[bbjfry]

I'm wondering if the BB10 devices that don't use a BES or BIS have the same security that the legacy devices had since they required one or the other. Now that you can use a BB10 through carrier servers, is it still secure?

Posted via CB10

[NamelessStar]

Depends on answer it's obviously not as secure vs being off BES, but there is no hacking the device or back doors into the system. That is the only reason BlackBerry is the only device on market with fips certifications.

Posted via CB10 on my blazing fast Z30 on 10.2.1.2102

[Jerale Hoard]

Yes. When you buy a BlackBerry it comes out of the box with security. As in encryption keys it uses Elliptical Curve Cryptography (ECC) which doubles with AES encryption through BES. When encryption is turned on your device is safe. When off its as vulnerable as the other devices.

Posted via CB10

[axeman1000]

Depends on answer it's obviously not as secure vs being off BES, but there is no hacking the device or back doors into the system. That is the only reason BlackBerry is the only device on market with fips certifications.

Posted via CB10 on my blazing fast Z30 on 10.2.1.2102

This, although you know there will be certain posters that will come in with their views and old links to back it up. But can't deny the fact the BlackBerry is not in the news everyday for being a open door like apple or android, Bes or not.

Hate solves nothing, Respect gains everything!

[itzJustMeh]

Encyption wise I doubt it, although you can encrypt all your data. But what we've seen from example in Sochi is, that someone can remotely install software on your device as soon as you connect to their WiFi. I highly doubt they can do this to BlackBerry

[Jerale Hoard]

Encyption wise I doubt it, although you can encrypt all your data. But what we've seen from example in Sochi is, that someone can remotely install software on your device as soon as you connect to their WiFi. I highly doubt they can do this to BlackBerry

Actually WiFi can be breached. There's no way around it. Software wise it can't because BlackBerry uses ECC encryption which takes years to decrypt. I've never heard of anyone implanting any backdoors into ECC devices.

Posted via CB10

[bbjfry]

I just checked my z10 and the encryption setting is off. As I've never touched it, I assume it is the default setting. You'd think the default would be for encryption to be "on", but maybe I'm wrong. Is there a disadvantage to have encryption on vs off?

Posted via CB10

[Troy Tiscareno]

BB10, without BES, isn't significantly more secure than any other phone.

Phone calls - unencrypted, exactly like any other phone.
SMS/MMS - unencrypted, exactly like any other phone.
Email - IMAP or POP, exactly like any other phone.
Browser - Using old security protocols - less secure than Safari or Chrome*
Apps - Native BB10 apps could potentially be more secure. Android apps are Android apps: if they're secure on BB, then they're secure on Android, and if not, then they are insecure in both places.
BBM - certainly more secure than a completely unencrypted service, but uses a single shared key that is relatively easy to obtain (every BB device has it).
Cloud services - BB doesn't even have its own service, and has to rely on 3rd parties that it has no control over (Box, DropBox, Mega, etc.)

* http://forums.crackberry.com/blackbe...tocols-909342/

iOS, Android, and BB10 devices can all be encrypted at the device, but all ship with the encryption turned off by default, which means the data stored on the flash memory is accessible by anyone who has physical possession of the phone.

People need to realize that most of BB's security is a result of BES, and not inherent to the phone itself or the services that almost everyone uses on their phones. Without BES, BB is a little better in a few areas and worse in others, but certainly not better in any significant way. It takes BES, PLUS restricting usage to known-secure services (corporate email and file-shares), to gain any real advantage, which is why enterprises lock down the business side of the phone (with BB Balance) to only allow specific apps and services. Even then, anything you do on the consumer side of the phone is more-or-less the same as any other phone.

Finally, a huge part of security comes down to the end-user. If your password is "11111111" or "12345678" or "password", then all the security in the world isn't going to help you.

[code2solutions]

Dang. Now I have to change my password.

Posted from my Z10 via CB

[Rolsi]

How about a super secure BlackBerry 10 phone, running on an enhanced BIS called BlackBerry BlackOut. Any takers?

My Z30 is hired, my iPhone retired. BlackBerry rules the lot. Cause it's the best phone I've ever got.

[Rolsi]

Sorry, I mean, the phone is called BlackBerry BlackOut

My Z30 is hired, my iPhone retired. BlackBerry rules the lot. Cause it's the best phone I've ever got.

[bbjfry]

I'm mostly concerned about mobile banking. My passwords are secure, just wondering if my financials are safer with BlackBerry over its competitors

Posted via CB10

[Troy Tiscareno]

It depends on how you access your accounts. As several developers have mentioned, browsers only have limited security options, and banking apps allow for much better security. Then add in the fact that BB's browser has some serious security issues, and I wouldn't recommend using the browser.

As far as apps go, that's going to be on an app-by-app basis, but as long as you get a legit app (i.e., one uploaded to a reputable app store directly from the bank), then you're probably pretty safe.

[Pete The Penguin]

It depends on how you access your accounts. As several developers have mentioned, browsers only have limited security options, and banking apps allow for much better security. Then add in the fact that BB's browser has some serious security issues, and I wouldn't recommend using the browser.

As far as apps go, that's going to be on an app-by-app basis, but as long as you get a legit app (i.e., one uploaded to a reputable app store directly from the bank), then you're probably pretty safe.

Most security experts don't recommend internet banking, with an app or not.

[NamelessStar]

Mistake entry deleted

[Bbnivende]

Troy's post was most interesting. It is amazing how Crackberry members want so much for BlackBerry succeed that they ascribe benefits to the phone that may not exist. This may explain why BlackBerry does not market their phones on the basis of enhanced security for the consumer.

It seems to me that the main benefits are the hub, gesture based, physical keyboard, secure native apps and the trackpad.

[MANIBHINDER]

BlackBerry and windows phones are safe. No dought
****in aaple and androis Whatsup and facebook msj can hack very esly through wi fi. I know

BHiNDER

[Jerale Hoard]

BlackBerry and windows phones are safe. No dought
****in aaple and androis Whatsup and facebook msj can hack very esly through wi fi. I know

BHiNDER

Windows phone? If I'm not mistaken Microsoft phones are about as vulnerable as Apple devices. I've also heard that they also have "backdoors" in the software.

Posted via CB10

[Troy Tiscareno]

Troy's post was most interesting. It is amazing how Crackberry members want so much for BlackBerry succeed that they ascribe benefits to the phone that may not exist. This may explain why BlackBerry does not market their phones on the basis of enhanced security for the consumer.

Right. Here's something else to think about.

During the BBOS years, when BB was king of the enterprise, BB phones could access secure corporate email, maybe a secure file-share, and perhaps a custom corporate app or two - and of course, make calls and send texts/BBMs. THAT'S IT; your typical enterprise phone was locked down so that it couldn't do anything else, and the phones only had limited apps support and browsing capabilities anyway. Phone calls and texts were never secure, because there are no global encryption standards for them, but BBM, corporate email, corporate apps, and file shares could be secure.

Today's phones can do so much more, but as far as secured services, not much has changed. On a "secure" BES BB10 phone, those same services that were secure on BBOS are secured, but with Balance, you still have the consumer side of the phone where there isn't really much security. BES isn't going to make your banking app any better, nor your web browser, nor your social media logins, nor your shopping apps.

BES is probably the best at what it does among the big, mainstream offerings, but it has definite limits on what it is intended to do, and doesn't magically transform a BB10 phone into some unbreakable granite fortress of security. The parts that it secures are well-secured, but users need to understand what those are, and more importantly, what they AREN'T. End-users still play a BIG role in real security, and if you take foolish risks because you falsely believe that BES is going to protect you somehow, you can still get screwed pretty badly.