Re: PIM SecurityException in Nokia N72

Hi all,

this is really a frightening development lately with all those =20
security "improvements" of the MSA. Everything is even more restricted =20=

than before. Mind you, I think signing is a good thing so in theory we =20=

can all just sign the application and that's sorted. Unfortunately the =20=

real world out there just does not allow to sign application in a =20
sensible manner: some operators remove root certificates (like =20
Verisign, Thawte etc). Not all devices support root certificates. So =20
there is no certificate that can be used everywhere with the notable =20
exception of Java Verified, which is almost (!) ubiquitous. However, =20
using Java Verified is very, very cost intensive, especially when you =20=

have different variants of your application for different handsets =20
(which is some cases is required due to the fragmentation). No every =20
company can afford to pay around 300$ for each version update and for =20=

each application variant. I've seen a lot of gaming companies =20
releasing around 300 different variants of their application - taken =20
the margins into account you have no chance to finance Java Verified =20
in those circumstances.

So my personal wish list for the next MSA release is: either use =20
sensible security recommendations or provide a mandatory way how we =20
all can sign applications, e.g. by mandating the same unremovable root =20=

certificate for all MSA compliant handsets. Additionally I'd like to =20
see that Third Party certification such as Thawte should suffice for =20
getting all requested permissions (possibly by asking the user at the =20=

first usage of a specific permission after the installation).

Another side note regarding the Series 60 Application Manager: please =20=

allow to set security in the Options menu for the application - in =20
that way at least advanced users will be able to find those settings; =20=

normal users will never, ever find out how they can change security =20
settings on Series 60 (it took me about half an hour until I found =20
this myself - and I was knowing what I was looking for).

Now I can stop my rant ;-)

Take care,
   Robert


On Aug 20, 2008, at 15:39 , Daniel Rocha wrote:

> You should configure your midlet in Application Manager to "Always =20
> ask"
> permission setting for "Edit user data". Go to Menu / Applications /
> App. Mgr. / Highlight your midlet, choose "open" from the menu and
> configure this setting.=3D20
>
> Alternatively, you can sign the midlet so the security prompts aren't
> shown.
>
> Daniel
>
> -----Original Message-----
> From: A mailing list for KVM discussion
> [mailto:[email protected]] On Behalf Of ext
> [email protected]
> Sent: Wednesday, August 20, 2008 9:42 AM
> To: [email protected]
> Subject: PIM SecurityException in Nokia N72
>
> hi plz help me
> i am storing phone number and name from j2me application into
> addressBook.it is working prfectly on sun emulator but when i =20
> install on
> My Nokia N72.it retrive all contact but at the time of storing it =20
> throws
> SecurityException.
> plz help me to solve this problem.
> or there is any other way to store contact in addressBook.
> [Message sent by forum member 'ajay_kumar' (ajay_kumar)]
>
> http://forums.java.net/jive/thread.jspa?messageID=3D3D294361
>
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D=
3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D=
3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D
> =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D=
3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D
> =3D3D=3D3D=3D3D
> To unsubscribe, send email to [email protected] and include in the
> body of the message "signoff KVM-INTEREST".  For general help, send
> email to [email protected] and include in the body of the message
> "help".
>
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D=20
> 3D=20
> =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D=
3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D
> To unsubscribe, send email to [email protected] and include in =20
> the body
> of the message "signoff KVM-INTEREST".  For general help, send email =20=

> to
> [email protected] and include in the body of the message "help".

--
Robert Virkus
CEO Enough Software
S=F6gestr. 70
28195 Bremen
Germany

Email: [email protected]
Phone: +49 - (0)421 - 8409 938
Fax: +49 - (0)421 - 9889 132
Mobile: +49 - (0)160 - 7788 203
ICQ: 194752667

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff KVM-INTEREST".  For general help, send email to
[email protected] and include in the body of the message "help".