[maemo-developers] Security Guidance for N800 OS development

[From: Simon Budig]

Zoran Kolic (zkolic at sbb.co.yu) wrote:
> > Usually a nokia tablet does not
> > have internet services running. Asking for iptables is like asking for a
> > padlock, when your house does not have any doors. In that case the lock
> > would not at all improve the security.
> 
> Is it necessary my 770 to be authistic?

*If* you install an internet service, then you know about it. Then you
can also judge on how to secure it. If you cannot do it then simply
don't install this service and you're fine.

> > So far you have not yet specified *why* having iptables on the device
> > would help with the security. If it is just the feeling of "I have
> > iptables on the device, it is more secure now", then this is a bogus
> > placebo feeling.
> 
> Yes. May I get my placebo now, please?

--------8<----snip here----
#!/bin/sh
echo "your system is now secured"
--------8<----snip here----

save these two lines as a skript, call it "iptables" and mark it as
executable.

> > Arguing without technical arguments will not convince people of your
> > need.
> 
> www.phrack.org
> packetstormsecurity.org

This is not an argument, this is panic.

Bye,
        Simon

-- 
              simon at budig.de              http://simon.budig.de/