[bbfanfan]

Interesting story.

https://www.neilwithdata.com/how-i-built-bbsmart

[app_Developer]

Wow, that is interesting, and it's also a massive security hole. It's a good thing no major banks (that I know of) made apps for BBOS.

Also, using this same technique I could have made a game that read all your secure emails in the background!

Ah, the good old days....

[conite]

Wow, that is interesting, and it's also a massive security hole. It's a good thing no major banks (that I know of) made apps for BBOS.

Also, using this same technique I could have made a game that read all your secure emails in the background!

Ah, the good old days....

Absolutely shocking isn't it.

[app_Developer]

Absolutely shocking isn't it.

Just a reminder that the standards for “secure” have changed quite a bit over the years.

I mean seriously *any* app can read your email on BBOS. That’s crazy.

[Dunt Dunt Dunt]

Just an FYI.... he was Director of Developer Relations at BlackBerry till 2011.

Seems as if he too worked for Mobile Nations, and built the native mobile apps for iOS, Android and BlackBerry back in 2011 - 2014.

[Dunt Dunt Dunt]

Just a reminder that the standards for “secure” have changed quite a bit over the years.

I mean seriously *any* app can read your email on BBOS. That’s crazy.

I never used or heard of the app.... might not have worked the same in 2013 as it did in 2007?

But in the end, yes.... your only as good as the current patch or update level.

[Bla1ze]

I never used or heard of the app.... might not have worked the same in 2013 as it did in 2007?

It didn't have to work in 2013. By then BlackBerry had improved the HTML rendering through BIS 2.5 and OS 4.5. - https://crackberry.com/north-america...-email-viewing Empower was also a popular alternative - https://crackberry.com/blackberry-so...er-html-viewer but yeah, Neil's work was game-changing and legendary!

[danfrancisco]

Cool article... thanks for sharing! I hope we'll get more of these types of interesting reads about the inner workings for BB app development now that the BB hardware well (first party or licensed) has run dry.

[idssteve]

Wow, that is interesting, and it's also a massive security hole. It's a good thing no major banks (that I know of) made apps for BBOS.

Also, using this same technique I could have made a game that read all your secure emails in the background!

Ah, the good old days....

I used, and liked, a Wells Fargo app, back then. Never noticed any missing money... lol. But, yeah, pretty scary.

GOOD thing to know! Thanks @OP!!

Was that technique still working by 7.1.0.1098?