Printed from http://www.electronista.com

Canadian Government: BlackBerry PIN-to-PIN messages insecure

updated 06:29 pm EST, Wed February 27, 2013

Nature of protocol could lead to misdirected messages

The Canadian government IT department has warned its workers that the BlackBerry PIN-to-PIN service is unsafe. According to a presentation by Public Safety Canada, messages sent with the service are "the most vulnerable method of communicating on a BlackBerry" making it "not suitable for exchanging sensitive messages." The newly-updated memo, first crafted in 2011, states that "although PIN-to-PIN messages are encrypted, they key used is a global cryptographic 'key' that is common to every BlackBerry device all over the world," and "any BlackBerry device can potentially decrypt all PIN-to-PIN messages sent by any other BlackBerry device."

The Personal Identification Number (PIN) on a BlackBerry is unique to the device, and not the user. Given the need to reuse phones or resell devices as surplus , a message intended for a user may inadvertently reach the wrong person, possibly someone outside of governmental service.

Additionally, the memo declares that "PIN-to-PIN messaging bypasses all corporate e-mail security filters, and thus users may become vulnerable to viruses and malware code as well as spam messages if their PIN becomes known to unauthorized third parties." The new BlackBerry 10 OS retains the same communications protocol, and the same inherent flaw.

While the US government has more actual BlackBerry units in operation, the Canadian government has a much higher percentage of users on the platform. Figures place the cost of operating the system in Canada at over $2 million per month.



By Electronista Staff
Post tools:

TAGS :

toggle

Comments

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

toggle

Most Popular

Sponsor

Recent Reviews

Linksys EA6900 AC Router

As AC networking begins to makes its way into more and more devices you may find yourself considering an upgrade for your home network ...

D-Link DIR-510L 802.11AC travel router

Having Internet access in hotels and other similar locations used to be a miasma of connectivity issues. If Wi-Fi was available, it wa ...

Ooma Office small business VoIP

Voice over IP (VoIP) services have been around for a very long time. Only recently has the implementation become a bit more robust, al ...

Sponsor

toggle

Most Commented

 
toggle

Popular News