RIM tackles BlackBerry phishing bug; launches Mac manager software
RIM has issued a fix for a bug with the way BlackBerrys recognize secure Web sites which could have left users unaware of potential phishing scams. The firm has also released a Mac edition of its desktop management software for the device.
The security problem involves the message which flashes up on the BlackBerry when the user visits a site but the apparent site address doesn’t match that listed on the destination page’s security certificate. That’s likely to happen with less sophisticated phishing attempts, where the scammer tries to trick a user into visiting what they think is a legitimate Web site, for example that of their online bank.
The bug meant that hidden or “null” characters in the address listed on the security address were not displayed in the warning message. That meant that a scammer could create a security certificate in the same name as the supposed target but with null characters inserted. Although this mismatch would trigger the alert, the bug meant it would throw up a confusing message such as this:
That created the risk that a user would assume the message itself was a mistake and continue on to the bogus site. A fix correcting this bug is now available at http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB19552
Meanwhile the Mac edition of RIM’s free Desktop Manager software is available to download from tomorrow at http://www.blackberry.com/mac. The software allows users to easily synchronize data between their Mac and Blackberry, including contact information and appointments. They can also back-up data and install BlackBerry updates they’ve downloaded on the Mac.
The package also includes BlackBerry Media Sync, which allows users to pick or create a playlist from their iTunes library and automatically copy across the relevant songs. There’s also an option to pick a random selection of songs to fill a designated amount of storage space on the handset.
Users will need BlackBerry OS4.2 and Mac OS X 10.5.5 or later editions to use the Desktop Manager software.
Related Posts:
