RIM urges users to disable JavaScript in light of exploit
updated 12:45 pm EDT, Thu March 17, 2011
RIM tells OS 6 users to turn off JavaScript
A recent zero-day BlackBerry 6 hack at the Pwn2Own convention has prompted RIM to add a knowledge base article that will help users secure their phones. The approach is blunt and calls on users to turn off JavaScript for the browser until RIM develops a more permanent fix. Older versions aren't known to be affected.
BlackBerry Enterprise Server administrators can turn off JavaScript support using the Disable JavaScript in Browser IT policy rule.
RIM has insisted the change is temporary and that it shouldn't significantly hurt web browsing, but JavaScript is used on most modern websites and will likely break Gmail and most other pages that need JavaScript. The exploit shown at the convention targeted a BlackBerry Torch's WebKit browser running OS 6.0.0.246. Vincenzo Iozzo, Willem Pinckaers and Ralf Philipp Weinmann were able to access all contact information and the image database. [via CrackBerry]
