Platform security tools update
Just a quick note to update on our status in platform security tooling: The capability scanner is currently under development here at Nokia, and the certificate manager will be developed by Symbian. We’re currently anticipating getting the capability scanner into beta around Christmas; final product to be available first as a plug-in for Carbide.c++ 1.1 in February, and then integrated into Carbide.c++ 1.2 in May. I haven’t received any commitment from Symbian on the certificate manager, but I trust it’ll be ready during Q1 as well. After that, platform security should be a little less annoying…
Our only remaining problem is the quality of the API-Capability documentation that is used as a the basis for the capability scanning. Apparently, Symbian’s documentation on the subject is in pretty good shape, but our SDK documentation on the topic is a little shaky and needs improvement before we can call it a day. However, I think everyone in Nokia is feeling the platform security headache, so roadblocks are quickly being reduced.
Largely off-topic: I noticed that this post (like others on this blog, as well as the Web Browser blog) is not included in the overall “S60 Blogs” RSS Feed at http://blogs.s60.com/posts.xml.
Is this on purpose, perhaps because it is considered too technical, or is this something that can/should be fixed?
I for one would prefer a single feed for all s60.com blogs…
Thanks, Marcus — this is now fixed.
//markus
Hi!
What are the chances of getting MetroTRK plug in for UIQ 3 platform certified by Sony Ericsson along with first Carbide C++ 1.2 release?
Thanks,
/D
Very high. In fact, I believe all kinds of managers from Nokia and Sony Ericsson will want heads to roll if we don’t have it available by then… Most likely it’ll be delivered from Sony Ericsson Developer World, though — but don’t worry, I’ll post it here, too.
What is the status of the plug-in for Carbide c++ 1.1?
We are currently in the signing phase and really see the use of such a tool.
Thanks,
//Affe
Moi Affe,
The tool is currently in internal beta. I have some ideas, though — ping me an email, ok?
Cheers,
//markus
Regarding the PlatSec scanner product. Here is a pretty accurate update. We have a preliminary version running on v1.1 Carbide. The product is broken into two tools. The PlatSec Scanner will scan the API’s in your project and map them to capabilities. The scanner will provide a complete list and report a summary in the console in Carbide.
The second tool is really a parser. The S60 emulator is built to check for capabilities as you run your code thru the emulator. If a given API touches the emulator - the emulator will report capabilites out to a file called EPOCWIND.OUT. Carbide PlatSec tool has a parser that will filter only the capabilities. The trick with this method is getting all your APIs to be touched by the emulator.
The first tool (scanner) is missing a complete mapping file (maps API to capability) and we are waiting on an update in the next few weeks. I think its not much use without the complete files.
Since v1.2 Carbide is so close - and the capability mapping files are still not here - I’ve decided to have our developer to work only on the PlatSec tool for Carbide v1.2.
I am still working on collecting the info I need to get a schedule generated for the PlatSec tool. I am hoping to have the tool within a month - but this could slip until mid May.
Once the PlatSec tool is available - you will download it via the Help -> Update Manager tool in Carbide. This tool will be available for all versions of Carbide (Express thru OEM) and is free.
So - ping me (first.last at nokia) if you are interested in testing the v1.2 version of the PlatSec tool.
/Mike Trujillo
New Carbide Product Manager
& Reluctant Blogger
What happened to the PlatSec Scanner?
We have now swapped to Carbide C++ v1.2 and I have been looking high and low after the PlatSec Scanner.
Thanks,
//Affe