Related: In 2009, Etisalat prompted its UAE BlackBerry users to install a surveillance application disguised as a performance update[1]. The update resulted in crashes and lowered battery life resulting in RIM to issue its own update to remove it.
Schneier on UAE to Ban BlackBerrys
11–20 of 27 posts
Re: Schneier on UAE to Ban BlackBerrys
#12Bonus feature: "For the record, I have absolutely no idea what this quote of mine from the Reuters story really means".
It means the person listening to Bruce had absolutely no idea what he was saying so when s/he paraphrased it, they just took words out.
And they complain that journalism is a dying profession.
Re: Schneier on UAE to Ban BlackBerrys
#13How would a startup go about selling monitoring services to the UAE government?
Get yourself a partnership deal with Cisco or Juniper UAE. And before you set feet in Abu Dhabi, sell your monitoring services to another government (preferably the U.S. government.) Then enter into a public negotiation with Saudi Arabia.
Hard, I know. But as soon as you sell to the UAE the rest of the Gulf will follow. Wherever Abu Dhabi goes (not Dubai!) the rest go. Dubai is such an anomaly, it's hard to predict your success if you first gain traction there (unless you're targeting South Asia; success in Dubai almost guarantees success in the Indian subcontinent.)
Saudi Arabia is always the first to show interest in a new technology, and the second to last to adopt it. Dubai gets the first regional office. Abu Dhabi buys it first. Kuwait and Qatar watch from afar, and only join in after they negotiate the best deals for themselves, and they're the first to iron out their laws to accommodate this social change (Kuwait, specially, is the most socially progressive country in the region). Bahrain and Oman usually take their time, and along with them comes the Saudi government.
Note: this information is extrapolated from vague familiarity with mobile phone adoption, GPS, broadband, Co-Ed higher education, franchise western food chains, etc.
Re: Schneier on UAE to Ban BlackBerrys
#14Schneier and WSJ seem to put an emphasis on the concept of government interest in monitoring its citizens (or subjects in the U.A.E. I guess). The internal motivations for this action may be different. For example, maybe the U.A.E. sees BB as a bit of critical infrastructure that they don't want other countries to be able to monitor.
First article: "The U.A.E. acted after RIM refused to set up a proxy server in the country as required by its 2007 contract with telecom provider Emirates Telecommunications Corp., a majority of which is owned by the government, according to the person familiar with the situation."
Second article: "The U.A.E. wanted RIM to locate servers in the country, where it had legal jurisdiction over them; RIM had offered access to the data of 3,000 clients instead, the person said."
Re: Schneier on UAE to Ban BlackBerrys
#15How would a startup go about selling monitoring services to the UAE government?
Considering that the traffic is encrypted between the devices and RIM's servers, you'd have to try to 1) break the encryption or 2) gain access to RIM's internal network, and 3) check your morals at the door. Good luck.
I wasn't asking specifically about this situation. I was considering niche markets like P2P. I know the government blocks torrents but I have seen many clients on the Gnutella network that are from the UAE.
Re: Schneier on UAE to Ban BlackBerrys
#16To be completely honest, I think this is a ploy by RIM to make them seem insanely secure. So secure that paranoid countries want to ban them because they can't evesdrop on their people.
Re: Schneier on UAE to Ban BlackBerrys
#17How would a startup go about selling monitoring services to the UAE government?
Get yourself a partnership deal with Cisco or Juniper UAE. And before you set feet in Abu Dhabi, sell your monitoring services to another government (preferably the U.S. government.) Then enter into a public negotiation with Saudi Arabia. Hard, I know. But as soon as you sell to the UAE the rest of the Gulf will follow. Wherever Abu Dhabi goes (not Dubai!) the rest go. Dubai is such an anomaly, it's hard to predict y…
It's the little freely shared nuggets like this that makes this community incredible. Thank you.
Re: Schneier on UAE to Ban BlackBerrys
#18>RIM makes a big deal about how secure its users' data is, but I don't know how much of that to believe: It sounds like RIM is describing normal public key encryption. I'm not sure why Schneier thinks they have the plaintext, though admittedly "customer data" could refer to anything.
Since you're presumably entering the data (i.e., email text) using a BlackBerry device, running an RIM-developed operating system, device drivers and so on, RIM most likely "have" your data.
At least that was how I interpreted it, and it makes sense to me.
Re: Schneier on UAE to Ban BlackBerrys
#19He makes an excellent point about that nonsense 'even we at RIM don't see the unencrypted data' which RIM seems to think convinces people. How can makers of the software doing the encryption not know the plaintext?
Corporate email is encrypted between the Blackberry device and the corporate mail server. RIM has no access to it.
Consumer email is encrypted between the device and RIMs own servers, therefore they have access to that data, just like any other ISP-hosted mail.
BlackBerry Messenger traffic could be encrypted device to device, but I don't know if that's actually the case.
Re: Schneier on UAE to Ban BlackBerrys
#20Schneier and WSJ seem to put an emphasis on the concept of government interest in monitoring its citizens (or subjects in the U.A.E. I guess). The internal motivations for this action may be different. For example, maybe the U.A.E. sees BB as a bit of critical infrastructure that they don't want other countries to be able to monitor. First article: "The U.A.E. acted after RIM refused to set up a proxy server in the c…
Some countries that are kingdoms still refer to the people as 'citizen'. United Kingdom passports says "British citizen"