Mobile devices Toolkit
Story: Microsoft push-email row escalates
Microsoft PUSH is dangerous in the wrong hands
As a Blackberry, GoodLink & MS PUSH installer I have seen some horrifying sites when it comes to MS PUSH. Almost every company I have been to that has already installed Microsoft PUSH was running it without an SSL certificate. As you all would be aware this would result in usernames and passwords being sent “in the clear” over the internet, and this includes admin users details. Another issue I have with Microsoft PUSH is that companies that previously had no inbound ports on their firewall open are now opening their network up for possible attack (i.e. Blackberry only requires an outbound port to be opened). Basically I have a long list of issues with the security side of MS Push as it too easy to setup incorrectly, even by people claiming to be “Network or Security Engineers” (Note: Reading a manual/install guide does overcome most issues).
So in conclusion I believe that BlackBerry and Good are the best options for deploying wireless devices. My main reason being security, and yes I do know about the BB NOC etc etc but do you know how many servers your normal emails pass through before it gets to it’s destination anyway?
Full Talkback thread









