Quote:
Originally Posted by ath
I would like to urge anyone coming up with security hacks on these (and other platforms) to get them 'officially' reported and logged. Most people wanting to find out if there are known security problems with, say, the Sony Reader, would use the main vulnerability databases at www.securityfocus.com, www.secunia.com, nvd.nist.gov or www.osvdb.org, or just the bugtraq mailing list which serves as one of the inputs to securityfocus.
That makes the problems more obvious to the security community at large, and helps increase that pressure to get things right.
|
The only security-involved hack is the existence of a open Xserver, and even this does not qualify as a security problem if a way to write to the disk is not found, at this moment it is only a partial privacy problem. Moreover, in standard mode, the Xserver display is not showing any text while it is opened.
As for the other hacks, you can not tell that accesing a device from its main console is a security hole, can you?