View Single Post
Old 10-23-2006, 08:21 AM   #7
arivero
Guru
arivero knows what time it isarivero knows what time it isarivero knows what time it isarivero knows what time it isarivero knows what time it isarivero knows what time it isarivero knows what time it isarivero knows what time it isarivero knows what time it isarivero knows what time it isarivero knows what time it is
 
arivero's Avatar
 
Posts: 607
Karma: 2157
Join Date: Oct 2005
Device: NCR3125, Nokia 770,...
Quote:
Originally Posted by ath
I would like to urge anyone coming up with security hacks on these (and other platforms) to get them 'officially' reported and logged. Most people wanting to find out if there are known security problems with, say, the Sony Reader, would use the main vulnerability databases at www.securityfocus.com, www.secunia.com, nvd.nist.gov or www.osvdb.org, or just the bugtraq mailing list which serves as one of the inputs to securityfocus.

That makes the problems more obvious to the security community at large, and helps increase that pressure to get things right.
The only security-involved hack is the existence of a open Xserver, and even this does not qualify as a security problem if a way to write to the disk is not found, at this moment it is only a partial privacy problem. Moreover, in standard mode, the Xserver display is not showing any text while it is opened.

As for the other hacks, you can not tell that accesing a device from its main console is a security hole, can you?
arivero is offline   Reply With Quote