Hi, Hmmm, a good question to ponder. At this stage, the answer is "mixed." * These devices can theoretically run viruses, since they are computers themselves and any malware that targets Windows CE could run under Braille Sense. The way of delivering these software, known in security industry as "vectors," plays a crucial part in determining whether injection of this malware succeeds or not. If it is a web app - like embedded Javascript, then it could work, subject to acceptance from user about running it. At this point, since there is no prompt for requesting a cookie to enter a system or not, a web programmer could use this flaw to have the Javascript app enter the system and do something - which I believe is not that harmful (Alex, please correct me if I'm wrong). However, if the program was delivered as an attachment or as an executable, then there might be a chance of succeeding with it, given that HIMS interface does support these executables - remember, any executable that was compiled for a target CPU runs only under that CPU or an interface. I can see it coming in the near future - read below for a full description. * If the HIMS SDK is here, then the chance of these malware appearing increases. If a development tool is here, a slight possibility exists for students (like myself) or any malicious programmer to write a C++ code, compile it (targeting HIMS interface) and have it run and perform some task (such as erasing some folders). But this approach has two fundamental flaws and disappointments: first, Braille Sense family is an embedded system, thus all important files and folders are stored in ROM. This means that, the only "real cure" for removing these viruses is Hard Reset. But doing this has potential problems, particularly if the malware targets erasing blocks of ROM - if they do that, the chance of recovery becomes slim. Second, in order for the malicious code to even run, an executable that is compiled for HIMS interface MUST exist - without this, how could a virus take control of your Braille Sense? After all, considering the hardware specs and expectations of modern consumer embedded systems, the possibility of embedded malware appearing has increased. If I want to, I could open Visual studio 2008, write some routines for a Smartphone and just run it under my phone (and have it do some harm). But thanks to above notes, I could just tap "1234" on my phone - and I've just done a Hard Reset on my HP iPAQ glisten (a touchscreen phone) to remove my code... Good thing that I chose embedded systems as my research field in computer science... Hope this helps. Cheers, Joseph (UCR)
-----Original Message----- From: Celeste Williams [mailto:[email protected]] Sent: Monday, August 30, 2010 9:04 PM To: [email protected] Subject: [GWN] Viruses I asked this question a while back. Can the GW notetakers get a virus. The answer I got back was no because they don't support cookies. Now that they do, has that changed and if so, what should one do to prevent them? Celeste and Dealer Have an awesome blessed day! -------------------------------------------------- From: "Joseph Lee" <[email protected]> Sent: Saturday, August 28, 2010 8:38 PM To: <[email protected]> Subject: [GWN] Experimetns with Braille sense > Hi folks, > Thanks to somebody who let me borrow a Braille Sense for several weeks, > I'm > performing some tests and doing a few experiments The specs is BSO with > 5.5 > firmware (in Korean). So far: > * The seven program limit: When a user attempts to run more than 7 > programs, > BSO says that only 7 programs can be run at once and does not run the 8th > program. > * Word processor: After testing a few large documents, I have determined > that BSO would handle documents up to around 2.4 to 2.6 MB in size. I had > a > book that was 3.6 MB in size and it opened only about two-thirds before > the > memory manager alerting me (via HIMS interface) that the file was too > long. > This would be on the BSO - I expect BSP userP to not have this problem. > * Wi-Fi and AES: I can confirm that AES is not supported, although WPA2 > Personal is listed as one of the security modes. If WPA or WPA2 is > selected, > TKIP is automatically selected. > * At least BSO recognizes my 500 GB Western Digital portable hard drive - > may take several attempts at this, as connecting to the USB port on first > try didn't do it (although connection message was given). > * Battery removal: When the battery is removed, BSO enters temporary > standby > mode. When the battery is reconnected (with the power still on), it resets > itself. > Few hypothetical things: > * In theory, it is possible to change the startup sound on the BSP - the > only thing needed would be the name of the startup sound file. Since > default > ones are stored in ROM, you can get those back via hard Reset. > At the moment these are my findings... > Cheers, > Jsoeph > > > > If you wish to unsubscribe from this list, visit: > > http://www.gwmicro.com/listserv > > If you wish to unsubscribe from this list, visit: http://www.gwmicro.com/listserv If you wish to unsubscribe from this list, visit: http://www.gwmicro.com/listserv
