<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Govt. decodes Blackberry &#8211; all set to snoop</title>
	<atom:link href="http://www.pluggd.in/indian-telecom-industry/blackberry-india-government-decodes-2743/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.pluggd.in/indian-telecom-industry/blackberry-india-government-decodes-2743/</link>
	<description>We Heart Startups!</description>
	<lastBuildDate>Fri, 10 Feb 2012 14:53:02 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
	<item>
		<title>By: Avoid Yahoo/Gmail &#8211; Central Govt. to Officials &#124;Technology and Business Startups in India</title>
		<link>http://www.pluggd.in/indian-telecom-industry/blackberry-india-government-decodes-2743/comment-page-1/#comment-90159</link>
		<dc:creator>Avoid Yahoo/Gmail &#8211; Central Govt. to Officials &#124;Technology and Business Startups in India</dc:creator>
		<pubDate>Fri, 05 Dec 2008 10:10:18 +0000</pubDate>
		<guid isPermaLink="false">http://www.pluggd.in/indian-telecom-industry/blackberry-india-government-decodes-2743/#comment-90159</guid>
		<description>[...] our govt. fails to keep pace with technology (remember Blackberry blackout?) and instead of upgrading it&#8217;s infra, they want to stay happy with mediocre decisions like [...]</description>
		<content:encoded><![CDATA[<p>[...] our govt. fails to keep pace with technology (remember Blackberry blackout?) and instead of upgrading it&#8217;s infra, they want to stay happy with mediocre decisions like [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Weekly Recap - [22nd - 28th sep] &#124;Technology and Business Startups in India</title>
		<link>http://www.pluggd.in/indian-telecom-industry/blackberry-india-government-decodes-2743/comment-page-1/#comment-87151</link>
		<dc:creator>Weekly Recap - [22nd - 28th sep] &#124;Technology and Business Startups in India</dc:creator>
		<pubDate>Mon, 29 Sep 2008 03:37:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.pluggd.in/indian-telecom-industry/blackberry-india-government-decodes-2743/#comment-87151</guid>
		<description>[...] Govt. decodes Blackberry - all set to snoop [...]</description>
		<content:encoded><![CDATA[<p>[...] Govt. decodes Blackberry &#8211; all set to snoop [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Vivek</title>
		<link>http://www.pluggd.in/indian-telecom-industry/blackberry-india-government-decodes-2743/comment-page-1/#comment-86819</link>
		<dc:creator>Vivek</dc:creator>
		<pubDate>Mon, 22 Sep 2008 05:38:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.pluggd.in/indian-telecom-industry/blackberry-india-government-decodes-2743/#comment-86819</guid>
		<description>The Blackberry enterprise version (BES) is, I believe impossible to crack without keys from the enterprise. There are probably not many enterprise customers in India.  

So, this story is about the internet service.

In the internet versio, the consumer emails sent via BB is served by local ISPs using a server provided by Blackberry called Blackberry Internet Service (BIS). This might communicate back with the RIM servers in Canada.  

There are three possibilities. 

1) RIM has probably just disabled encryption for their Indian accounts (accounts signed up via Reliance, Airtel, etc). The way they would do this is to disable encryption out of the BIS. I hope this is not the case because it would seriously compromise privacy.

2) RIM has provided the government with their private keys and also disabled advanced key exchange algorithms like  Ephemeral Diffie Hellman. 

3) The BIS security infrastructure is weak anyway and can be compromised. For example, the RIM servers can be made to negotiate a weak or null cipher. I doubt this would be the case. 

The ET story you linked to talks a lot about decompression. I dont know the context in which that is relevant. It is trivial to decompress.</description>
		<content:encoded><![CDATA[<p>The Blackberry enterprise version (BES) is, I believe impossible to crack without keys from the enterprise. There are probably not many enterprise customers in India.  </p>
<p>So, this story is about the internet service.</p>
<p>In the internet versio, the consumer emails sent via BB is served by local ISPs using a server provided by Blackberry called Blackberry Internet Service (BIS). This might communicate back with the RIM servers in Canada.  </p>
<p>There are three possibilities. </p>
<p>1) RIM has probably just disabled encryption for their Indian accounts (accounts signed up via Reliance, Airtel, etc). The way they would do this is to disable encryption out of the BIS. I hope this is not the case because it would seriously compromise privacy.</p>
<p>2) RIM has provided the government with their private keys and also disabled advanced key exchange algorithms like  Ephemeral Diffie Hellman. </p>
<p>3) The BIS security infrastructure is weak anyway and can be compromised. For example, the RIM servers can be made to negotiate a weak or null cipher. I doubt this would be the case. </p>
<p>The ET story you linked to talks a lot about decompression. I dont know the context in which that is relevant. It is trivial to decompress.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

