03-13-15 03:27 AM
227 12345 ...
tools
  1. Deitzanova's Avatar
    The only thing BlackBerry brags about is security and this doesn't help them one bit.

    Posted via CB10
    12-22-14 03:14 AM
  2. itzJustMeh's Avatar
    Don't get too disheartened. There are still a lot of great people at BlackBerry. You're just up against the bureaucracy of a typical large corporation. You have our support, and I would hope that things will work out in the end.

    Z30STA100-5/10.3.1.1154
    There are indeed, they always help if you contact them directly. But it just looks like there isn't enough people do to all that needs to be done. I hope Chen will address this, because if native devs leave, BB10 will start to seriously suck.
    12-22-14 03:40 AM
  3. serbanescu's Avatar
    The only lack of respect for developers came from the guy who was handing out free codes for their paid apps without permission. And yes that's the OP. Sorry to break up everyone's praise fest but your poster child is far from innocent in this whole thing.

    Posted via CB10
    I haven't frequented Crackberry later and I was not aware about this.

    Could someone please explain what is all about? (I am talking about unapproved distribution of free codes for paid apps)
    12-22-14 04:58 AM
  4. Magnetic_dud's Avatar
    There was a bug that allowed anyone to download apps for free using fake codes.
    For example my useless app was downloaded 7 times on 14 november using a bogus redeem code.
    Now bb fixed this bug

    But, I don't see this as "stolen" app, as I'm 100% sure that who redeemed it wouldn't have bought it in the first place - so it's not a lost sale

    I see "stolen" money that blackberry doesn't give xsacha money for the totally legal sachesi app while there are a lot of scam apps in the market (app for snapchat, the $50 fake vpn link, the $10 fake nfc, and so on)
    SirJes, moody, Pcmx and 9 others like this.
    12-22-14 05:08 AM
  5. SirJes's Avatar
    There was a bug that allowed anyone to download apps for free using fake codes.
    For example my useless app was downloaded 7 times on 14 november using a bogus redeem code.
    Now bb fixed this bug

    But, I don't see this as "stolen" app, as I'm 100% sure that who redeemed it wouldn't have bought it in the first place - so it's not a lost sale

    I see "stolen" money that blackberry doesn't give xsacha money for the totally legal sachesi app while there are a lot of scam apps in the market (app for snapchat, the $50 fake vpn link, the $10 fake nfc, and so on)
    Exactly, they only decided to fix it started getting used. Sometimes that's the only way.

    Posted via CB10
    anon(9208252), moody and 00stryder like this.
    12-22-14 05:30 AM
  6. geraham's Avatar
    thank you for the support
    12-22-14 05:49 AM
  7. harshadpatel's Avatar
    Hope this gets fixed
    12-22-14 06:17 AM
  8. LostOnThePianoRoll's Avatar
    With the BlackBerry world exploit you could literally take BlackBerry down in 1 day.
    Just add a new update for bbm for example with a bar file of your making that says "BlackBerry world has been hacked" in red font..

    And watch as BlackBerry goes down the drain... they should be paying YOU money to keep your mouth shut if you ask me

    Posted via CB10
    12-22-14 06:36 AM
  9. kbz1960's Avatar
    They should hiring you, not silencing you!
    12-22-14 06:46 AM
  10. anon(9208252)'s Avatar
    They should hiring you, not silencing you!
    They couldn't handle all the knowledge.
    kbz1960, moody and Soul_Est like this.
    12-22-14 06:51 AM
  11. joeragan's Avatar
    So, should non-developers worry about the said security vulnerabilities?


    ... Z30STA100-2/10.3.1.1154 ...
    flyingsolid likes this.
    12-22-14 06:58 AM
  12. ArmedHitman's Avatar
    Xsacha, so they are not actively closing these holes? Or have some of these holes been fixed at all? Or have they been fixed but you found a workaround?

    This seriously damages BlackBerry's reputation as a company who values security beyond anything else. This would also would be very damaging if word would get out as they are only just stabilising in terms of in the market and their balance sheet. I would normally say get the media involved but this would hurt the company, a movement needs to be formed and getting this noticed by BBRY quietly.
    12-22-14 07:04 AM
  13. xsacha's Avatar
    It's so when I report something and months later it still works and there's no response on their side, I'm not allowed to show things like this:
    http://i.imgur.com/uDvtTjU.png
    http://i.imgur.com/PflYHG6.png
    These two look like they were fixed today. I haven't had any contact though.

    Edit: I wonder if I should just put my findings in forum threads to get them fixed.

    Xsacha, so they are not actively closing these holes? Or have some of these holes been fixed at all? Or have they been fixed but you found a workaround?
    Well, via the officials channels they were not actively closing them at all. I spent a lot of time tracking down individuals within the company who could actually get the ball rolling. I was given reports they were fixed when most of them still worked. Some required a workaround but the workaround was obvious such as adding something that is normally there that just removed in my initial report for simplification. Some just weren't fixed at all. I had tried to get status updates to see if/when they are being fixed and was told I need to sign an NDA now to talk to them.
    Last edited by xsacha; 12-22-14 at 07:21 AM.
    12-22-14 07:10 AM
  14. massiepas68's Avatar
    That really sucks, meaning No reactionaire given by bb. Tanks anyway for all your efforts! Greetzzz from Holland👍👍👍
    MBrettH likes this.
    12-22-14 07:15 AM
  15. nhanken's Avatar
    Whatever happens, please don't lose faith in what you've done for all of us and the BlackBerry community!


    These two look like they were fixed today. I haven't had any contact though.


    Well, via the officials channels they were not actively closing them at all. I spent a lot of time tracking down individuals within the company who could actually get the ball rolling. I was given reports they were fixed when most of them still worked. Some required a workaround but the workaround was obvious such as adding something that is normally there that just removed in my initial report for simplification. Some just weren't fixed at all.


    Once you go black, you can't turn back! Posted via CB10
    Last edited by nhanken; 12-23-14 at 04:54 AM.
    12-22-14 07:17 AM
  16. anon(9169048)'s Avatar
    Is this the money paid for the app or the donations collected on the blog? Either way I donated that money to Sacha not BlackBerry, they have no right to it. How do I go about getting it back and making sure it goes to the person it was intended for? This is out and out theft and I'm PISSED!
    12-22-14 07:20 AM
  17. xsacha's Avatar
    Is this the money paid for the app or the donations collected on the blog? Either way I donated that money to Sacha not BlackBerry, they have no right to it. How do I go about getting it back and making sure it goes to the person it was intended for? This is out and out theft and I'm PISSED!
    Money paid for the app.
    You can request a refund and they will have to honour it I believe.
    12-22-14 07:22 AM
  18. anon(9169048)'s Avatar
    Will do so today. Please let us know where we can donate further without BlackBerry getting their paws on it.
    kbz1960, Skyforever and moody like this.
    12-22-14 07:35 AM
  19. ArmedHitman's Avatar
    These two look like they were fixed today. I haven't had any contact though.

    Edit: I wonder if I should just put my findings in forum threads to get them fixed.


    Well, via the officials channels they were not actively closing them at all. I spent a lot of time tracking down individuals within the company who could actually get the ball rolling. I was given reports they were fixed when most of them still worked. Some required a workaround but the workaround was obvious such as adding something that is normally there that just removed in my initial report for simplification. Some just weren't fixed at all. I had tried to get status updates to see if/when they are being fixed and was told I need to sign an NDA now to talk to them.
    This is showing how much people they've cut loose, I have a feeling people there are not specialised very well in security left at the firm. Someone want to get a hashtag rolling? Or have a contact with a bigger/wider audience website which can shed some light on this. Not so much it ends up on breaking news...

    Have you tried tweeting BBRY? Show them the pics. Or tweet John himself if he's on there.
    rajeevluv likes this.
    12-22-14 07:40 AM
  20. SirJes's Avatar
    Things only get done when it's put in view of the public, still don't understand why people are mad, the 3 exploits he went public with got fixed because it went public.


    He's literally helping everyone.

    Posted via CB10
    12-22-14 07:44 AM
  21. guygardner73's Avatar
    Really bad advice. He'd be tainted afterwards and may not be able to continue his past BlackBerry work.
    Any NDA would need to be checked out by a tech savvy lawyer.
    Depends on the terms of the NDA. Typically, these are to prevent internal information being released. Specifically, information given by BlackBerry to someone. They would have to sign an NDA to declare that they weren't going to tell anyone else. I'm unaware that BlackBerry ever told Sacha anything officially and as for his past BlackBerry work, I think an offer of employment would be more lucrative for him rather than catering to us nutters. Much as we appreciate it though. As you say, a lawyer would be able to give a better picture.

    PassportSQW100-1/10.3.0.1418 O2 UK
    12-22-14 08:09 AM
  22. Pcmx's Avatar
    xSacha: As others have mentioned nobody likes to hear from say the grammar police, especially if that's something they hold to high regard even if it needs to be corrected. BlackBerry being in the public view should be able to handle it. I thank you kindly for bringing enhanced usability to my device and for promoting and improving of your software.

    BlackBerry: Not everybody likes to be told what they should be doing with their device; enterprise, consumer, or else wise. I chose mine almost solely for tinkering, with a little bit of communication. I'm a walking advertisement and people become more and more impressed with what's attractive - security and the freedom to explore open source. I've assisted many, non-enterprise, in making the switch to your platform and with xSacha's software I have brought the extra functionality which I and they value to them as well. Keep in mind when improving security, the end user may not want to see decontenting ala Flash..

    I thank both for the device and it's features as they exist today and anticipate the best of both worlds in resolving communications and any persisting issues.
    12-22-14 08:53 AM
  23. NtotheK's Avatar
    I've had to sign NDA for everything from Retail to restaurants and hotels. Just the way of the world as someone said. Thank you for all your hard work! I can understand why BlackBerry asked you too. They just need to cover their backside and some level of commitment from you. Thanks again!!

    Posted via CB10
    12-22-14 09:21 AM
  24. D3C0D3R's Avatar
    Just read the entire thread and interesting read...

    Sacha, you've got my support in this and i seriously hope BlackBerry gets their act together and gets over themselves, the way they're acting is just ridiculous.

    To anyone in the community, if there's anything we can do to help this, like petitions, just post it here or flame up another thread on the boards and you've got my support!

    Praise be unto our Lord Squircle | Passport SQW100-1/10.3.0.1418
    12-22-14 09:23 AM
  25. kevets's Avatar
    Who's this guy? What would he possibly know about BB10 security measures and the inner workings of the OS that we all don't know already? Oh wait no he's the one with the software updating all our phones now. Maybe you should give him a listen, guys!

    EDIT:
    OK maybe they were listening they just weren't allowed to say that they were? /tinfoil
    Last edited by kevets; 12-22-14 at 10:13 AM.
    12-22-14 09:32 AM
227 12345 ...

Similar Threads

  1. Whos excited for the Blackberry Classic Bronze edition?
    By 7onZ in forum BlackBerry Classic
    Replies: 28
    Last Post: 03-08-15, 12:28 PM
  2. Replies: 5
    Last Post: 01-03-15, 03:54 PM
  3. Is there a BlackBerry 9981 hybrid?
    By CrackBerry Question in forum Ask a Question
    Replies: 1
    Last Post: 12-24-14, 09:38 PM
  4. Why is a suitable charge for my BlackBerry Z10?
    By simplykartik07 in forum Ask a Question
    Replies: 6
    Last Post: 12-22-14, 10:14 PM
  5. Gta 3 or vice city for blackberry Q10?
    By Gabriel Bohorquez in forum BlackBerry 10 Games
    Replies: 1
    Last Post: 12-22-14, 10:55 AM
LINK TO POST COPIED TO CLIPBOARD