<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<font face="Arial">Paul,<br>
<br>
yes "click fatigue/click cluelesness" is an issue but the dialog box
does provide one more potential barrier to a successful attack.<br>
<br>
By the way there is a wwwcast series on mobile device security over the
next 5 weeks that is sponsored by sybase/ianywhere. The speaker in the
first wwwcast, Jack Gold, actually specifically mentions Nokia devices.
For those interested, below are the urls to the wwwcast series.<br>
<br>
<br>
</font>
<blockquote>Compliance in the Mobile Enterprise (featuring J. Gold
Associates)<br>
Date: Thursday, February 22, 2007<br>
Time: 10 am Eastern time - 3 pm UK time - 16 Uhr German time and <br>
2 pm Eastern time - 7 pm UK time - 20 Uhr German time<br>
At the time of the 10 am Eastern time - 3 pm UK time - 16 Uhr German
time webinar, please click on the following URL:
<a class="moz-txt-link-freetext" href="https://www.livemeeting.com/cc/sybase/join?id=JMDK7M&role=attend&pw=Compliance">https://www.livemeeting.com/cc/sybase/join?id=JMDK7M&role=attend&pw=Compliance</a><br>
At the time of the 2 pm Eastern time - 7 pm UK time - 20 Uhr German
time webinar, please click on the following URL:
<a class="moz-txt-link-freetext" href="https://www.livemeeting.com/cc/sybase/join?id=NB9PW3&role=attend&pw=Compliance">https://www.livemeeting.com/cc/sybase/join?id=NB9PW3&role=attend&pw=Compliance</a><br>
Audio Access information is below.<br>
________________________________________<br>
Managed Security – The Key to a Comprehensive Mobile Security Strategy<br>
Date: Thursday, March 1, 2007<br>
Time: 10 am Eastern time - 3 pm UK time - 16 Uhr German time and <br>
2 pm Eastern time - 7 pm UK time - 20 Uhr German time<br>
At the time of the 10 am Eastern time - 3 pm UK time - 16 Uhr German
time webinar, please click on the following URL:
<a class="moz-txt-link-freetext" href="https://www.livemeeting.com/cc/sybase/join?id=J44HNQ&role=attend&pw=Security">https://www.livemeeting.com/cc/sybase/join?id=J44HNQ&role=attend&pw=Security</a><br>
At the time of the 2 pm Eastern time - 7 pm UK time - 20 Uhr German
time webinar, please click on the following URL:
<a class="moz-txt-link-freetext" href="https://www.livemeeting.com/cc/sybase/join?id=MDZ3F6&role=attend&pw=Security">https://www.livemeeting.com/cc/sybase/join?id=MDZ3F6&role=attend&pw=Security</a><br>
Audio Access information is below.<br>
________________________________________<br>
Securing Handheld Devices, Data and Applications<br>
Date: Thursday, March 8, 2007<br>
Time: 10 am Eastern time - 3 pm UK time - 16 Uhr German time and <br>
2 pm Eastern time - 7 pm UK time - 20 Uhr German time<br>
At the time of the 10 am Eastern time - 3 pm UK time - 16 Uhr German
time webinar, please click on the following URL:
<a class="moz-txt-link-freetext" href="https://www.livemeeting.com/cc/sybase/join?id=78T32S&role=attend&pw=Handheld">https://www.livemeeting.com/cc/sybase/join?id=78T32S&role=attend&pw=Handheld</a><br>
At the time of the 2 pm Eastern time - 7 pm UK time - 20 Uhr German
time webinar, please click on the following URL:
<a class="moz-txt-link-freetext" href="https://www.livemeeting.com/cc/sybase/join?id=D3C4PX&role=attend&pw=Handheld">https://www.livemeeting.com/cc/sybase/join?id=D3C4PX&role=attend&pw=Handheld</a><br>
Audio Access information is below.<br>
________________________________________<br>
Encryption and Security Strategies for Laptops<br>
Date: Thursday, March 15, 2007<br>
Time: 10 am Eastern time - 3 pm UK time - 16 Uhr German time and <br>
2 pm Eastern time - 7 pm UK time - 20 Uhr German time<br>
At the time of the 10 am Eastern time - 3 pm UK time - 16 Uhr German
time webinar, please click on the following URL:
<a class="moz-txt-link-freetext" href="https://www.livemeeting.com/cc/sybase/join?id=6XK6RF&role=attend&pw=Laptop">https://www.livemeeting.com/cc/sybase/join?id=6XK6RF&role=attend&pw=Laptop</a><br>
At the time of the 2 pm Eastern time - 7 pm UK time - 20 Uhr German
time webinar, please click on the following URL:
<a class="moz-txt-link-freetext" href="https://www.livemeeting.com/cc/sybase/join?id=KWC4TK&role=attend&pw=Laptop">https://www.livemeeting.com/cc/sybase/join?id=KWC4TK&role=attend&pw=Laptop</a><br>
Audio Access information is below.<br>
________________________________________<br>
Secure Wireless Email – Top Considerations<br>
Date: Thursday, March 22, 2007<br>
Time: 10 am Eastern time - 3 pm UK time - 16 Uhr German time and <br>
2 pm Eastern time - 7 pm UK time - 20 Uhr German time<br>
At the time of the 10 am Eastern time - 3 pm UK time - 16 Uhr German
time webinar, please click on the following URL:
<a class="moz-txt-link-freetext" href="https://www.livemeeting.com/cc/sybase/join?id=4CG6WS&role=attend&pw=Email">https://www.livemeeting.com/cc/sybase/join?id=4CG6WS&role=attend&pw=Email</a><br>
At the time of the 2 pm Eastern time - 7 pm UK time - 20 Uhr German
time webinar, please click on the following URL:
<a class="moz-txt-link-freetext" href="https://www.livemeeting.com/cc/sybase/join?id=Z8CW4N&role=attend&pw=Email">https://www.livemeeting.com/cc/sybase/join?id=Z8CW4N&role=attend&pw=Email</a><br>
Audio Access information is below.<br>
________________________________________<br>
</blockquote>
<span style="font-size: 11pt; font-family: Papyrus; color: navy;"><o:p></o:p></span>
<div class="moz-signature">
<div class="Section1"></div>
</div>
<div class="moz-signature">
<meta http-equiv="Content-Type" content="text/html; ">
<meta name="ProgId" content="Word.Document">
<meta name="Generator" content="Microsoft Word 10">
<meta name="Originator" content="Microsoft Word 10">
<link rel="File-List"
href="ASN%20End%20of%20Message%20Signature%2004%2022%2006_files/filelist.xml">
<title>Best Regards,</title>
<o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="place">
<o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PersonName"><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="phone">
<!--[if gte mso 9]><xml>
<o:DocumentProperties>
<o:Author>John B. Holmblad</o:Author>
<o:LastAuthor>John B. Holmblad</o:LastAuthor>
<o:Revision>5</o:Revision>
<o:TotalTime>8</o:TotalTime>
<o:Created>2006-04-22T20:38:00Z</o:Created>
<o:LastSaved>2006-10-20T20:57:00Z</o:LastSaved>
<o:Pages>1</o:Pages>
<o:Words>52</o:Words>
<o:Characters>302</o:Characters>
<o:Company>Televerage International</o:Company>
<o:Lines>2</o:Lines>
<o:Paragraphs>1</o:Paragraphs>
<o:CharactersWithSpaces>353</o:CharactersWithSpaces>
<o:Version>10.6817</o:Version>
</o:DocumentProperties>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[
if !mso]><object
classid="clsid:38481807-CA0E-42D2-BF39-B33AF135CC4D" id=ieooui></object>
<style>
st1\:*{behavior:url(#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;
mso-font-alt:"\FF2D\FF33 \660E\671D";
mso-font-charset:128;
mso-generic-font-family:modern;
mso-font-pitch:fixed;
mso-font-signature:-1610612033 1757936891 16 0 131231 0;}
@font-face
{font-family:Papyrus;
panose-1:3 7 5 2 6 5 2 3 2 5;
mso-font-charset:0;
mso-generic-font-family:script;
mso-font-pitch:variable;
mso-font-signature:3 0 0 0 1 0;}
@font-face
{font-family:"\@MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;
mso-font-charset:128;
mso-generic-font-family:modern;
mso-font-pitch:fixed;
mso-font-signature:-1610612033 1757936891 16 0 131231 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"MS Mincho";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
span.grame
{mso-style-name:grame;}
span.GramE
{mso-style-name:"";
mso-gram-e:yes;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";}
</style>
<![endif]--><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="7170"/>
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1"/>
</o:shapelayout></xml><![endif]-->
</o:SmartTagType></o:SmartTagType></o:SmartTagType>
<div class="Section1">
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: Papyrus; color: navy;">Best
Regards,</span><span style=""><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 6pt; font-family: Papyrus; color: navy;"> </span><span
style="font-size: 6pt;"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: Papyrus; color: navy;">John
Holmblad</span><span style=""><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 6pt; font-family: Papyrus; color: navy;"><o:p> </o:p></span></p>
<br>
<p class="MsoNormal"><st1:PersonName><span
style="font-size: 11pt; font-family: Papyrus; color: navy;"></span></st1:PersonName><span
style=""><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: Papyrus; color: navy;"><o:p> </o:p></span></p>
</div>
</div>
<br>
<br>
Paul Brook wrote:
<blockquote cite="mid200702220123.41335.paul@codesourcery.com"
type="cite">
<blockquote type="cite">
<pre wrap="">by way of example, my PC has a firewall (Symantec) that does outbound
filtering. I appreciate the fact that when I launch an application for
which I have not previously provided authorization to access the
Internet (defined here as an IP range beyond my LAN subnet), the
firewall warns me before allowing the connection to take place and lets
me decide whether to block, allow this one time, or allow permanently
the access. With this kind of protection on devices such as the N800,
it is more likely that the outbound filter will also catch a silent
rogue app that, by some means, has gotten installed on the device.(these
days typically by a user being socially engineered to do something that
they should not do).
</pre>
</blockquote>
<pre wrap=""><!---->
I think you're over-estimating the knowhow and patience of an "average user".
In my experience this kind of warning triggers sufficiently often on a
sufficiently wide range of applications that most users either disable it or
automatically click yes without even reading it properly.
The sort of person that pays attention to this sort of firewall is also the
sort of person that probably knows better than to install untrusted software
on their machine.
Outgoing firewalls aren't totally useless, but IMHO they're greatly overrated.
Paul
</pre>
</blockquote>
</body>
</html>