All About Symbian - Nokia (S60) and Sony Ericsson (UIQ) smartphones unwrapped

  #1  
Old 26-03-2009, 02:21 PM
Ben_Kri Ben_Kri is offline
Registered User
 
Join Date: Nov 2008
Location: Duesseldorf, Germany
Posts: 22
Ben_Kri is on a distinguished road
Exclamation "Email wizard" sending sensible data

Hi all,

I have found the following news on

http://mobilitics.blogspot.com/2009/...-password.html

very interesting, but as an "end-user" without any internet-technology-skills, to be honest, I cannot say how critical this matter really is. Tested on 5800 and E75, it may well be the same for all other phones with a email wizard:

Quote:
Let's create an account for user test.user@mycompany.com (his password is "topsecret" but I will not tell it to anybody). After you have entered this information, the wizard will open a network connection and make an HTTP request to URL

https: //ccds.serviceactivation.ext.nokia.com:443/api/v1/rest/?operation=ccds.provider.determineAccount&applicat ionCode=email&address=test.user@mycompany.com&password=topsecret&mcc=244&mnc=91&carrier=sonera

Nice! I just sent to Nokia my email address, password, operator information and terminal type (in HTTP headers, not visible here).
Well, somehow the given information needs to come to the nokia-server to get the wizard-job done. So much is clear. I am not sure, whether the concern is about the clear-text HTTPS-Adress, or whether it is "just" a problem of "I-didn't-know-they-need-it-and-they-safe-it". How easy is it to log that adress-information? How easy the access for malware? Internet and email security is a matter for me, and if a routing computer can log that adress, then I have big security concerns.

I hope I can make my point clear enough as my english fades away...
Ads
 

Bookmarks

Tags
data, email security wizard, email wizard, sending

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
N95 Study sToKiE Nokia N80 60 21-06-2007 02:44 PM
FAQs and Useful Links Rafe Nokia Eseries S60 3.0 phones (E50, E60, E62, E61, E61i, E70) 4 31-03-2007 01:23 PM



All times are GMT. The time now is 07:58 PM.


vBulletin skins developed by: eXtremepixels
Powered by vBulletin® Version 3.8.0
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.
Copyright Notes || Contact Us || Privacy Policy