Shortcuts: Mobile | Active Topics | Newest Posts | Latest Freeware | Private Messaging | Contribute News | Archive 
  NEWS
  Search News
Browse by Category
News History
1SRC News RSS Feed
1SRC Podcast RSS Feed
Contribute News
  FORUMS
  Search Forums
Topic Specific
News
General
Applications
  Games
  Video
Deals & Promos
Developers
E-books
Mac / Linux
Medical
Podcast
Skins & Backgrounds
Wireless
Off-Topic
  Audio/Video
  Cellphones
  Digital Cameras
  Gaming
  Gadgets & Gizmos
  Non-Palm OS PDAs
  PCs/Laptops
  Tech Web
palm
pre
Foleo
T|X-Series
Z-Series
LifeDrive
Zire
Treo
Tungsten
Older Palms
Sony
VZ-Series
TH-Series
UX-Series
TJ-Series
NX-Series
TG-Series
NZ-Series
Older Clies
Tapwave
Zodiac
Garmin
iQue
Other Licensees
AlphaSmart
Fossil
Group Sense
Kyocera
LG
Samsung
Site Specific
Arcade
Comment/Suggest
  FREEWARE
  Search Freeware
Applications
Ebooks
Skins
Backgrounds
  ABOUT US
  Contact Us
Contribute News
About Us
Privacy Statement
  LOW PRICE SEARCH

Search for the lowest prices: 




  LINKS
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Go Back   1src Forums > Palm > Treo
User Name
Password
FAQ Members List Calendar Chat Arcade Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Search this Thread Display Modes
Old 07-28-2009, 03:42 PM   #1
Abe Frohman
Registered User
 
Join Date: Mar 2005
Posts: 73 Abe Frohman is on a distinguished road
Centro security issue...has this been fixed?

It looks like this issue has been known for at least a year....has it been fixed?

http://securityvulns.com/Udocument99.html

The Palm Centro has a flaw in the security feature. While I was day dreaming
about Holly Bortolazzo, I discovered its possible to bypass my Palm Centro
system lockout without
knowing the password.

When Palm Cento is in the lockout mode the user has 2 options. The user can
enter their password to gain access to the phone or they can select "make
emergency call". If the user selects "make emergency call" they're only
allowed to call 911 or *2. If the phone is locked out a malicious user can
select "make emergency call" then dial *2. While the phone is dialing *2 the
malicious user can quickly press the phone button on the keyboard of the
Centro which allows the malicious user to view the phone menu. This bypasses
the sytem lockout feature. The malicious user can then press the Apps.
button on the keyboard of the phone to gain access to the main menu (they
can hang up the phone call to *2 by pressing the end button), thus allows
access to everything on the phone(texting, photos, videos, contacts etc...).
Theres only 2 options that are not accessible 1. making phones calls 2.
accessing the security option. Selecting those options will bring you back
to the lockout screen. This flaw has been tested on several Palm Centro
phones. Palm hasn't fixed a similar problem with the Treo after being
notified by Symantec a year ago. If I hadn't been thinking about Holly
Bortolazzo I wouldn't have found this flaw...
__________________
Verizon Centro
Abe Frohman is offline   Reply With Quote
Old 07-29-2009, 12:51 PM   #2
olderTechnology
Registered User
 
olderTechnology's Avatar
 
Join Date: Feb 2004
Location: Wylie, TX
Posts: 149 olderTechnology is on a distinguished road
Not sure if Palm ever fixed this issue, but I highly recommend TealLock which solved most of my locking problems for me. It gives complete, fine grained control over what you want to allow.
olderTechnology is offline   Reply With Quote
Old 08-01-2009, 07:05 PM   #3
Abe Frohman
Registered User
 
Join Date: Mar 2005
Posts: 73 Abe Frohman is on a distinguished road
Quote:
Originally Posted by olderTechnology
Not sure if Palm ever fixed this issue, but I highly recommend TealLock which solved most of my locking problems for me. It gives complete, fine grained control over what you want to allow.


Thanks for the tip! I'm trying Teal Lock out now. It definitely closes the aforementioned security loophole.

Abe
__________________
Verizon Centro
Abe Frohman is offline   Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
security warning re. encryption in Palm NVFS devices pruss Applications 16 06-18-2006 08:06 AM
My TX had an annoying issue, but I fixed (don't know how) Tygus T|X-Series 2 04-03-2006 05:39 PM
Agendus 6.02 Update davidrgeorge Applications 24 03-30-2003 06:47 PM
Agendus 6.02 (beta) available Amy Applications 5 03-10-2003 01:07 PM
Launcher X Security Issue Experiment 626 Applications 0 02-11-2003 12:15 AM


All times are GMT -5. The time now is 05:37 AM.

  AD HOSTS ?
  GOOGLE ADS ?
  AMAZON ADS ?

Powered by: vBulletin Version 3.0.3
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
©2001 Entity City, LLC. All rights reserved.