WAP email suspended after security breach in NZ

By Bruce Simpson, ZDNet Australia, 26 April, 2002 10:34

NEWS

Telecom New Zealand is suspending its DJuice WAP-based email service following the discovery of a potentially damaging security hole. Some users of the service have reported that they have been able read emails addressed to other people and that their own private communications have ended up on the screens of unwitting third parties. Telecom's support desk admitted there is a problem, attributing it to a small window of opportunity that exists during the period when one user logs out and another logs on to the same connection. It was explained that there is a 60-second delay after a WAP user disconnects before the cache associated with their session is cleared. If another user logs on to the same port during that time, the contents of the previous user's cache becomes visible to them. One WAP service user claims to have been told by a Telecom helpdesk analyst named Daniel that it is a known problem but only occurs within "certain parameters" and certain timeframes. Other callers claim to have been told that the situation is "pretty rare" and only occurs in a few "isolated cases". Whilst the help desk said that technicians are "working hard to rectify" the matter, it would not commit to a resolution date. Telecom spokesperson Andrew Bristol said that all affected customers will be advised of the shutdown through their phones. Bristol assured ZDNet Australia that the service would not be restored until the outstanding security problem is resolved. Despite the company's assurance that the problem is not widespread, it appears to have affected some users on multiple occasions.

WAP was supposed to be the mobile answer to http, but does it deliver? Discover the latest development at ZDNet UK's WAP News Section. Have your say instantly, and see what others have said. Go to the Telecoms forum. Let the editors know what you think in the Mailroom.

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

ZDNet UK Live

> I'm told it's somewhat annoying when people have their Macs stolen > and Apple stores treat the thief as the owner, but there you go. Ouch,...

13 hours ago by BrownieBoy on AMD Ultrathins to challenge Intel Ultrabooks

@kevinmchapman. OK, I acknowledge that 'most' was a gratuitous throwaway comment as an afterthought and too presumptuous. As to proof, as you...

17 hours ago by Moley on A tale of two distros: Ubuntu and Linux Mint

@BrownieBoy > Works really well for thieves.... >> Nice attempt to deflect the argument by tossing in a point that's totally >> irrelevant, even...

18 hours ago by Jack Schofield on AMD Ultrathins to challenge Intel Ultrabooks

fantastic that the so called piracy bills have been withdrawn. however, these anti-democracy supporters are still in the shadows so lets be alert...

19 hours ago by raskolnikof on SOPA, Protect IP support wavers in face of online protest

Please God no; teach them anything you like - thinking rationally, the uses and misuses of data, what data is and what it's not - but leave the...

21 hours ago by Tony Douglas via Facebook on Kids are the future. Teach ’em to code.

@Jack, > Works really well for thieves.... Nice attempt to deflect the argument by tossing in a point that's totally irrelevant, even it were...

2 days ago by BrownieBoy on AMD Ultrathins to challenge Intel Ultrabooks

Make that 13 people now - I got refused today at Manchester airport. I thought I was up to date on this legislation - I knew of the EU ruling from...

2 days ago by bootlegger on UK airport body scans will not be opt out

Don't forget to check out apps like GoodReader or SlideShark either, they're indispensible for people on the go in presentation situations. Best...

2 days ago by tinycg on Four top iPad apps for people on the move

Well it seems there is something a number of us agree on. Why is the Ubuntu Unity launcher so ugly? I thought perhaps it was something to do with...

2 days ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint

Duplicate comments are not made intentionally. Its very good to know that now you are keeping check on this problem because sometimes a commenter...

2 days ago by Freebies202 on Microsoft fixes blog comments, speeds up blogs with open source

"the very significant number of users" and "many (most) of us" - you have no evidence for these statements. It is a fact that most users are saying...

3 days ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint