone to have it put on their PB without their knowledge.

In fact the chances of it ever being used is so small that RIM isn't even releasing a security update

[ffejrobins30]

Not even a little bit worried...

[Nihil_2005]

After reading this I wiped everything and reinstalled the OS. I guess I got a little paranoid since I just got my PB this past week and I've been using Bridge.

[Superfly_FR]

"no known exploits and risk is mitigated by the fact that a user would need to install and run a malicious application after initiating a BlackBerry Bridge connection with their BlackBerry smartphone"
Well, this is no big deal ... anyway, fixed in 2.0.

@Nihil_2005: unless you side/downloaded a very special app, there's no risk for you.