Registered: May 2000
Location: St. Paul, MN
Posts: 1429

Security: Locked but not. With a Backup Module!

Hey all.. This is my 800th post shhh! ok last night at dinner, while waiting for food, I relised waht I think is an important security hole in a Visor.

Many people (like me) often carry their backup module either in the same case as the Visor, or in the Visor. Granted this is not a safe way to do things, but people do that. Many of those same people use some type of security software. It doesn't matter what kind, jsut some type. Now here's the problem..

I discover on the bus, a Handspring Visor PDA, that is locked. But it has a Backup module in the case! The point of keeping the Vsr locked, is to prevent the data from beign stolen, right? But ALL I NEED TO DO, is to hard reset the Visor, and not only do I (if I'm not an honest person.. but I am) get a free PDA, I can get ALL the unhidden data. So.. looking at this, I discover.. omg! Its' Jeff Hawkin's Visor! I restored this system, and now I'm looking at all his unhidden data. Facinating what the Next visor will be.....

This can all be averted, by not keeping your backup module with you, but for me I need it with me. The other way to do things is to hide, or mask all your sensitive data, but that still doesn't protect a lot of otehr stuff their. The only soloution I came up with is, like FOR A HOTSYNC, you need a pssword to restore the files. A simple small line of code, and you could be saving a company. Handspring, PLEASE fix this. Others, PLEASE comment on this.

I will also note since I wrote a ton here, that I will be taking a short leave to "SWIM CAMP!" at St. Olaf College here in Minnesota this week. Have fun all you people! Enjoy the "rumors" about PCexpo (I wish their were some.. OOO! I could START some!! oooo!)

so long..

__________________
-miradu

Registered: Nov 1999
Location: King William, Virginia USA
Posts: 70

OnlyMe requires the password after a reset - which the Backup Software will force you to do after restoring to a "clean" Visor. Probably not perfect but it works for me...

Registered: Oct 2000
Location: Aberdeen, SD
Posts: 2531

Can't get around PowerHack, from what I've seen. Of course, a hard reset gets rid of everything, but I've tried everything from backup modules to syncing to the three resets, etc. The only way "around" it is if you backup with PowerHack unchecked (but then you're not protected anyway).

__________________
-Joshua
Abortion: Darwinism at its finest.