Security Communications Release: Security Advisory posted (KB26296: Cross-site scripting (XSS) vulnerability in the BlackBerry Web Desktop Manager component of the BlackBerry Enterprise Server”)
On April 12, 2011, Research In Motion (RIM) released a security advisory, KB26296: Cross-site scripting (XSS) vulnerability in the BlackBerry Web Desktop Manager component of the BlackBerry Enterprise Server. This security advisory provides details of a known cross-site scripting vulnerability in the BlackBerry Web Desktop Manager component of the BlackBerry Enterprise Server and BlackBerry Enterprise Server Express.
RIM has issued interim security software updates that resolve the issue in supported software versions of the affected software. Resolution for the issue is available by downloading and applying the interim security software update for the appropriate affected software version. Links to the updates are listed in the Resolution section of the security advisory. Orange recommends that BlackBerry Enterprise Server or IT administrators should apply the software updates.
The vulnerability could allow an attacker to execute externally supplied scripts using the user privileges of the BlackBerry Web Desktop Manager. This could allow the attacker to perform any BlackBerry Web Desktop Manager task that the legitimate user could perform on a BlackBerry smartphone while the user is logged in to the BlackBerry Web Desktop Manager. Such tasks include remotely wiping and disabling the device, remotely resetting the device password and locking the device, and activating the user’s account on another device over the wireless network.
Successful exploitation of this issue requires an attacker to persuade the legitimate user to click a specially crafted URL in a web browser or an email or instant message.
For further information, please see the posted security advisory above.
Mobile & Cellular
Hey, as some of you may be aware there has been some stories and rumours floating around the interwebs regarding a winding up order that was issued against my employers Geko Direct Limited. Now I do have a working knowledge of these things so followed the online vitriol quite closely. For those of you who don’t quite know the facts; there was a winding up order against Geko Direct that was dismissed utterly by the courts on Wednesday of this week. The interesting part was that it was the claimant who dismissed the action as it was not considered something they were able to pursue… The matter is now closed off and put to bed once and for all.
I must say when I first learnt that this had happened I took my concerns to my sales Director who shone a bit of light on the matter, advising me that a winding up order can be issued by anyone but it is the courts who decide whether the company gets “wound up“. I then started trawling through the internet and finding what can only be described as an online public flogging. I did notice some of the comments made online had rather familiar names and claimed to be Geko Direct customers but most of which turned out to be ex staff members with a grudge to bear. With the research I have done I figured that a lot of the words online aren’t entirely truthful as genuine complaints don’t end up becoming Chinese whispers, unlike some of the comments on the web. Once the news of a winding up petition was being proposed against Geko Direct the rumours evolved and has been interpreted as Geko being sued via a class action lawsuit, losing it’s dealer codes and even going into administration. We are a medium sized business and connect large numbers of new business every day, we continue to do this in a very saturated marketplace and even during an economy in decline and public spending at an all time low. If the rumours were to be believed we would have been out of business a long time ago.
I have said before that there are genuine people out there with genuine complaints but Geko Direct is a company that will not leave you out to dry. I have seen genuine complaints out there from genuine customers, this information has been passed directly to the managing director of the company to be passed onto the relevant departments. I invited people to post on here if they have a problem and whilst I cannot discuss individual accounts publicly I can certainly pass on your concerns.
I have worked in the support departments within Geko and know how much work goes into resolving issues, as a result we have a massive database of happy customers who keep their business with Geko and wouldn’t consider anyone else. We have some of the highest retention rates in the industry and pride ourselves on having “fanatical” customer support. Our head of customer experience Lacey has worked tirelessly to create a streamlined and dedicated department and has employed from within, some of the best minds in the company to ensure that every customer is satisfied.
During the time I have worked at Geko I have seen a huge shift in the way we do business, for those of you who remember this site as a social network you should remember the tag line we used “constantly evolving”. This is something that Geko Direct is doing. we are more focused on the “customer journey” and the industry is so strictly regulated there is very little we can do to miss-sell a product or service. Yes I am biased as I love my job, the people I work with and the industry, however the views and opinions expressed on here are my own and are not fed to me. I truly believe Geko Direct is a fantastic company to work for and be a part of be it as a member of staff or a customer, so much so my brother has his business phones with Geko. Yes I know we aren’t perfect during the 10 years we have been trading there have been misunderstandings and mistakes but we always work hard to put them right.
2011 is a new year and with cellular technology moving quicker than ever, it is a great time to move away from the networks directly and allow your account to be managed by someone who knows the technology and understands your business.
Again I must stress that the views and opinions expressed in this post are mine, this blog and the content within does not represent Geko Direct nor do I gain from posting. I do this because I want to.
Geko Direct Limited
Wow, what a fantastic month it has been for traffic on my little blog. Whilst checking the in depth stats about who, what and when my site is being hit I discovered quite a few interesting facts. Firstly there has been a great deal of interest in who I am, more than 30 referrals from various Whois sites all searching for the domain details. Well let me tell you, I am Robert Adams, I live in Telford and there is a real picture of me in the about me page. I work for Geko Direct as Head of Technical Support and love my job and employers! That’s me!
So after a bit more administration and digging, I found around 5-10 referrals from domain tool websites all relating to the keywords and ad campaigns this site runs! It seems to me that someone wants to learn how a small time blog can get great results for certain keywords without paying a penny. Well if you want to know what I do it is pretty simple. I write relevant posts and enter relevant keywords with a bit of back linking, all basic stuff but put together with some clinical methods.
There was one more thing that made me smile, I seem to have had a large amount of referrals from a particular porn site which kind of tells me whoever was researching me got bored and decided to entertain themselves elsewhere.
Once again and as usual, Geko Direct do NOT pay me to keep this blog updated, they do not have any input nor do they instruct me to post. The views and opinions expressed here are my own and nothing to do with my employers Geko Direct, nor do they represent the views and opinions of the Orange Network or its partners.
Whatever happened to the pictures on every post?
Geko Direct: www.gekodirect.co.uk
Geko Direct Limited
What a start to the new year, not only does Geko Direct continue to grow it’s customer base but we get the ultimate accolade from the Orange Network Below is the actual letter that we received from Orange, there is a link to the original PDF which has been signed by Duncan Hay!
At Orange, we are continually striving for excellence. As such we have developed the Orange Partner Programme where we handpick the best dealers in the UK to work closely with us to provide new and existing customers the best service possible.
Orange has been a supplier to businesses since 1994 and has a strong foothold in the UK and international business markets. We aspire to be a market leader by marrying innovation, reactivity and dynamism with an absolute commitment to delivering against the needs of our business customers
To be part of the Orange Partner Programme, Geko Direct Ltd has met our criteria and we are pleased to categorise Geko Direct Ltd as a Specialist Partner in recognition of being one of the top dealers in the UK today.
We are confident that this partnership ensures that your business customers benefit from our combined expertise and understanding of their needs to ensure your customers are provided with the ideal solution.
Click the below link to read more:
Orange & Geko Partnership
Geko Direct Limited, Uncategorized
Incident Start: 1st December 2010, 09:44 GMT
Update Time: 1st December 2010, 11:56 GMT
Orange has been notified of a possible degradation to your Orange BlackBerry Service.
How this may affect you
Some BlackBerry subscribers may experience delays in sending messages, receiving messages, or use Internet browsing. Some devices may not receive new service books. BlackBerry Enterprise Servers may be disconnected from the BlackBerry Infrastructure.
There is no alternative service. There maybe some delay in emails being sent or received but all emails will be delivered. BlackBerry Enterprise servers will automatically reconnect if they are disconnected.
Further information will be communicated as it becomes available.
A helping hand, Geko Direct Limited