Mobile Security - Comments http://blogs.s60.com/mobilesecurity/ Wed, 04 Jul 2007 01:34:55 +0200 http://www.movabletype.org/?v=3.2 http://blogs.law.harvard.edu/tech/rss Alexander Kanavin comments on "Hello World!" Would you like to tell us your full name, and perhaps a job title, and maybe even what you do at work? :-)

]]> http://blogs.s60.com/mobilesecurity/2006/12/hello_world.html#c014713 http://blogs.s60.com/mobilesecurity/2006/12/hello_world.html#c014713 Fri, 15 Dec 2006 13:57:09 +0200 Aquarius comments on "Phone Guardian by Symbian Guru" What will happen if a thief decides to update a phone software? All internal data will be lost after update including Phone Guard, as I guess. Is it possible to do it anyway while phone is locked?

]]> http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c014944 http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c014944 Sat, 06 Jan 2007 23:50:56 +0200 Neil comments on "Phone Guardian by Symbian Guru" IF the phone is locked using the remote SIM lock, that is, the built in/native Symbian feature, then no, it won't work. When the phone is locked, so is access to the filesystem and so it won't be possible to enable the phone mode to enable the firmware update. If the phone is not locked in this way, then yes it will be possible to flash/format the device as I stated above (see low level format).

]]> http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c014958 http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c014958 Mon, 08 Jan 2007 12:58:17 +0200 neil comments on "Phone Guardian by Symbian Guru" PS If like me, it takes multiple attempts to guess the captcha correctly, press F5/refresh this page to get a new code (you will not loose your comment).

]]> http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c014959 http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c014959 Mon, 08 Jan 2007 13:00:09 +0200 Aquarius comments on "Phone Guardian by Symbian Guru" > IF the phone is locked using the remote SIM lock, that is, the built in/native Symbian feature

Neil, my N73 does not have this built-in feature. As I know this function is available only in Eseries devices.

>it won't be possible to enable the phone mode to enable the firmware update

What about updating the firmware via Phoenix (I've heard it is possible in "dead mode" without the phone being on) and other updaters?

]]> http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c014968 http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c014968 Tue, 09 Jan 2007 10:51:55 +0200 Neil comments on "Phone Guardian by Symbian Guru" You are correct when you state remote lock is not a feature of N Series. And when flashing the device, of course everything is possible.

]]> http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c014972 http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c014972 Tue, 09 Jan 2007 14:04:11 +0200 Aquarius comments on "Phone Guardian by Symbian Guru" >I plugged in a USB data cable to my PC and to
>the phone's pop-port and I was still able to
>dump the contents of the phone and memory card

One more weak point of Phone Guardian 1.0 is that the password is stored in the file C:\pguard.dat as a plain text without any encoding. Moreover this file can be deleted even if the application is running (when the phone is not locked yet). After that Phone Guardian asks to enter new password :).
So, waiting for improvements in newer versions.

P.S. Neil, thank you for the answers.

]]> http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c015025 http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c015025 Fri, 12 Jan 2007 16:49:08 +0200 Anonymous comments on "Phone Guardian by Symbian Guru" Just an imitation of original Guardian antitheft, from symbian-toys
http://www.symbian-toys.com/guardian.aspx
unfortunately not available for 3rd edition.

- Guardian features an advanced shadow copy system; in 90% of cases the program is not deleted after a hard-reset.

]]> http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c015236 http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c015236 Mon, 29 Jan 2007 11:30:53 +0200 flosse comments on "Phone Guardian by Symbian Guru" I think its quite weird that, even though the Symbian S60 3rd edition is all the same code base, there is such fundamental differences in feature set based on the series. I mean additional software would be one thing but I would guess that something low level as remote lock etc. shouldn't be made series specific as it is a security feature that would benefit all phone models.

My 2 cents

Flosse

http://blog.2blocksaway.com

]]> http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c015760 http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c015760 Sat, 24 Feb 2007 13:50:50 +0200 Ajay comments on "Phone Guardian by Symbian Guru" What if phone is switched on without the SIM card?
Can than the thief go into appliation manager and remove the Phone Guardian? If this is possible than there is no security to the phone.
Secondly if you enable lock if SIM changed in phone security it shall not allow any message to be sent in case of sim changes.

]]> http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c016322 http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c016322 Wed, 18 Apr 2007 11:37:28 +0200 kid comments on "Phone Guardian by Symbian Guru" Hi all,

today I read one interesed story abou this thema at this site:

Security CENTRAL Forum

http://www.SCForum.info

]]> http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c017118 http://blogs.s60.com/mobilesecurity/2006/12/phone_guardian_by_symbian_guru_1.html#c017118 Wed, 04 Jul 2007 01:34:55 +0200