3 ms·

I can fully see how this could happen. Too many companies don't understand the value of keys like this, and won't until they have a similar situation. I wonder

I can fully see how this could happen. Too many companies don't understand the value of keys like this, and won't until they have a similar situation. I wonder how exactly the criminals came to have them in the first place, but would be willing to bet it was ultimately incompetence by someone at Nokia.

asmosoinio 12y ago
Having done a few code signings physically at Nokia Tampere back in the Symbian days, I would say they were pretty serious about these codes. Not that the security was 100% tight, but it did involve having to go to a single locked up computer with someone looking at you, keys to the safe in different places, required two separate persons from the signing to be there etc. Impressed myself at least.
kiiski 12y ago
The Helsinki Times article[1 english] says they suspect it was an ex employee. "Information obtained by Helsingin Sanomat from two different sources indicates that Nokia believes the blackmailer to be a Finnish citizen who participated in the development of the user interface. The suspect was able to obtain the highly-classified encryption key due to a data security vulnerability." [1] http://www.helsinkitimes.fi/finland/finland-news/domestic/10933-nokia-held-to-ransom-over-symbian-vulnerability.html http://www.helsinkitimes.fi/finland/finland-news/domestic/10...