Handhelds Might Be a Security Risk

vnunet is quoting Security consultants @stake who point out that Palm handhelds are vulnerable to having passwords stolen from them wirelessly. @stake has written an app that takes advantage of the Palm's ability to HotSync via its infrared port. Notsync tricks a Palm into thinking it is connected to its owner's PC, rather than a hacker's PDA. The hacker then downloads the target's password.

While this simple app doesn't try to grab any other information off the target Palm, it is a fact that many people use the same password for everything, including accessing secure corporate networks.

Notsync's author, the vice president of R&D at @Stake said, "Wireless is extending the frontier of the corporate network and lowering the level of security, while magnifying the problems." But he added, "We're not trying to scare anyone here. We're trying to stress that companies must adopt a strategic approach to wireless security."