Re: PIM SecurityException in Nokia N72
Ken Walker <[email protected]> Thu, 21 Aug 2008 10:35:05 -0400
| Newsgroups | gmane.comp.java.sun.kvm |
|---|---|
| Message-ID | <OFF8867476.13C22C18-ON852574AC.004F7156-852574AC.00502380@ca.ibm.com> |
--1__=0ABBFE3FDFDCF7C68f9e8a93df938690918c0ABBFE3FDFDCF7C6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Nice rant. I think most users would be happy with the Hit Once permission model. = That is to say, any request for access to PIM, Files, Network, Bluetooth, GP= S, etc. presents the dialog asking "The application Blort would like to access your location information."= "Allow Once", "Allow Always", "Deny" And a way to reset permission to default for any or all applications (including the built in ones). While there is an up front cost for being an independent iPhone develo= per ($99), the rest of the costs associated with testing and distribution a= re included. Perhaps if there was a MIDlet store which would assume that = role we might have a better chance of getting apps tested and distributed. /** @author Ken Walker, J9 Embedded Java Class Library Manager, IBM Ottawa= Lab @see http://www.ibm.com/software/ca/en/ottawalab @return [email protected] */ |------------> | From: | |------------> >--------------------------------------------------------------------= -----------------------------------------------------------------------= -------| |Robert Virkus <[email protected]> = = | >--------------------------------------------------------------------= -----------------------------------------------------------------------= -------| |------------> | To: | |------------> >--------------------------------------------------------------------= -----------------------------------------------------------------------= -------| |[email protected] = = | >--------------------------------------------------------------------= -----------------------------------------------------------------------= -------| |------------> | Date: | |------------> >--------------------------------------------------------------------= -----------------------------------------------------------------------= -------| |08/20/2008 10:15 AM = = | >--------------------------------------------------------------------= -----------------------------------------------------------------------= -------| |------------> | Subject: | |------------> >--------------------------------------------------------------------= -----------------------------------------------------------------------= -------| |Re: PIM SecurityException in Nokia N72 = = | >--------------------------------------------------------------------= -----------------------------------------------------------------------= -------| Hi all, this is really a frightening development lately with all those security "improvements" of the MSA. Everything is even more restricted than before. Mind you, I think signing is a good thing so in theory we can all just sign the application and that's sorted. Unfortunately the real world out there just does not allow to sign application in a sensible manner: some operators remove root certificates (like Verisign, Thawte etc). Not all devices support root certificates. So there is no certificate that can be used everywhere with the notable exception of Java Verified, which is almost (!) ubiquitous. However, using Java Verified is very, very cost intensive, especially when you have different variants of your application for different handsets (which is some cases is required due to the fragmentation). No every company can afford to pay around 300$ for each version update and for each application variant. I've seen a lot of gaming companies releasing around 300 different variants of their application - taken the margins into account you have no chance to finance Java Verified in those circumstances. So my personal wish list for the next MSA release is: either use sensible security recommendations or provide a mandatory way how we all can sign applications, e.g. by mandating the same unremovable root certificate for all MSA compliant handsets. Additionally I'd like to see that Third Party certification such as Thawte should suffice for getting all requested permissions (possibly by asking the user at the first usage of a specific permission after the installation). Another side note regarding the Series 60 Application Manager: please allow to set security in the Options menu for the application - in that way at least advanced users will be able to find those settings; normal users will never, ever find out how they can change security settings on Series 60 (it took me about half an hour until I found this myself - and I was knowing what I was looking for). Now I can stop my rant ;-) Take care, Robert On Aug 20, 2008, at 15:39 , Daniel Rocha wrote: > You should configure your midlet in Application Manager to "Always > ask" > permission setting for "Edit user data". Go to Menu / Applications / > App. Mgr. / Highlight your midlet, choose "open" from the menu and > configure this setting.=3D20 > > Alternatively, you can sign the midlet so the security prompts aren't= > shown. > > Daniel > > -----Original Message----- > From: A mailing list for KVM discussion > [mailto:[email protected]] On Behalf Of ext > [email protected] > Sent: Wednesday, August 20, 2008 9:42 AM > To: [email protected] > Subject: PIM SecurityException in Nokia N72 > > hi plz help me > i am storing phone number and name from j2me application into > addressBook.it is working prfectly on sun emulator but when i > install on > My Nokia N72.it retrive all contact but at the time of storing it > throws > SecurityException. > plz help me to solve this problem. > or there is any other way to store contact in addressBook. > [Message sent by forum member 'ajay_kumar' (ajay_kumar)] > > http://forums.java.net/jive/thread.jspa?messageID=3D3D294361 > > =3D > 3D > =3D > 3D > =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3= D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D > =3D > 3D > =3D > 3D > =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3= D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D > =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3= D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D > =3D3D=3D3D=3D3D > To unsubscribe, send email to [email protected] and include in th= e > body of the message "signoff KVM-INTEREST". For general help, send > email to [email protected] and include in the body of the message= > "help". > > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D > 3D > =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3= D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D > To unsubscribe, send email to [email protected] and include in > the body > of the message "signoff KVM-INTEREST". For general help, send email > to > [email protected] and include in the body of the message "help". -- Robert Virkus CEO Enough Software S=F6gestr. 70 28195 Bremen Germany Email: [email protected] Phone: +49 - (0)421 - 8409 938 Fax: +49 - (0)421 - 9889 132 Mobile: +49 - (0)160 - 7788 203 ICQ: 194752667 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D To unsubscribe, send email to [email protected] and include in the = body of the message "signoff KVM-INTEREST". For general help, send email to= [email protected] and include in the body of the message "help". = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D To unsubscribe, send email to [email protected] and include in the body of the message "signoff KVM-INTEREST". For general help, send email to [email protected] and include in the body of the message "help". --1__=0ABBFE3FDFDCF7C68f9e8a93df938690918c0ABBFE3FDFDCF7C6 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline <html><body> <p>Nice rant.<br> <br> I think most users would be happy with the Hit Once permission model. = That is to say, any request for access to PIM, Files, Network, Bluetoot= h, GPS, etc. presents the dialog asking<br> <br> "The application Blort would like to access your location informat= ion."<br> <br> "Allow Once", "Allow Always", "Deny"<br> <br> And a way to reset permission to default for any or all applications (i= ncluding the built in ones).<br> <br> While there is an up front cost for being an independent iPhone develo= per ($99), the rest of the costs associated with testing and distributi= on are included. Perhaps if there was a MIDlet store which would assum= e that role we might have a better chance of getting apps tested and di= stributed.<br> <br> /**<br> @author Ken Walker, J9 Embedded Java Class Library Manager, IBM Ottawa= Lab<br> @see <a href=3D"http://www.ibm.com/software/ca/en/ottawalab">http://ww= w.ibm.com/software/ca/en/ottawalab</a><br> @return [email protected]<br> */<br> <br> <br> <img width=3D"16" height=3D"16" src=3D"cid:1__=3D0ABBFE3FDFDCF7C68f9e8a= [email protected]" border=3D"0" alt=3D"Inactive hide details for Rober= t Virkus ---08/20/2008 10:15:27 AM---Hi all, this is really a frighteni= ng development lately wit"><font color=3D"#424282">Robert Virkus ---08/= 20/2008 10:15:27 AM---Hi all, this is really a frightening development = lately with all those</font><br> <br> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"1%"><img width=3D"96" height=3D"1" src=3D= "cid:[email protected]" border=3D"0" alt=3D= ""><br> <font size=3D"2" color=3D"#5F5F5F">From:</font></td><td width=3D"100%">= <img width=3D"1" height=3D"1" src=3D"cid:2__=3D0ABBFE3FDFDCF7C68f9e8a93= [email protected]" border=3D"0" alt=3D""><br> <font size=3D"2">Robert Virkus <[email protected]></font></td></tr= > <tr valign=3D"top"><td width=3D"1%"><img width=3D"96" height=3D"1" src=3D= "cid:[email protected]" border=3D"0" alt=3D= ""><br> <font size=3D"2" color=3D"#5F5F5F">To:</font></td><td width=3D"100%"><i= mg width=3D"1" height=3D"1" src=3D"cid:2__=3D0ABBFE3FDFDCF7C68f9e8a93df= [email protected]" border=3D"0" alt=3D""><br> <font size=3D"2">[email protected]</font></td></tr> <tr valign=3D"top"><td width=3D"1%"><img width=3D"96" height=3D"1" src=3D= "cid:[email protected]" border=3D"0" alt=3D= ""><br> <font size=3D"2" color=3D"#5F5F5F">Date:</font></td><td width=3D"100%">= <img width=3D"1" height=3D"1" src=3D"cid:2__=3D0ABBFE3FDFDCF7C68f9e8a93= [email protected]" border=3D"0" alt=3D""><br> <font size=3D"2">08/20/2008 10:15 AM</font></td></tr> <tr valign=3D"top"><td width=3D"1%"><img width=3D"96" height=3D"1" src=3D= "cid:[email protected]" border=3D"0" alt=3D= ""><br> <font size=3D"2" color=3D"#5F5F5F">Subject:</font></td><td width=3D"100= %"><img width=3D"1" height=3D"1" src=3D"cid:2__=3D0ABBFE3FDFDCF7C68f9e8= [email protected]" border=3D"0" alt=3D""><br> <font size=3D"2">Re: PIM SecurityException in Nokia N72</font></td></tr= > </table> <hr width=3D"100%" size=3D"2" align=3D"left" noshade style=3D"color:#80= 91A5; "><br> <br> <br> <tt>Hi all,<br> <br> this is really a frightening development lately with all those <b= r> security "improvements" of the MSA. Everything is even more r= estricted <br> than before. Mind you, I think signing is a good thing so in theory we = <br> can all just sign the application and that's sorted. Unfortunately the = <br> real world out there just does not allow to sign application in a  = ;<br> sensible manner: some operators remove root certificates (like <b= r> Verisign, Thawte etc). Not all devices support root certificates. So &n= bsp;<br> there is no certificate that can be used everywhere with the notable &n= bsp;<br> exception of Java Verified, which is almost (!) ubiquitous. However, &n= bsp;<br> using Java Verified is very, very cost intensive, especially when you &= nbsp;<br> have different variants of your application for different handsets &nbs= p;<br> (which is some cases is required due to the fragmentation). No every &n= bsp;<br> company can afford to pay around 300$ for each version update and for &= nbsp;<br> each application variant. I've seen a lot of gaming companies <br= > releasing around 300 different variants of their application - taken &n= bsp;<br> the margins into account you have no chance to finance Java Verified &n= bsp;<br> in those circumstances.<br> <br> So my personal wish list for the next MSA release is: either use = <br> sensible security recommendations or provide a mandatory way how we &nb= sp;<br> all can sign applications, e.g. by mandating the same unremovable root = <br> certificate for all MSA compliant handsets. Additionally I'd like to &n= bsp;<br> see that Third Party certification such as Thawte should suffice for &n= bsp;<br> getting all requested permissions (possibly by asking the user at the &= nbsp;<br> first usage of a specific permission after the installation).<br> <br> Another side note regarding the Series 60 Application Manager: please &= nbsp;<br> allow to set security in the Options menu for the application - in &nbs= p;<br> that way at least advanced users will be able to find those settings; &= nbsp;<br> normal users will never, ever find out how they can change security &nb= sp;<br> settings on Series 60 (it took me about half an hour until I found &nbs= p;<br> this myself - and I was knowing what I was looking for).<br> <br> Now I can stop my rant ;-)<br> <br> Take care,<br> Robert<br> <br> <br> On Aug 20, 2008, at 15:39 , Daniel Rocha wrote:<br> <br> > You should configure your midlet in Application Manager to "A= lways <br> > ask"<br> > permission setting for "Edit user data". Go to Menu / Ap= plications /<br> > App. Mgr. / Highlight your midlet, choose "open" from th= e menu and<br> > configure this setting.=3D20<br> ><br> > Alternatively, you can sign the midlet so the security prompts are= n't<br> > shown.<br> ><br> > Daniel<br> ><br> > -----Original Message-----<br> > From: A mailing list for KVM discussion<br> > [</tt><tt><a href=3D"mailto:[email protected]">mailto:KVM-= [email protected]</a></tt><tt>] On Behalf Of ext<br> > [email protected]<br> > Sent: Wednesday, August 20, 2008 9:42 AM<br> > To: [email protected]<br> > Subject: PIM SecurityException in Nokia N72<br> ><br> > hi plz help me<br> > i am storing phone number and name from j2me application into<br> > addressBook.it is working prfectly on sun emulator but when i &nbs= p;<br> > install on<br> > My Nokia N72.it retrive all contact but at the time of storing it = <br> > throws<br> > SecurityException.<br> > plz help me to solve this problem.<br> > or there is any other way to store contact in addressBook.<br> > [Message sent by forum member 'ajay_kumar' (ajay_kumar)]<br> ><br> > </tt><tt><a href=3D"http://forums.java.net/jive/thread.jspa?messag= eID=3D3D294361">http://forums.java.net/jive/thread.jspa?messageID=3D3D2= 94361</a></tt><tt><br> ><br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D= 3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D<br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D= 3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D<br> > =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D= 3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D<br> > =3D3D=3D3D=3D3D<br> > To unsubscribe, send email to [email protected] and include in= the<br> > body of the message "signoff KVM-INTEREST". For ge= neral help, send<br> > email to [email protected] and include in the body of the mess= age<br> > "help".<br> ><br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D <br> > 3D <br> > =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D= 3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D<br> > To unsubscribe, send email to [email protected] and include in= <br> > the body<br> > of the message "signoff KVM-INTEREST". For general= help, send email <br> > to<br> > [email protected] and include in the body of the message "= ;help".<br> <br> --<br> Robert Virkus<br> CEO Enough Software<br> S=F6gestr. 70<br> 28195 Bremen<br> Germany<br> <br> Email: [email protected]<br> Phone: +49 - (0)421 - 8409 938<br> Fax: +49 - (0)421 - 9889 132<br> Mobile: +49 - (0)160 - 7788 203<br> ICQ: 194752667<br> <br> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D<br> To unsubscribe, send email to [email protected] and include in the = body<br> of the message "signoff KVM-INTEREST". For general help= , send email to<br> [email protected] and include in the body of the message "help= ".<br> </tt><br> <br> </body></html>= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D To unsubscribe, send email to [email protected] and include in the body of the message "signoff KVM-INTEREST". For general help, send email to [email protected] and include in the body of the message "help". --1__=0ABBFE3FDFDCF7C68f9e8a93df938690918c0ABBFE3FDFDCF7C6--