Re: Announcement - PR1.3.1 official security update
 

dude! I think you are watching to many movies!:))))

Re: Announcement - PR1.3.1 official security update
 

The DigiNotar Certificate Authority got hacked and a lot of SSL certificates were issued for common sites (google, microsoft, amazon, etc), allowing the hackers to pretend to be these sites without the user being able to tell there's a problem. It took DigiNotar a long while to find they'd been hacked, and even longer to admit that they didn't really know how many (and which) certificates had been issued.

The end result is that DigiNotar have been blacklisted by all the browsers (which is what this update will add for the Maemo browser), preventing any certificates signed by them from being accepted. The company has since (inevitably) gone out of business.

The suspicion is that Iranian hackers (possibly government sponsored) were behind this - there's certainly evidence of a huge increase in related lookups from Iran shortly after this hack.

You can see a preliminary post-mortem on this attack here.

Re: Announcement - PR1.3.1 official security update
 

wow, pretty good explanation, thanks a lot

Re: Announcement - PR1.3.1 official security update
 

You may want to look at this:
http://talk.maemo.org/showthread.php?t=76178

Re: Announcement - PR1.3.1 official security update
 

At least nokia cares about our safety...

Re: Announcement - PR1.3.1 official security update
 

Not to be picky but there is a difference between safety and security.
;-)
Simple:
http://en.wikipedia.org/wiki/Safety

http://en.wikipedia.org/wiki/Security
http://en.wikipedia.org/wiki/Computer_security

Re: Announcement - PR1.3.1 official security update
 

I'm using CSSU. So I should skip the official Nokia update and wait for the CSSU update, am I right?
Are there any benefits or disadvantages doing so?

Re: Announcement - PR1.3.1 official security update
 

first question: yes.
Second question: no.
Silly Joke: they'll ship flash 10.1 with this update ;)

Re: Announcement - PR1.3.1 official security update
 

MAG
since it seems like you're in touch with Nokia regarding this Diginotar security issue, is it possible for you to tell them about the Flash security issues posted in this thread: talk.maemo.org/showthread.php?t=77439?
(i'm totally confused why Flash on maemo cannot be updated when it's possible on NITDroid. it's the same device on different OS... is it because Nokia's not willing to pay Adobe or something else?)

Re: Announcement - PR1.3.1 official security update
 

Well now my monitor is full of beer.
;-)