View Single Post
  #1  
Old 10-01-2009, 10:11 PM
D/\SH's Avatar
D/\SH D/\SH is offline   Thread Starter  
Owner - Staff
Mobile Model: TP, TP2, soon Hero
Mobile Carrier: SPJ
Mobile OS: 6.5

 
Join Date: February 7th, 2007
Location: Grand Rapids, MI
Posts: 47,711
Downloads: 0
Uploads: 0
D/\SH Knows Their StuffD/\SH Knows Their StuffD/\SH Knows Their StuffD/\SH Knows Their StuffD/\SH Knows Their StuffD/\SH Knows Their StuffD/\SH Knows Their StuffD/\SH Knows Their StuffD/\SH Knows Their StuffD/\SH Knows Their StuffD/\SH Knows Their Stuff


View D/\SH's Profile   Edit Options Edit Profile Picture View D/\SH's Photo Album Add D/\SH's to Your Contacts Show Groups Edit Avatar Subscribed Threads Private Messages
Default WebOS 1.2 Fixed A Serious File Security Issue

WebOS 1.2 Fixed A Serious File Security Issue


The webOS 1.2 update brought many much-appreciated new features, updated old features and software bug fixes. Of course, there are also a few issues to deal with (especially when it comes to Exchange), but overall most users are enjoying the update.
There is one one interesting, rather nondescript, mention on the 1.2 changelog:
Security
This release addresses several security issues with Palm webOS software.
We would like to thank Townsend Ladd Harris for his help in identifying some of the issues addressed in this release.
Townsend Ladd Harris runs this computer security blog and has reported several security issues with the WebOS in previous versions. What he found in 1.1 was pretty serious.
The security issue in question concerned the email application and malicious code in emails. Essentially an email with malicious code could provide remote access files on the WebOS device. Harris has even gone so far as to demonstrate the process in this flash video, showing how potentially devastating this malicious code could be; all your emails and contacts snatched simply by opening a malicious email.
In other words - thank heavens for webOS 1.2. If you're holding off on updating (or have downgraded back to 1.1 because of Exchange compatibility), we're thinking it's safer to get your Pre up to date.


originally found here:

Code

http://www.precentral.net/update-12-fixed-serious-file-security-issue
Reply With Quote
The Following 2 Users Say Thank You to D/\SH For This Useful Post:
CYBER WEESJE (10-02-2009), wcked (10-01-2009)