It appears as though BlackBerry's global decryption key was previously obtained by the Canadian Police. According to a report, the police have had the key to BlackBerry devices since 2010, but neither the Royal Canadian Mounted Police (RCMP) nor BlackBerry will confirm the details of how it was handed over. From Vice's report:
According to technical reports by the Royal Canadian Mounted Police that were filed in court, law enforcement intercepted and decrypted roughly one million PIN-to-PIN BlackBerry messages in connection with the probe. The report doesn't disclose exactly where the key — effectively a piece of code that could break the encryption on virtually any BlackBerry message sent from one device to another — came from. But, as one police officer put it, it was a key that could unlock millions of doors.
It is also unknown whether the RCMP still has the global key sitting on their servers. While the key wouldn't gain access to enterprise devices, it does to consumer phones, which could mean that the police had been able to access phones for years.
Editors note - Something the Vice report forgot, though, is that this has been known since 2010 really. Even the Canadian Government advised against using PIN-to-PIN messaging and outlined the differences between BIS and BES at the time. There's not a whole lot of new information being added here. With that said, I fully encourage everyone to go ahead and review the BBM Security Note put out by BlackBerry here (PDF).
Read more
How Go Talk intends to be the BlackBerry of mobile carriers
Identity theft often goes through an unexpected route: conning the carrier. Go Talk Wireless wants to stamp out SIM swap fraud at the source.
It's time for my family to take the plunge on a VPN
A good VPN isn't as complicated as it used to be, but it's still a pretty big step for a "regular" user to take. But it's time to get my family used to it. Their data may depend on it.
PRIV named one of the most secure Android smartphones of 2016
Google's annual Android Security Review names PRIV one of the most secure smartphones of last year. While rather unsurprising to most of us here, there are some areas of the report that BlackBerry's software efforts receive some substantial kudos.
July Android security patch arrives for BlackBerry Priv
The BlackBerry Priv has begun receiving the July 5 Android security patch, which fixes a number of vulnerabilities.