[pierssturley]

Can anyone describe tools, techniques or link to learning resources that show how easy or difficult it is to "smurf" a Blackberry BB10 OS device?

How does the hardware root of trust become pertinent in understanding this issue?

I am trying prepare an accessible briefing document to inform information assurance discussions to non-Blackberry BB10 OS users.

Am especially interested in BB10 OS hardware as if it measures up on security the second hand price of it makes it extremely attractive platform for my hypothetical project.

Also any other authoritative expertise, comments or links on the virtues or vulnerabilities of BB10 OS hardware and operating system ecosystem is very welcome. Always keen on digesting more infosec reading matter.


Posted via CB10

[thurask]

There is this overview from BlackBerry for marketing folks (PDF warning): https://help.blackberry.com/en/black...verview-en.pdf

And this whitepaper about QNX (i.e. the core of BB10; PDF warning): https://labs.mwrinfosecurity.com/***...2016-03-14.pdf

As for ways to poke around the system there's the ability to use some command line utilities from the device itself, although one is somewhat limited without root access.