SymVPN 2.0 is released !

SymVPN 2.0 is released. The major difference from previous version is added FULL support for S60 3.2 and S60 5th editions. This means more applications can work via SymVPN 2.0 created Access Points and take advantage of VPN security.

New SymVPN 2.0 is available for download from here

Updated version of SymNC 1.0 (Build 59) is here

Both upgrades are free for existing customers.

Please note, that you need to remove old SymVPN and SymNC from your phone before installing new versions as they are not backward compatible. Please make sure to write down software configuration before uninstall to restore your settings faster.

For your convenience here is some useful links: SymVPN 2.0 Compatible Applications (please update if you know more) and SymVPN 2.00 How to Install.

[Maemo 5 / N900 Apps] Remote Security : lock or unlock the N900 by sending to it an SMS or chat message !

Remote Security can locking the phone by sending sms/chat message. The package has :

1. rs - binary to listen incoming sms/chat messages
2. librsapplet.so - control panel applet to register lock/Unlock codes
3. librs.so - to provide common functionality for 1 and 2.


Ps : It's a very early (alpha) testing applet, so i don't recommand to install it, it still has some issues, wait a few days, new packages will be released ;)


Via : talk.maemo.org

Signed mobile malware prompts Symbian security review

The recent distribution of digitally signed mobile malware raises troubling questions about Symbian's automated approval procedure.

Symbian has promised to tighten up its testing procedures following the distribution of the Sexy Space mobile worm, described by security firms as the first text message worm in history.

The malware posed as a legitimate application but was actually programmed to steal subscriber, phone, and network information from victims. This information was forwarded onto a site under the control of hackers...

The website automatically pushes an SIS installation package onto users' Symbian phones. "You get one prompt: Install Sexy Space? Yes or No," as you can see on this video :



As you you see, because the installation package has been signed by Symbian, no further warning appears. The malware was submitted through Symbian's Express Signing procedure - where the majority of applications are not inspected by humans !

In response to the incident, Symbian promised to review its security procedures.

"As soon as we were notified of that (the following day) we revoked both the content certificate and the publisher certificate used to sign the malware,"

a posting on Symbian's security blog explains.

"That means that the Symbian software installer will not now install the malware, providing that revocation checking is turned on."

"We do have security measures which try to catch submitted malware before it gets signed, and we are currently investigating how those can be improved in the light of this latest incident,"

it said.

You can read an FAQ by F-Secure about this here

Source : theregister