Stories
Slash Boxes
Comments
typodupeerror delete not in

Comments: 116 +-   Spyware In BlackBerry Updates For Users in the UAE on Wednesday July 15, @03:20PM

Posted by timothy on Wednesday July 15, @03:20PM
from the this-could-happen-in-$yourcountry-too dept.
privacy
cellphones
communications
mulaz writes with this excerpt from The Register: "An update pushed out to BlackBerry users on the Etisalat network in the United Arab Emirates appears to contain remotely-triggered spyware that allows the interception of messages and emails, as well as crippling battery life. Sent out as a WAP Push message, the update installs a Java file that one curious customer decided to take a closer look at, only to discover an application intended to intercept both email and text messages, sending a copy to an Etisalat server without the user being aware of anything beyond a slightly excessive battery drain."
story

Related Stories

This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by Anonymous Coward on Wednesday July 15, @03:24PM (#28707799)

    c'mon real time backup, can't beat that.

  • UAE - no surprise (Score:5, Interesting)

    by Torontoman (829262) on Wednesday July 15, @03:31PM (#28707889)
    As far as non-north-american countries go - the UAE is very progressive. But a former client of mine who spent 8 yrs there working in administration pointed out - "in North America we are an odd country and culture - we simply take it as the norm that nobody will listen to us. That level of privacy is not the norm, it's unusual" He was in a senior healthcare position and essentially knew as a foreigner in a position of influence that he would be monitored regularly if not constantly.
    • I would not call that progressive, I would call that oppressive.
    • Re:UAE - no surprise (Score:5, Informative)

      by julian67 (1022593) on Wednesday July 15, @04:38PM (#28708687)
      Yes it's so progressive that every new car comes with a tracking device built in so the govt always knows where you're driving. It also knows when you go to fast. They have this amzing system whereby if you drive over the speed limit a siren sounds in your car and gets louder and louder until you slow down to within the limit. Driving around Dubai you'll be passed by speeding cars with a terrible wailing siren sounding out over the terrible bass heavy music. These drivers are Emiratis, locals (70% of the population is foreign workers). They won't have to pay the fine so as long as they can stand the noise they'll drive as fast as they like. It's a bizarre phenomenon. It's absolutely no surprise that the state monopoly telco would also like access to all your communications whatever device you use. Skype is banned, and tor is blocked and using any privacy enhancing encryption leads not to the unfettered web but to the court house. Also progressive: jail time for sex outside of marriage, deportation with no notice if your boss withdraws your work permit and so on. I guess it looks progressive next to Saudi, but mostly it isn't progressive, only rich.
      • A cousin of mine lived there in the early 90s. He said that the speeding buzzer was there to remind the locals to turn up the radio ;)
      • Re: (Score:2, Interesting)

        I dunno, some parts of your comments seem rather exaggerated. First off, Emaratis HAVE to pay speeding fines. I know that because I'm an Emarati myself. And no, we dont get some special discount. We might be able to get away with it because we know where all the traffic radars are and so we slow down just in time :P There isn't any "siren" implanted in our cars. It's just the standard "bell" that comes out from the car when you go above 120km/h . I really don't think it's due to a government regulation, b
        • we know where all the traffic radars are and so we slow down just in time

          Do not try this in your Pajero: Over 250kmph, the cameras usually don't register a passing vehicle.

          It's just the standard "bell" that comes out from the car when you go above 120km/h . I really don't think it's due to a government regulation, but it's probably dependant on the car itself.

          It is not from the car manufacturer.

        • Sometimes tor works, sometimes not. Sometimes p2p networks are acessible, sometimes not. Why is Skype and other internet telephony forbidden? It gives users access to encrypted communication and threatens Etisilat's monopolistic pricing. Why does the Blackberry get a UAE specific update? To disallow encrypted communication. I can't work out why flickr is blocked ....
          • Re: (Score:2, Interesting)

            P2P networks like Bittorrent and Gnutella always work with me. Never had any problems with it. And if tor doesn't work, I really think it's tor's fault, and not the ISP. Tor is encrypted, isn't it impossible for the ISP to "block" it?

            Apparently, VoIP services aren't completely blocked. It's just the ones that allow you to do cheap PC-to-Phone calls that are blocked, as it would kindof interfere with Etisalat's revenue. However, things like SIP and Google Talk, where it's just PC-to-PC works perfectly fi
            • tor can be blocked if you can stop the initial connection to a tor node or can block tor's directory servers. This is something like playing whack-a-mole but it can be done and was in the past. I haven't been in UAE for a couple of years so perhaps they got bored of chasing their own tails. The other approach for a govt to take is to run tor exit nodes themselves and capture the traffic as it exits unencrypted, which doesn't give you both sides of an exchange but does give you a nice starting point for id

      • You sure that this "siren" is infact caused by speeding?

        I was in egypt a few years ago, and all the taxi drivers and most of the locals had installed a "manual override" switch on their dash for the car alarm. Basically they would flick the switch so the alarm would start howling, then they would drive like complete nutbars. Stuck behind a truck? Simple, your driver would flick the switch, honk their horn and flash their lights as quickly as possible and just pull out into oncoming traffic.

        As far as I c

        • Yes am sure :-) It's there to make your brain scream when you drive too fast. I was fairly amazed by it....had just arrived, my partner was living there and picked me up from the airport when this big SUV came screaming past with music *blasting* and an amazing and very non-musical noise accompanied it. She explained what it was, I didn't believe her so she put her foot down and gave me a demo. I'd been living in Bangkok before so for a noise to surprise me it really had to have an impact. Like someone el

        • Re:UAE - no surprise (Score:4, Informative)

          by julian67 (1022593) on Wednesday July 15, @06:16PM (#28709961)

          If you have a new car (purchased in the last 2 years) it has a tracker in the license plate. I know this is true in Dubai, it may be different in other emirates. You will get in some deep trouble if the license plates are not affixed properly or appear to have been tampered with. You can see traffic accidents where the cops arrive, check the license plates are affixed and in order (on the right vehicle) and then their work is done and they leave. Same for the speed siren (maybe siren isn't the best term but when it's going at full volume it's impressive...can be heard very loudly from inside other cars...all mobile with windows up and aircon on)....it starts of as a gentle reminder and gets louder and louder and louder....

          I hadn't mentioned homosexuality and I don't equate sex outside of marriage with homosexuality (necessarily).

          Adultery = prison in UAE.

          Dubai is liberal only compared to states where full sharia law is practised. If you're a foreigner or a local who dresses western style yes you can drink alcohol and if you're on a tourist visa you can share a hotel room with your partner without being married. If you're local or have a resident visa then you had better be very careful about your private life and keep it extremely private, even secret if you sleep with anyone other than your spouse. You'll notice that nobody in local dress is ever seen drinking alcohol. They won't be served and may have a lot of explaining to do. Similarly at the duty free shops and on UAE airlines an Arab won't get a drink unless in western clothes. It's a distinctly odd place where appearance is everything. You can *kind of* do as you please as long as you're furtive and don't embarrass anyone or do anything unconventional publicly. This 'freedom' doesn't extend to expressing yourself freely or to accessing uncensored tv, radio, or internet.

          • Re:UAE - no surprise (Score:4, Interesting)

            by spire3661 (1038968) on Wednesday July 15, @06:37PM (#28710199)
            Why would any normal western person subject themselves to such de-humanizing rules? You couldnt pay me to go to UAE. Its not that im a trouble-maker or rabble-rouser, but it seems that in those types of countries very small missteps can land you in a whole heap of trouble. Its fine if they want to run their sovereign nation like that, I jsut dont ever plan on subjecting myself to their rules.
            • Re: (Score:3, Informative)

              Why do foreigners live there? Generous salaries and no tax. I'm not sure many people want to set up home permanently but if you can work there for a higher salary than at home, pay no tax, get generous benefits (health, a house etc) then in 5 or 10 years you can have saved a really big pile. For workers from India, Pakistan, Philipines etc there aren't the generous benefits and nice accommodation but they can make a lot more than at home especially if they are skilled. They can go home at the end of their
              • Bear in mind that a lot of the lower income South Asian workers are systematically defrauded by by the Emiratis. They are often promised much higher pay than they receive, their passports are stolen by their employers to prevent them leaving, and they work under terrible conditions.

                A good many would never have gone their if they knew how it would work out.

                • This happens but I've also met people in India who came back with good amounts saved. I met a tractor parts supplier who set up his business from the money he made in UAE (construction) and a man running a trucking company (had worked a long time as a driver in UAE), same story, so it can't be happening to everyone. One unfortunate social phenomenon is Indian workers coming home from the middle east with more money than would ever have been possible if they had stayed at home, and then deciding they now m
          • Never been to Vu's Bar, have you?

    • As far as non-north-american countries go - the UAE is very progressive.

      [Citation needed]

      The reason I'm asking is because I've known several people who've worked in embassies over there, and this is not what they've told me about it.

    • > As far as non-north-american countries go - the UAE is very progressive

      Could you please tell me what do you mean by "Progressive" ? . Coz, I have been living in many countries of Middle East for years and this includes UAE also and they all are same more or less. Like other countries, UAE has the following,

      -- Family dictatorships which have absolute control about every element of the society and economy.
      -- No Democracy in any tangible meaning of that term
      -- Absolutely no freedom of expression(UAE does
    • As far as non-north-american countries go - the UAE is very progressive.

      A statement that could only come from someone with basically no international experience or knowledge. UAE is as progressive as the Salem Witch Trials. The only reason people even notice it is because it's more progressive than neighbours like Saudi Arabia, which are among the most oppressive/regressive/big-messive in the world. This has allowed the Emirates to emerge as a more comfortable destination for regional oil money.

      Further hi

      • Ahhh luxury. I remember privacy once... It's been over eight years now but I'm pretty sure I'd like to have some of that again...
      • Re:UAE - no surprise (Score:4, Informative)

        by Anonymous Coward on Wednesday July 15, @04:22PM (#28708495)

        "As far as non-north-american countries go - the UAE is very progressive" Hahahahaha, ahem, sorry I mean LOL. Are you serious? What's so "progressive" about north american countries? Different isn't better per se. "in North America we are an odd country and culture - we simply take it as the norm that nobody will listen to us" That's at least a generalisation, and some might say naive. "a foreigner in a position of influence that he would be monitored regularly if not constantly." Yes, that would never happen in north America.

        Where shall I start? Women's Rights Minority Rights Freedom of Assembly Voting And this is just for starters. The UAE is very progressive, in comparison to other Middle Eastern countries, but still many decades behind the "decadent" West.

          • Re: (Score:2, Insightful)

            by Anonymous Coward

            Where shall I start?
            The death penalty, no social security, no basic healthcare, the gun and the bible.
            And this is just for starters. The USA is very progressive, in comparison to other American countries, but still many decades behind the "decadent" Europeans.

            See, there's no truth, only peception.

            -Death Penalty: All countries have this, just not for the same crimes. Try committing treason in most places and see what that gets you, and Genocide is punishable by death in pretty much any country that doesn't have general Death Penalty. I'm not saying the US is right, but don't try to pretend your country won't kill someone if they feel they have just cause.

            - Social Security: Umm, yes we do have that.

            - Healthcare: Again, we do have that, through Medicaid and multiple other programs. We just don't have o

            • Australia (Score:2, Insightful)

              by Anonymous Coward

              Death Penalty, no we dont have it for any crime, this is the touchstone for the difference between civilised countries and others. Only uncivilised countries have the death penalty.

              Socail security- You dont have a proper social security system compared with other countries.

              Health Care-The US does not have universal health care but spends more than countries that do, quite an achievement.

              The Gun- As much a religion to some in the US as the bible, we got rid of most of the guns in our society and we have no r

              • The Federal act abolishing the death penalty is one of the most accessible pieces of legislation I've had the pleasure to read:

                DEATH PENALTY ABOLITION ACT 1973 - SECT 4
                Abolition of death penalty
                A person is not liable to the punishment of death for any offence.

          • So you expect the government to provide everything to you?

            I always thought if you wanted something you worked towards getting it.
            You want good health care, you pay for it.
            You want a fancy car, you pay for it.
            You want a good retirement, you pay for it.

            If you do not cover your own ass, you are stuck. It is hard and cold, but it is reality. Do I expect the government to give me health care, no. The social security check will be less then the stamp it took to get it to me at the rate it is going. I am not count

            • So you'd rather spend more money on inferior health care than have the government pay the bill for you (with, ultimately, your money)? We don't have the best health care in the world, we do have the most expensive. Seems like strong evidence that an inefficient government might be worse at bilking you than an extremely efficient for-profit corporation. If you want to pay for your health care out of pocket, that's great, but don't drag those of us without a masochistic streak down with you.

            • Re:Bullshit (Score:4, Informative)

              by tolan-b (230077) on Wednesday July 15, @06:14PM (#28709951)

              > By the way, I know how healthcare works in Europe.
              > "Oh, you have insurance, come ahead now." Maybe
              > Greece and Italy aren't part of Europe, but your
              > universal healthcare seems to be a case of some
              > pigs are more equal.

              Eh? Can't comment on anywhere else, but in the UK having insurance makes no difference to your treatment in the NHS. It means you can go to a private provider, but it makes no difference to your NHS provision.

  • How slightly? (Score:5, Informative)

    by damn_registrars (1103043) on Wednesday July 15, @03:31PM (#28707891) Journal

    slightly excessive battery drain

    As a crackberry user myself, I can tell you that sometimes a change in battery life isn't even something I would worry much about. Considering the number of applications that many of us have on our 'berries, the number we have in the background at any given time, and the amount we use the applications in the foreground, a noticeable shift in battery life between Tuesday and Wednesday might not be considered abnormal. I know there are people who just charge every night religiously because they always want to start with a full battery in the morning; if they ended at 45% instead of 55% they might not think anything of it as long as their charge made it to the end of the day.

    On the other hand if they normally end at 45% and now they don't make it through the day, they would likely notice that.

    • Also, I doubt that anyone would think it was software, most people would shrug and think that their battery was wearing out and get a new battery or BlackBerry.
    • I know if I leave google maps on in the background on my blackberry, the batter life is pretty much cut in half. I notice that pretty quickly.

  • Why would the carrier need to route messages and data coming through their systems *back* to their systems to read them? They are, after all, the carrier of all this data in the first place. Why can't they just sniff around in it in the middle?

    Something smells fishy.
    • Supposedly, e-mail between the company's server and the device is encrypted (although at one time, there were some protests to using Blackberries because the messages pass through RIM's servers which were located somewhere in Canada - I don't know if that's still the case).

    • by cvolny (1583581) on Wednesday July 15, @03:57PM (#28708177)
      From the Register: "While text messages and phone calls are usually more easily intercepted at the network operator, the BlackBerry architecture doesn't lend itself to that kind of legally-authorised interception, which has caused problems in several other countries. It seems probable that this application was an attempt by the authorities to circumvent that architecture, and it will be interesting to see if a similar application appears on competing UEA operators."
  • So I am paying for my bandwidth twice, first to receive the message and a second time for it to be forwarded to TPTB. Talk about being fsckd!

  • More information (Score:5, Interesting)

    by mothrsuperior (981616) on Wednesday July 15, @03:54PM (#28708141)

    the register has a followup (including some code) here [theregister.co.uk].
      Apparently [etisalat.ae] etisalat claims the spyware is for troubleshooting during the 2g to 3g upgrade.

    • by JCSoRocks (1142053) on Wednesday July 15, @04:13PM (#28708373)
      Haha, of course! Troubleshooting network issues is so much simpler when you're using twice the bandwidth as you were before just so that you can send yourself a copy of everything being sent.
  • by dougsyo (84601) on Wednesday July 15, @03:58PM (#28708185)

    The Register article stated:

    No one from Etisalat, RIM, or SS8 is saying anything about the issue, despite the fact that the application appears remarkably difficult to remove. Enterprising hackers, though, have discovered it can be done, with one providing a useful utility (seventh message down) to automate the process.

    It pointed to this link: http://supportforums.blackberry.com/rim/board/message?board.id=BlackBerryDeviceSoftware&thread.id=5504&view=by_date_ascending&page=2 [blackberry.com]

    But if you follow it you get:

    The message you are trying to access has been deleted. Please update your bookmarks.

    Interesting.

    Doug

  • I'm not very familiar with RIM's network architecture, so it wasn't clear to me whether the UAE needed RIM's help in distributing the spyware or whether it was entirely the doing of the local phone carrier in the UAE.

    Would the UAE had to have had RIM's help or did they simply buy the services of the third-party spyware vendor?

    -Sean

    • " as well as crippling battery life." is not the same as "a slightly excessive battery drain."

      It's slightly crippling?
      • You can make the argument, by analogy, that "a slightly excessive gunshot wound to the kneecap" is "crippling."

        Nothing to see here. Move along, Slashcitizen.

      • Common usage of crippling implies grave impairment. You don't call a guy with a sore finger crippled, for example. Pretending that using a word is fine just because the dictionary says it means the same thing as another while blatantly ignoring common usage is disingenuous at best.

        • homosex is sinful, you dirty fucking sodomite.

          So says "Reasoned Mind". Funny.

            • by Freetardo Jones (1574733) on Wednesday July 15, @03:50PM (#28708115)

              You say it as if its a bad thing.

              That's because it is.

              I, for one, would rather see Jobs get his liver than, say, some old person who worked as a machinist for 30 years, or even worse, an alcoholic native american.

              Yeah, because the only choices were either him or the two extreme examples you've given. There are probably plenty of people on the list far more deserving than Jobs who got bumped down because they couldn't afford to buy their way to the top.

                • Fine, I suggest we determine who is most deserving by the age old method of "who has earned the ability to do it". Now...inheriting the wealth isn't exactly earning it, but Jobs didn't inherit the wealth he used. So...no problems here right?

                  What if I "earned" my money by winning the lottery? Insider trading? Other non-productive financial shenanigans? There are a lot of ways to get rich without providing anything of value, or even by making the world a worse place.

                  An individual, faced with death, did everyt

Xerox never comes up with anything original.