1. DrEd14's Avatar
    Does anyone know where BB10 phones stand on this new security flaw that has been announced in the news?

    https://www.theglobeandmail.com/repo...ticle37510138/

    Posted via CB10
    01-04-18 10:52 PM
  2. BBzed10's Avatar
    We know a number of ARM cortex processors are affected (https://developer.arm.com/support/security-update).
    However I know the Z10, Z30, Passport use the Qualcomm Snapdragon Krait architecture (the other BB10 devices may also use this, just didn't check). This could mean those BB10 devices are not affected but I haven't seen any official news from Qualcomm or BlackBerry yet.
    01-05-18 12:59 AM
  3. Troy Tiscareno's Avatar
    They'll be affected because the problem is in the SoC. Other OSs are being updated to try to wall off the problem, but it isn't a "fix", it's a work-around. Every affected CPU (desktop and mobile) will always have the problem, because it's built into the hardware. The software patches are just trying to keep it from being misused. And it's unlikely that BB10 is going to be updated even to work around the issue, given its EOL status.
    01-05-18 01:32 AM
  4. gerson008's Avatar
    The affected ARM CPU are listed in https://developer.arm.com/support/security-update

    As far as I know the Classics uses ARM Cortex A5 and the Keyone uses ARM Cortex A-53, so it "may" not be affected.

    Of course, it's best if BB make a statement about their products.
    01-05-18 08:35 AM
  5. DrEd14's Avatar
    They'll be affected because the problem is in the SoC. Other OSs are being updated to try to wall off the problem, but it isn't a "fix", it's a work-around. Every affected CPU (desktop and mobile) will always have the problem, because it's built into the hardware. The software patches are just trying to keep it from being misused. And it's unlikely that BB10 is going to be updated even to work around the issue, given its EOL status.
    So to sum it up. BlackBerry 10 phones are no longer one of the most secure phones on the market?

    Posted via CB10
    01-05-18 09:08 AM
  6. danatnr's Avatar
    If all the phones affected, BB10 retains its relative security.
    01-05-18 09:36 AM
  7. Chuck Finley69's Avatar
    If all the phones affected, BB10 retains its relative security.
    As usual, through obscurity.
    01-05-18 09:41 AM
  8. DrEd14's Avatar
    If all the phones affected, BB10 retains its relative security.
    Ha, ha!!!! True!

    Posted via CB10
    01-05-18 09:52 AM
  9. Troy Tiscareno's Avatar
    If all the phones affected, BB10 retains its relative security.
    True, except for phones who are currently being supported with updates to mitigate the risks of the hardware. Their security will improve. BB10 isn't in that group (but neither are older Android phones, older iPhones, WinPhone other than 10, etc.).

    Obviously the "fault" here isn't BB10, it's the hardware, but it means that every BB10 phone is vulnerable to Spectre and always will be. Will anyone bother to try to exploit it? Probably not worth the trouble, but it's possible.

    This is one of many reasons why it's a good idea to be on an actively-developed and supported platform (with "active" support being more than paying the power and Internet bill for the BB World servers). In tech, things are always moving forward, and old tech is either constantly updated or it gets left behind.
    danatnr likes this.
    01-07-18 01:11 PM
  10. Chuck Finley69's Avatar
    True, except for phones who are currently being supported with updates to mitigate the risks of the hardware. Their security will improve. BB10 isn't in that group (but neither are older Android phones, older iPhones, WinPhone other than 10, etc.).

    Obviously the "fault" here isn't BB10, it's the hardware, but it means that every BB10 phone is vulnerable to Spectre and always will be. Will anyone bother to try to exploit it? Probably not worth the trouble, but it's possible.

    This is one of many reasons why it's a good idea to be on an actively-developed and supported platform (with "active" support being more than paying the power and Internet bill for the BB World servers). In tech, things are always moving forward, and old tech is either constantly updated or it gets left behind.
    Come on Troy. You're missing the latest benefit of an EOL OS. It's 100% secure when nonfunctional.
    01-07-18 01:39 PM
  11. thurask's Avatar
    Come on Troy. You're missing the latest benefit of an EOL OS. It's 100% secure when nonfunctional.
    If anything the BB10 browser is probably too antiquated for Spectre-based attacks to work.
    01-07-18 01:41 PM
  12. johnny_bravo72's Avatar
    If anything the BB10 browser is probably too antiquated for Spectre-based attacks to work.
    Wait... Security through obscurity is REAL???? 😸
    01-07-18 01:46 PM
  13. thurask's Avatar
    Wait... Security through obscurity is REAL???? 😸
    You can't have malware steal your password if the login form won't load.

    Spectre Chip Security flaw-reece.jpg
    01-07-18 02:08 PM
  14. johnny_bravo72's Avatar
    Holy cr*p! Now I'll never get rid of my 9900. 😝
    01-07-18 02:24 PM

Similar Threads

  1. Replies: 66
    Last Post: 01-28-18, 09:04 AM
  2. What the hell is with security update?
    By kikipintre in forum BlackBerry KEYone
    Replies: 172
    Last Post: 01-23-18, 07:01 PM
  3. Spectre / Meltdown - BB10 / QNX
    By lewis71980 in forum BlackBerry 10 OS
    Replies: 98
    Last Post: 01-14-18, 03:24 PM
  4. Are BB10 devices affected by Spectre?
    By CrackBerry Question in forum Ask a Question
    Replies: 3
    Last Post: 01-05-18, 08:37 AM
  5. Kernel-memory-leaking Intel processor design flaw
    By panopticon in forum General BlackBerry Discussion
    Replies: 9
    Last Post: 01-04-18, 10:50 AM
LINK TO POST COPIED TO CLIPBOARD