4 ms·
The linked article on Motherboard [0] expands on this a little bit: > BlackBerry (formerly RIM) encrypts all messages sent between consumer phones, known as PI
by jlgaddis 11y ago
The linked article on Motherboard [0] expands on this a little bit:
> BlackBerry (formerly RIM) encrypts all messages sent between consumer phones, known as PIN-to-PIN or BBM messages, using a single “global encryption key” that’s loaded onto every handset during manufacturing. With this one key, any and all messages sent between consumer BlackBerry phones can be decrypted and read. In contrast, Business Enterprise Servers allow corporations to use their own encryption key, which not even BlackBerry can access.
[0]: http://motherboard.vice.com/read/rcmp-blackberry-project-clemenza-global-encryption-key-canada http://motherboard.vice.com/read/rcmp-blackberry-project-cle...
- ghshephard 11y agoRight - that's the part that I have a really hard time believing. Even having a single decryption key per device seems insane - isn't it pretty standard practice to frequently rotate your session key? I'm wondering if this was something that Blackberry was doing back in the early 90s, and, as the state of the art advanced, they never upgraded their systems. It really sounds terribly insecure to me.
- coldcode 11y agoHow are these people still in business?
- mschuster91 11y ago> I'm wondering if this was something that Blackberry was doing back in the early 90s, and, as the state of the art advanced, they never upgraded their systems. It's called backwards compatibility... though that's not really an excuse.
- misnome 11y agoCouldn't the message could have the "real" encryption key encrypted with the private blackberry key, thus allowing them to access it if required?