Printed from http://www.electronista.com

Canadian Government: BlackBerry PIN-to-PIN messages insecure

updated 06:29 pm EST, Wed February 27, 2013

Nature of protocol could lead to misdirected messages

The Canadian government IT department has warned its workers that the BlackBerry PIN-to-PIN service is unsafe. According to a presentation by Public Safety Canada, messages sent with the service are "the most vulnerable method of communicating on a BlackBerry" making it "not suitable for exchanging sensitive messages." The newly-updated memo, first crafted in 2011, states that "although PIN-to-PIN messages are encrypted, they key used is a global cryptographic 'key' that is common to every BlackBerry device all over the world," and "any BlackBerry device can potentially decrypt all PIN-to-PIN messages sent by any other BlackBerry device."

The Personal Identification Number (PIN) on a BlackBerry is unique to the device, and not the user. Given the need to reuse phones or resell devices as surplus , a message intended for a user may inadvertently reach the wrong person, possibly someone outside of governmental service.

Additionally, the memo declares that "PIN-to-PIN messaging bypasses all corporate e-mail security filters, and thus users may become vulnerable to viruses and malware code as well as spam messages if their PIN becomes known to unauthorized third parties." The new BlackBerry 10 OS retains the same communications protocol, and the same inherent flaw.

While the US government has more actual BlackBerry units in operation, the Canadian government has a much higher percentage of users on the platform. Figures place the cost of operating the system in Canada at over $2 million per month.



By Electronista Staff
Post tools:

TAGS :

toggle

Comments

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

toggle

Most Popular

Sponsor

Recent Reviews

ActvContent Sync Smartband

Smartbands of all sorts are hitting the market. Some build on the buzz around fitness trackers, while others offer simpler features fo ...

RocketStor 6324L Thunderbolt 2 eSATA bridge

Like it or not, the shift to Thunderbolt is underway. The connection is extremely flexible, allowing for video and data to co-habitate ...

Patriot Stellar Boost XT 64GB USB 3.0 drive

A vast selection of USB memory sticks means that consumers can often find exactly the size drive they need in a configuration that can ...

Sponsor

toggle

Most Commented

 
toggle

Popular News