Click here to get back home

encrypting data

 HomeNewsGroups | Search | About
 microsoft.public.smartphone    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
encrypting data mtler 11-02-2007
---> Re: encrypting data Steve Riley [MS...11-04-2007
Posted by mtler on November 2, 2007, 5:28 pm
Please log in for more thread options
I am using Mogul HTC 6800 with Windows Mobile 6. I'm looking for a solution
to encrypt the data, there is an option to encrypt the storage card but not
the build in storage. Is there an option to install Outlook on the storage
card instead to encrypt it? Do you have any suggestions?

Thank you.

Posted by Steve Riley [MSFT] on November 4, 2007, 5:26 pm
Please log in for more thread options
Storage card encryption is important because the card can be removed from
the device. By encrypting the card, you protect the contents if your card
gets stolen.

But main memory really doesn't need encrypting, when you think about it. Do
you have a PIN configured on your device? If so, then you've got the
protection you need. So long as your PIN is good enough to survive guessing
attacks to the point where device reset kicks in, encrypting main memory
isn't necessary. It would drag down performance without offering any
security advantage.

--
Steve Riley
steve.riley@microsoft.com
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com


> I am using Mogul HTC 6800 with Windows Mobile 6. I'm looking for a
> solution
> to encrypt the data, there is an option to encrypt the storage card but
> not
> the build in storage. Is there an option to install Outlook on the storage
> card instead to encrypt it? Do you have any suggestions?
>
> Thank you.


Posted by mtler on November 4, 2007, 6:39 pm
Please log in for more thread options
There are some product on the market that encrypt the internal memory. My
understanding is that there might be ways of accessing the data even having
strong PIN set up. Otherwise, why would those products be offerred?
Thank you.

"Steve Riley [MSFT]" wrote:

> Storage card encryption is important because the card can be removed from
> the device. By encrypting the card, you protect the contents if your card
> gets stolen.
>
> But main memory really doesn't need encrypting, when you think about it. Do
> you have a PIN configured on your device? If so, then you've got the
> protection you need. So long as your PIN is good enough to survive guessing
> attacks to the point where device reset kicks in, encrypting main memory
> isn't necessary. It would drag down performance without offering any
> security advantage.
>
> --
> Steve Riley
> steve.riley@microsoft.com
> http://blogs.technet.com/steriley
> http://www.protectyourwindowsnetwork.com
>
>
> > I am using Mogul HTC 6800 with Windows Mobile 6. I'm looking for a
> > solution
> > to encrypt the data, there is an option to encrypt the storage card but
> > not
> > the build in storage. Is there an option to install Outlook on the storage
> > card instead to encrypt it? Do you have any suggestions?
> >
> > Thank you.
>
>

Posted by Todd Allcock on November 4, 2007, 9:18 pm
Please log in for more thread options
At 04 Nov 2007 15:39:02 -0800 mtler wrote:
> There are some product on the market that encrypt the internal memory.
My
> understanding is that there might be ways of accessing the data even
having
> strong PIN set up. Otherwise, why would those products be offerred?

For the same reason there are PPC anti-virus products: because some
people still buy them despite the low to zero risk from not using them.




Posted by Steve Riley [MSFT] on November 5, 2007, 3:39 pm
Please log in for more thread options
How does one access data on a computer? Two ways: locally and remotely.

Remotely accessing data in main memory on a smartphone would always result
in the clear-text data leaving the device, even if the data is encrypted in
main memory.

Locally accessing data in main memory requires physical access to the
device. If the device is protected by a PIN, I don't know of any way to get
to the data without first supplying the PIN.

Just because someone wants to sell you something, doesn't mean that you need
it. Additionally, just because a security feature exists, doesn't mean that
it should be enabled.

--
Steve Riley
steve.riley@microsoft.com
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com


> There are some product on the market that encrypt the internal memory. My
> understanding is that there might be ways of accessing the data even
> having
> strong PIN set up. Otherwise, why would those products be offerred?
> Thank you.
>
> "Steve Riley [MSFT]" wrote:
>
>> Storage card encryption is important because the card can be removed from
>> the device. By encrypting the card, you protect the contents if your card
>> gets stolen.
>>
>> But main memory really doesn't need encrypting, when you think about it.
>> Do
>> you have a PIN configured on your device? If so, then you've got the
>> protection you need. So long as your PIN is good enough to survive
>> guessing
>> attacks to the point where device reset kicks in, encrypting main memory
>> isn't necessary. It would drag down performance without offering any
>> security advantage.
>>
>> --
>> Steve Riley
>> steve.riley@microsoft.com
>> http://blogs.technet.com/steriley
>> http://www.protectyourwindowsnetwork.com
>>
>>
>> > I am using Mogul HTC 6800 with Windows Mobile 6. I'm looking for a
>> > solution
>> > to encrypt the data, there is an option to encrypt the storage card but
>> > not
>> > the build in storage. Is there an option to install Outlook on the
>> > storage
>> > card instead to encrypt it? Do you have any suggestions?
>> >
>> > Thank you.
>>
>>

Similar ThreadsPosted
SmartPhone Data Connections ?? November 3, 2005, 8:49 am
Program to keep txt data secure October 3, 2005, 11:57 pm
Check on Data plam February 25, 2007, 1:04 am
Move Data to Storage Card September 29, 2005, 12:25 pm
How can I save data on the phone between session November 17, 2005, 4:20 pm
Microsoft Activesync corrupts data February 27, 2006, 11:36 am
Moto Q - Not all data syncs! bummer June 26, 2006, 7:10 pm
override smartphone with outlook data November 20, 2007, 7:14 am
Data Usage of Push Mail December 1, 2007, 12:32 pm
GPS and EXIF Data (2003 or 5.0) - Blogging Dream June 14, 2005, 7:53 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap