[missing-sync-palmos-talk] Re: Can ' t network sync with wifi from Tungsten T5

Brian Hall bhall at markspace.com
Mon Mar 6 15:59:56 PST 2006


>Sure is. Personally I wouldn't do that unless MissingSync documented
>exactly what sort of security they've built into it,

Indeed, we do document security (or the lack thereof) with regards to
network sync:

page 20 of the users guide:
"If you plan on syncing over a Wi-Fi/network connection, this box
must be checked. Please note that a Network sync is not a
secure operation and data is not encrypted. "

page 33 of the user's guide:
"NOTE: Palm OS network synchronization is not secure. This is a constraint
of Palm OS network
synchronization -- not The Missing Sync for Palm OS. Your data is not
encrypted, and because the
Network sync does not require a pairing of a specific device to your Mac,
it may be possible for anyone to
sync to your computer, provided that your Mac is on a public network. The
Missing Sync mitigates these
vulnerabilities by only allowing devices with the names you specify to
connect and sync, acting like a
password of sorts. Still, network sync is far from secure..  "

To "do it right" would require some changes to hotsync on the handheld (ie,
up to PalmSource, or a licensee such as Palm). I wouldn't consider that
likely to happen. It is possible that workarounds could be done w/o
changing hotsync on the handheld, but we don't see the ROI for that.

Brian

-- 
_____________________________________________________________________
Mark/Space, Inc.                                   voice 408-293-7299
654 N. Santa Cruz Ave. #300                          fax 408-293-7298
Los Gatos, CA 95030-4360                   <http://www.markspace.com>


More information about the missing-sync-palmos-talk mailing list