[Invictus0]

No one serious about their security should be using Facebook or WhatsApp anyway. No amount of updates or patching can protect users from their own carelessness.

It would be Ike worrying about the quality of the locks on your doors while giving your keys to known burglars.

Posted with my trusty Z10

I think you mean privacy, you aren't really opening yourself up to inherent security risks by using the latest versions of those apps more than you would any other app.

[jackcarr]

Just saw this in another thread. It shows a May update coming to the Motion! What does this mean? This sounds like great news! Why would the K1 not receive it? What is going on folks? Attachment 444431

My Motion got that update. It was small. But KEYone BE didn't get it.

[IceCreamPlz]

I think you mean privacy, you aren't really opening yourself up to inherent security risks by using the latest versions of those apps more than you would any other app.

Nope. He means security. And he's right.

[bb10adopter111]

I think you mean privacy, you aren't really opening yourself up to inherent security risks by using the latest versions of those apps more than you would any other app.

Privacy and security are very closely linked, as more than 80% of data breaches include an element of social engineering. That's why, for example, we advise clients never to allow employees to use their work email or phone numbers for social networking, including LinkedIn, WhatsApp, Skype, etc.

If I can find your personal information on LinkedIn or Facebook (including birth date, real phone number, email, city, etc.) it simplifies the work of compromising you by a factor of 100.

So, if targeted attacks are in your threat profile, including doxxing, jealous or vindictive exes, burglars, con artists, cyber criminals, political opponents, authoritarian governments, government or commercial surveillance, etc. there is almost no difference between privacy and security.

Posted with my trusty Z10

[Invictus0]

Privacy and security are very closely linked, as more than 80% of data breaches include an element of social engineering. That's why, for example, we advise clients never to allow employees to use their work email or phone numbers for social networking, including LinkedIn, WhatsApp, Skype, etc.

If I can find your personal information on LinkedIn or Facebook (including birth date, real phone number, email, city, etc.) it simplifies the work of compromising you by a factor of 100.

So, if targeted attacks are in your threat profile, including doxxing, jealous or vindictive exes, burglars, con artists, cyber criminals, political opponents, authoritarian governments, government or commercial surveillance, etc. there is almost no difference between privacy and security.

Posted with my trusty Z10

I agree but in my example I was referring to remote code execution security risks on a device. These can happen in any app and even the OS itself so nothing short of being on the latest version of an app or OS could protect against them.

[conite]

I agree but in my example I was referring to remote code execution security risks on a device. These can happen in any app and even the OS itself so nothing short of being on the latest version of an app or OS could protect against them.

It also depends on how resilient the OS is to attack.

There is real science to kernel hardening, constantly scanning system files for changes, and not allowing nefarious apps to gain elevated privileges.

You can patch AND you can monitor.

[Invictus0]

It also depends on how resilient the OS is to attack.

There is real science to kernel hardening, constantly scanning system files for changes, and not allowing nefarious apps to gain elevated privileges.

You can patch AND you can monitor.

Sure but when an exploit is in the wild this is something we as consumers can't independently verify and certainly shouldn't take a chance on. It's up to the OEM or a third party to release information about.

[conite]

Sure but when an exploit is in the wild this is something we as consumers can't independently verify and certainly shouldn't take a chance on. It's up to the OEM or a third party to release information about.

True.

Equally, I would also be concerned about blocking threats that haven't been discovered and patched for - and that's an advantage to better monitoring.

[bb10adopter111]

I just received an update notice for my AT&T locked KEYONE. Will update when if it's installed successfully.

Posted with my trusty Z10

[anon(10387168)]

I just received an update notice for my AT&T locked KEYONE. Will update when if it's installed successfully.

Posted with my trusty Z10

That would be May? If so, very promising. Waiting with baited breath!

[bb10adopter111]

That would be May? If so, very promising. Waiting with baited breath!

Yes, May. It's worth noting that the AT&T KEYone launched in August 2017, so it hasn't been two years yet.

Posted with my trusty Z10

[anon(10387168)]

Yes, May. It's worth noting that the AT&T KEYone launched in August 2017, so it hasn't been two years yet.

Posted with my trusty Z10

Hmmm, ok. I have read many posts stating that original launch date for each model is what counts regardless of variant or carrier. Never been so happy those folks might be wrong. Good to hear! Perhaps there is hope after all that TCL/BBMo do the right thing.

[howarmat]

See all this doom and gloom for nothing. geesh

[bb10adopter111]

See all this doom and gloom for nothing. geesh

I don't know the status for Rogers, which is where the rumor started. They published the word "Final" next to the April update on a Web site, and a customer service agent said BlackBerry wouldn't provide updates after 24 months.

How interesting that BlackBerry obviously HAS produced a May update, so, if Rogers doesn't get it, I don't see how they can blame BlackBerry!

Posted with my trusty Z10

[howarmat]

Right, carriers can always do what they want. Rogers doesnt speak for all other carrier nor BB. That is why I really didnt give a hoot what Rogers posted. Until NO ONE got the May update I was not going to worry.

[anon(10562251)]

I don't know the status for Rogers, which is where the rumor started. They published the word "Final" next to the April update on a Web site, and a customer service agent said BlackBerry wouldn't provide updates after 24 months.

How interesting that BlackBerry obviously HAS produced a May update, so, if Rogers doesn't get it, I don't see how they can blame BlackBerry!

Posted with my trusty Z10

Just curious - what is the update code and patch date?

[anon(10562251)]

Right, carriers can always do what they want. Rogers doesnt speak for all other carrier nor BB. That is why I really didnt give a hoot what Rogers posted. Until NO ONE got the May update I was not going to worry.

Hindsight is 20/20.

[bb10adopter111]

Just curious - what is the update code and patch date?

May 5, 2019
Build ABV803

Posted with my trusty Z10

[anon(10562251)]

May 5, 2019
Build ABV803

Posted with my trusty Z10

Thanks! Well that's definitely going to be a relief to a lot of people. At least for now.

Hopefully the trend continues.

[bb10adopter111]

Thanks! Well that's definitely going to be a relief to a lot of people. At least for now.

Hopefully the trend continues.

I think the big test will be whether the unlocked versions continue to receive updates. They've already been out for more than 24 months, and there are no carrier restrictions to blame for them.

[RLeeSimon]

so, seems KEYᵒⁿᵉ USA PRD-63116-001is singled out for early EOL. Is it the Chinese tariff war we see here? I find BlackBerry and BlackBerry Mobile and TCL to be a circle of buffoons...

Spreadsheet is below...]

I didn't make this spreadsheet. Conite furnished a link to it on CB...

[RLeeSimon]

spreadsheet

[Sigewif]

Does anyone know if the North American silver KEYone will get any more security patches? Mine is currently on Feb 5 (ABP819). According to the spreadsheets there are more recent updates. The SA KEYone was released at the end of May 2017. PS: it is a US unlocked device.

[conite]

Does anyone know if the North American silver KEYone will get any more security patches? Mine is currently on Feb 5. According to the spreadsheets there are more recent updates. The SA KEYone was released at the end of May 2017.

No one knows anything.

[Sigewif]

No one knows anything.

Well, that is better than knowing for sure it has stopped. Holding out hope.