Comments on: WARNING: iPhone 3GS Encryption Places Enterprise Data At Risk

By: 10+1 Mobile Application Development Trends for 2010

10+1 Mobile Application Development Trends for 2010 — Tue, 22 Nov 2011 15:20:52 +0000

[...] of MyST Technology Partners and Senior Editor for iPhoneCTO, puts forward in a blog post, WARNING: iPhone 3GS Encryption Places Enterprise Data At Risk, that iPhone 3GS encryption is weak and extremely vulnerable. To look at how serious this can be, [...]

By: 10+1 Mobile Application Development Trends for 2010 | Sunil Verma

10+1 Mobile Application Development Trends for 2010 | Sunil Verma — Tue, 14 Dec 2010 08:54:14 +0000

By: hard disk recovery

hard disk recovery — Mon, 14 Jun 2010 00:51:19 +0000

Still iPhone 3G is new for users so users are not familiar with this phone.

By: hard disk recovery

hard disk recovery — Sun, 13 Jun 2010 20:51:19 +0000

Still iPhone 3G is new for users so users are not familiar with this phone.

By: mack123

mack123 — Thu, 13 Aug 2009 11:41:36 +0000

Help me chose one please…

http://www.puremobile.com/Nokia/Nokia-N97-3G-NA…
or
http://www.puremobile.com/Apple/Apple-iPhone-3G…

thank you.

By: deusextechnica

deusextechnica — Mon, 03 Aug 2009 19:44:26 +0000

Apple addressed this issue on July 31st with iPhone OS 3.0.1, available free to all owners of iPhone, iPhone 3G, and iPhone 3GS.

By: dandearing

dandearing — Fri, 31 Jul 2009 15:03:52 +0000

Issues with security enforcement on the iPhone are squarely things only Apple can solve. That being said, Trust Digital EMM does give IT the tools they need to monitor user compliance (i.e. they are using smartphones approved by IT and according to corporate policy) and track smartphone assets. That provides IT with an accurate picture of their smartphone population so that they can “plan and not panic” when these types of issues surface.

Many in IT might say, just avoid the issue and use Blackberry. I don’t believe that’s a viable strategy given user pull for non-Blackberry devices such as the iPhone and the Palm Pre. I believe that most will view this as a point in time problem. So, I agree with Bill’s prediction that usability will trump fear. That helped Blackberry overcome IT frustrations about availability back in 2007 You can imagine Microsoft’s Schadenfreude over the Blackberry NOC outages that at one point left 5M users without service for 12 hours. Microsoft had a PR heyday, but in the end Blackberry solved these point in time problems.

By: billfrench

billfrench — Thu, 30 Jul 2009 21:15:27 +0000

Frank:

Excellent comments - I agree with you. My objective in this article was to call attention to one of many security issues that exist with iPhone.

"Funny I guess iPHONE CTO needs to get eductaed on the encryption regulation set to take effect 1/1/2010 that MA is enforcing that applies to any company that deals with consumer data."

We're always looking for help, especially in topics of regional compliance. Feel free to continue to call out issues that impact your world. I can be reached at bfrench@iphonecto.com.

"Encryption matters and security / enforcement is not something that can be an after thought."

Yes, this is a success factor these days for all Internet products and services.

"It seems no one on iPhone CTO has ever dealt with HIPAA, FINRA, SEC regulatory reporting."

I can't speak for all authors, but it's pretty difficult for us to stay on top of multiple industry regulatory agencies. I have a background in accounting and finance so I'm pretty comfortable with FINRA and SEC issues. But the purpose of this article is to report the news as we understand it. Perhaps we can dive into deeper aspects of your comments in a future article.

By: Frank Castle

Frank Castle — Thu, 30 Jul 2009 12:03:26 +0000

Funny I guess iPHONE CTO needs to get eductaed on the encryption regulation set to take effect 1/1/2010 that MA is enforcing that applies to any company that deals with consumer data. Encryption matters and security / enforcement is not something that can be an after thought. You accept that risk - then accept the $5,000 per record fine when an iPhone is stolen / lost and you have to report what expose said incident caused.

It seems no one on iPhone CTO has ever dealt with HIPAA, FINRA, SEC regulatory reporting.

This is a major failure on Apple's part and further shows how disconnected they are with what is required for enterprise mobility.

Trust Digital Dan - I'd love feedback on if your product does anything to prevent this glaring weakness?