[missing-sync-palmos-talk] Re: Can ' t network sync with wifi from Tungsten T5

[Jens Miltner]

Am 07.03.2006 um 00:59 schrieb Brian Hall:

>> Sure is. Personally I wouldn't do that unless MissingSync documented
>> exactly what sort of security they've built into it,
>
> Indeed, we do document security (or the lack thereof) with regards to
> network sync:
>
> page 20 of the users guide:
> "If you plan on syncing over a Wi-Fi/network connection, this box
> must be checked. Please note that a Network sync is not a
> secure operation and data is not encrypted. "
>
> page 33 of the user's guide:
> "NOTE: Palm OS network synchronization is not secure. This is a  
> constraint
> of Palm OS network
> synchronization -- not The Missing Sync for Palm OS. Your data is not
> encrypted, and because the
> Network sync does not require a pairing of a specific device to  
> your Mac,
> it may be possible for anyone to
> sync to your computer, provided that your Mac is on a public  
> network. The
> Missing Sync mitigates these
> vulnerabilities by only allowing devices with the names you specify to
> connect and sync, acting like a
> password of sorts. Still, network sync is far from secure..  "
>
> To "do it right" would require some changes to hotsync on the  
> handheld (ie,
> up to PalmSource, or a licensee such as Palm). I wouldn't consider  
> that
> likely to happen. It is possible that workarounds could be done w/o
> changing hotsync on the handheld, but we don't see the ROI for that.

But you could probably set up a VPN tunnel to your machine - AFAIK,  
there are VPN clients for Palm. Then you could open the hotsync port  
only for local connections...

</jum>