![](http://investorshub.advfn.com/images/default_ih_profile2_4848.jpg?cb=0)
Friday, May 21, 2004 8:57:57 AM
Sun, Microsoft, or a stranger on the train?
May 20, 2004
Summary
Everyone is looking for our trust at the moment. Schemes for digitally signing applications seem to be popping up like gophers across the mobile landscape, each of them confident that we'll place our trust in their authority. Microsoft, of course, has been trying to convince us to only trust applications and drivers signed by them on our desktops.
By Bill Ray
Page 1 of 1
Everyone is looking for our trust at the moment. Schemes for digitally signing applications seem to be popping up like gophers across the mobile landscape, each of them confident that we'll place our trust in their authority. Microsoft, of course, has been trying to convince us to only trust applications and drivers signed by them on our desktops. Now Symbian will be signing applications for our phones while Nokia has launched their own scheme (called "Nokia OK") to demonstrate that the application meets with their approval.
While the lack of granular security in Symbian (once an application is running it can do anything) might make certification useful, Sun reckons that network operators would like to see their approval on Java applications (which generally don't have the same security issues), while the networks themselves are already preparing their own offerings.
So what will all these certificates tell us? Are any of these parties actually willing to take some responsibility for the application when things go wrong? When your digitally signed game starts sending out spam text messages to everyone in your address book will you have someone to sue? It seems not; while all these companies are happy to lend their names to say that the applications work properly, no one appears to be happy to accept the liability when it turns out they don't. Ultimately it's the network operators who will have to deal with irate customers, and blaming them for installing software (the normal defense in desktop support) isn't going to wash. Flashing warnings on the screen just doesn't work, as the recent My Doom and Bagel worms amply demonstrate; users will click "OK" no matter how many times they are told to take care, and it's not practical to educate all mobile phone users in the intricacies of device security.
BREW provides one alternative to pointless dialogs for the user to agree with; it just won't allow users to install an application unless QUALCOMM, or its partners, has approved that application. While that might seem draconian, it will be BREW users who are laughing when the first Symbian worm strikes.
With MIDP 2.0, the latest version of Java, applications are divided into domains including "vendor," "operator," and "trusted third party" with access to different APIs being restricted by who digitally signed the application. When messages are displayed to the user they are clear and action-related, such as: "This application wants to send a text message." The user is then free to make an informed choice to allow or disallow the action. Users understand actions, and an application that misbehaves will be given short shift. This mechanism allows informed choices from the users, while protecting them, and their network, from undue interference. But even this approach is fraught with problems. How do the certificates get onto the phone? What happens if a user changes networks? When an application manages to bypass this security who will be liable (Sun, the network, or the JVM vendor)?
A mobile phone is not a desktop computer, and the security it needs isn't the same. The sooner people start to recognize that fact the better.
Someone else asked me to trust them the other day, someone I had never met and will probably never meet. I was traveling on the subway, reading some documents on my Palm, when up popped a message saying that "Pug Ugly" was trying to connect and did I want to allow them. This was, obviously, a Bluetooth connection and I simply rejected it and continued reading. It seems that Mr. Ugly was a persistent soul, and tried another few times before I switched off my Bluetooth connectivity to be able to read in peace. I had heard about this use of Bluetooth (Bluejacking, as it's known), and while some Nokia handsets have had security issues, in general I leave all my devices advertising their presence and consider such approaches no different from someone walking up to me and talking. It occurred to me that I'm something of a gold mine for anyone playing with a new Bluetooth device, because I carry at least three active devices at any time. People sharing a carriage with me must think Bluetooth is everywhere.
Glancing around the carriage, I noticed a girl surreptitiously keying a Nokia 3650 and could only assume that the identity of Mr. Ugly had been established (though to be fair, the girl was neither Mr. nor Ugly). Checking my P900 later, I discovered dozens of messages sent over a period of months including graphics (like the skeleton pictured) and sounds. I've said several times that the best way to get users comfortable with a technology is to provide a silly application for it, the sillier the better. By playing with Bluetooth, users can gain confidence with this new wireless technology, so when they want a way to connect things together it's the obvious choice. Other than mobile telephones, wireless is still a novelty to most people, making this the perfect time to have some fun with it.
What do you think? Read / Join the Feedback to this item.
http://www.sys-con.com/story/?storyid=44920&DE=1
Recent QCOM News
- Form 8-K - Current report • Edgar (US Regulatory) • 08/09/2024 08:05:49 PM
- Form 4 - Statement of changes in beneficial ownership of securities • Edgar (US Regulatory) • 08/09/2024 08:05:43 PM
- Form 4 - Statement of changes in beneficial ownership of securities • Edgar (US Regulatory) • 08/09/2024 08:05:27 PM
- Form 144 - Report of proposed sale of securities • Edgar (US Regulatory) • 08/08/2024 09:01:47 PM
- Form 4 - Statement of changes in beneficial ownership of securities • Edgar (US Regulatory) • 08/05/2024 09:03:28 PM
- Form 144 - Report of proposed sale of securities • Edgar (US Regulatory) • 08/02/2024 08:01:38 PM
- Qualcomm Gewinnmitteilung auf der Investor Relations Website des Unternehmens verfügbar • Business Wire • 07/31/2024 10:50:00 PM
- Publication des résultats de Qualcomm disponible sur le site web de la société consacré aux relations avec les investisseurs • Business Wire • 07/31/2024 10:50:00 PM
- Form 10-Q - Quarterly report [Sections 13 or 15(d)] • Edgar (US Regulatory) • 07/31/2024 08:02:08 PM
- Form 8-K - Current report • Edgar (US Regulatory) • 07/31/2024 08:01:12 PM
- Qualcomm Earnings Release Available on Company’s Investor Relations Website • Business Wire • 07/31/2024 08:00:00 PM
- US Index Futures Up Ahead of Fed Decision; Oil Prices Surge Amid Middle East Tensions • IH Market News • 07/31/2024 10:01:30 AM
- AMD Shares Surge 9% on Earnings Beat; Match Group Rises 10%, Pinterest & Lemonade Drop 13%, and More Earnings Updates • IH Market News • 07/31/2024 09:59:10 AM
- Qualcomm gibt Datum der Ergebnismeldung für das dritte Quartal 2024 und der Konferenzschaltung bekannt • Business Wire • 07/19/2024 08:32:00 PM
- Qualcomm annonce qu’elle va publier prochainement ses résultats pour le troisième trimestre de l’exercice 2024 et qu’elle tiendra une conférence téléphonique • Business Wire • 07/19/2024 04:22:00 PM
- Qualcomm Schedules Third Quarter Fiscal 2024 Earnings Release and Conference Call • Business Wire • 07/19/2024 01:00:00 PM
- Qualcomm gibt Quartalsbardividende bekannt • Business Wire • 07/17/2024 06:43:00 PM
- Qualcomm annonce le versement du dividende en espèces trimestriel • Business Wire • 07/17/2024 06:43:00 PM
- Qualcomm Announces Quarterly Cash Dividend • Business Wire • 07/17/2024 01:00:00 PM
- Form 4 - Statement of changes in beneficial ownership of securities • Edgar (US Regulatory) • 07/08/2024 09:39:01 PM
- U.S. Index Futures Mixed Following Tech Sell-Off, WTI and Brent Crude Dip Slightly • IH Market News • 06/25/2024 10:37:15 AM
- Trump Media Resells Stocks and Warrants; KB Home Exceeds Q2 Expectations, and More News • IH Market News • 06/20/2024 10:55:11 AM
- Form 4 - Statement of changes in beneficial ownership of securities • Edgar (US Regulatory) • 06/04/2024 08:07:43 PM
- Form 4 - Statement of changes in beneficial ownership of securities • Edgar (US Regulatory) • 06/04/2024 08:07:25 PM
- Form 144 - Report of proposed sale of securities • Edgar (US Regulatory) • 06/03/2024 09:27:46 PM
Maybacks Global Entertainment and ZEASN Technology Private Ltd. Sign Global Licensing Agreement • AHRO • Aug 8, 2024 7:00 AM
SANUWAVE Will Host a Conference Call on August 13, 2024 at 8:30 AM (ET) to Present Q2 Financial Results • SNWV • Aug 8, 2024 6:59 AM
Kona Gold Beverage Inc. Signs Letter of Intent with Bemax, Inc. to Sell Kona Gold, LLC • BMXC • Aug 7, 2024 10:00 AM
Btab Ecommerce Group, Inc. Launches Investor Connect AI Chatbot for Enhanced Investor Engagement and Lead Generation • BBTT • Aug 7, 2024 9:00 AM
Hydromer, Inc. Announces Preliminary Unaudited Second Quarter 2024 Financial Results and Provides Business Update • HYDI • Aug 7, 2024 8:52 AM
North Bay Resources Announces Mt. Vernon Gold Mine Startup, Sierra County, California • NBRI • Aug 5, 2024 9:00 AM