maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Maemo 5 / Fremantle (https://talk.maemo.org/forumdisplay.php?f=40)
-   -   Announcement - PR1.3.1 official security update (https://talk.maemo.org/showthread.php?t=79400)

MohammadAG 2011-10-26 20:27

Announcement - PR1.3.1 official security update
 
Recently, Nokia has been in touch with some CSSU devs and the council about a possible software update.

As the version number implies, this is just a simple fix for the DigiNotar issue.

As of version 16.8, the CSSU includes these security fixes, you should not try to update your device (the update will not show up in Application Manager).

The latest Nokia update will also include a fixed security control panel applet, this will be pulled into the CSSU right after it's released publicly so the CSSU can be right back on track.

The update should be out in a couple of days for everyone, again, please do not try to update if you're using the CSSU (using apt-get or similar methods).

Non-CSSU users, you can update. If you ever want to install the CSSU, the installer will work fine on PR1.3.1.

MINKIN2 2011-10-26 20:37

Re: Announcement - PR1.3.1 official security update
 
Wow! Somebody at Nokia has remembered our little corner of the web? That IS fantastic :)

Thank you for sharing the news Mohammad, I will look forward to the update, not that I can honestly say what it would do anyway :P

br1zer 2011-10-26 20:37

Re: Announcement - PR1.3.1 official security update
 
As a vodafone Uk user, I look forward to recieving and ignoring this update in about February 2012 :-)

Jigzy 2011-10-26 20:38

Re: Announcement - PR1.3.1 official security update
 
So (Nokia) they still remember us!

alex-12gods 2011-10-26 20:44

Re: Announcement - PR1.3.1 official security update
 
cant wait...!!

kralde 2011-10-26 20:49

Re: Announcement - PR1.3.1 official security update
 
Amazing...

A little question...what is the DigiNotar issue? X_X

And another one...if I want to install this update with CSSU already installed, I have to wait for get CSSU updated or flash the n900, install the pr 1.3.1, and then install CSSU right?

thanks a lot

MohammadAG 2011-10-26 20:56

Re: Announcement - PR1.3.1 official security update
 
The CSSU already includes the core fixes, the UI is what needs to be updated, you should not try to install this if you want the CSSU, we'll provide the UI update as soon as it's out.

kralde 2011-10-26 21:01

Re: Announcement - PR1.3.1 official security update
 
Okay, thanks a lot for the advice =)

fw190 2011-10-26 21:08

Re: Announcement - PR1.3.1 official security update
 
Nokia is updating N900... this isn't the 1st of April? or is it? :)
thanks to all involved in this update!

patlak 2011-10-26 21:16

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by fw190 (Post 1114228)
Nokia is updating N900... this isn't the 1st of April? or is it? :)
thanks to all involved in this update!

Elop has watched inception. He thinks we'll buy a WP out of sheer excitement for the update.

crash16 2011-10-26 21:32

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by patlak (Post 1114233)
Elop has watched inception. He thinks we'll buy a WP out of sheer excitement for the update.

dude! I think you are watching to many movies!:))))

Rob1n 2011-10-26 21:33

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by kralde (Post 1114216)
A little question...what is the DigiNotar issue? X_X

The DigiNotar Certificate Authority got hacked and a lot of SSL certificates were issued for common sites (google, microsoft, amazon, etc), allowing the hackers to pretend to be these sites without the user being able to tell there's a problem. It took DigiNotar a long while to find they'd been hacked, and even longer to admit that they didn't really know how many (and which) certificates had been issued.

The end result is that DigiNotar have been blacklisted by all the browsers (which is what this update will add for the Maemo browser), preventing any certificates signed by them from being accepted. The company has since (inevitably) gone out of business.

The suspicion is that Iranian hackers (possibly government sponsored) were behind this - there's certainly evidence of a huge increase in related lookups from Iran shortly after this hack.

You can see a preliminary post-mortem on this attack here.

kralde 2011-10-26 21:36

Re: Announcement - PR1.3.1 official security update
 
wow, pretty good explanation, thanks a lot

PMaff 2011-10-26 21:38

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by kralde (Post 1114216)
Amazing...

A little question...what is the DigiNotar issue? X_X

You may want to look at this:
http://talk.maemo.org/showthread.php?t=76178

Alfred 2011-10-26 21:43

Re: Announcement - PR1.3.1 official security update
 
At least nokia cares about our safety...

PMaff 2011-10-26 21:50

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by Alfred (Post 1114246)
At least nokia cares about our safety...

Not to be picky but there is a difference between safety and security.
;-)
Simple:
http://en.wikipedia.org/wiki/Safety

http://en.wikipedia.org/wiki/Security
http://en.wikipedia.org/wiki/Computer_security

Mr. Incredible 2011-10-26 21:55

Re: Announcement - PR1.3.1 official security update
 
I'm using CSSU. So I should skip the official Nokia update and wait for the CSSU update, am I right?
Are there any benefits or disadvantages doing so?

Estel 2011-10-26 21:59

Re: Announcement - PR1.3.1 official security update
 
first question: yes.
Second question: no.
Silly Joke: they'll ship flash 10.1 with this update ;)

vetsin 2011-10-26 22:06

Re: Announcement - PR1.3.1 official security update
 
MAG
since it seems like you're in touch with Nokia regarding this Diginotar security issue, is it possible for you to tell them about the Flash security issues posted in this thread: talk.maemo.org/showthread.php?t=77439?
(i'm totally confused why Flash on maemo cannot be updated when it's possible on NITDroid. it's the same device on different OS... is it because Nokia's not willing to pay Adobe or something else?)

PMaff 2011-10-26 22:07

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by Estel (Post 1114254)
Silly Joke: they'll ship flash 10.1 with this update ;)

Well now my monitor is full of beer.
;-)

vetsin 2011-10-26 22:07

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by Estel (Post 1114254)
first question: yes.
Second question: no.
Silly Joke: they'll ship flash 10.1 with this update ;)

haha. you got me before i even posted it. ;) hope is the last flame to die.

mankir 2011-10-26 22:09

Re: Announcement - PR1.3.1 official security update
 
update shouldn't show up, when using cssu, but cssu will be updated (when Chuck Norris leaks the source code)
Quote:

Originally Posted by Mr. Incredible (Post 1114252)
I'm using CSSU. So I should skip the official Nokia update and wait for the CSSU update, am I right?
Are there any benefits or disadvantages doing so?


HELLASISGREECE 2011-10-26 22:15

Re: Announcement - PR1.3.1 official security update
 
Nokia this is your best "mobile" ever.


even better than 7650, 7110 and N95
I know it, and I'm sure you know it as well


http://www.youtube.com/watch?v=HkeNzviga8g

i am the medium - i am the message - i am the one

http://www.themill.com/umbraco/Image...0-%20video.jpg

windows7 2011-10-26 22:29

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by Estel (Post 1114254)
first question: yes.
Second question: no.
Silly Joke: they'll ship flash 10.1 with this update ;)

will they fix my broken USB connector?

zdanee 2011-10-26 22:38

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by windows7 (Post 1114274)
will they fix my broken USB connector?

Yes! They will include a patch that fix the broken USB issue, but you will have to apply it with the charger connected :p They will also include Flash 12, sadly it wont be compatible with Flash 11 and prior also it wont play embedded videos, but hey, bigger version number! :)

Dave999 2011-10-26 22:39

Re: Announcement - PR1.3.1 official security update
 
yes. Nokia do anything for windows7.

SD69 2011-10-26 22:42

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by vetsin (Post 1114258)
MAG
since it seems like you're in touch with Nokia regarding this Diginotar security issue, is it possible for you to tell them about the Flash security issues posted in this thread: talk.maemo.org/showthread.php?t=77439?
(i'm totally confused why Flash on maemo cannot be updated when it's possible on NITDroid. it's the same device on different OS... is it because Nokia's not willing to pay Adobe or something else?)

Nokia was quite clear that the update was only going to provide this security fix. I don't see much hope for Flash through an update.

panjgoori 2011-10-27 05:26

Re: Announcement - PR1.3.1 official security update
 
at last there is update for my beloved N900.

abhirajsoni 2011-10-27 05:45

Re: Announcement - PR1.3.1 official security update
 
so nokia still remember one of the best mobile. :o

abhirajsoni 2011-10-27 06:09

Re: Announcement - PR1.3.1 official security update
 
i request to the cssu team that plz fix the conversation disappear issue in next update. thanks :)

freemangordon 2011-10-27 07:05

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by MohammadAG (Post 1114223)
The CSSU already includes the core fixes, the UI is what needs to be updated, you should not try to install this if you want the CSSU, we'll provide the UI update as soon as it's out.

Will this CSSU update include the other fixes which are stuck on gitorious for over a month (i.e. Qt DigiNotar certificates fix, crashing modest fixes, camera-ui, etc...)

Who and how was contacted by Nokia? Was it the council as a Maemo community representative who was contacted? Or it was someone which has personal relations with Nokians?

visN900 2011-10-27 09:00

Re: Announcement - PR1.3.1 official security update
 
so guys will this update continue.. there was a thread regarding N9's successor.. this information puts light on that thread..

Santhan 2011-10-27 09:09

Re: Announcement - PR1.3.1 official security update
 
Nokia coming back to thinking something ????????????

yogishiip 2011-10-27 11:20

Re: Announcement - PR1.3.1 official security update
 
Thank you for the efforts

reinob 2011-10-27 12:16

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by sidd211095 (Post 1114399)
**** ! I thought the next n900 ofw update would give us video calling .. But just a security update !! ...

Is video calling really more important than a (pretty critical) security update?!

patlak 2011-10-27 12:42

Re: Announcement - PR1.3.1 official security update
 
This update is an OS wipe. Maemo is wiped, WP is installed, Elop is HAPPY, he'll have his Nokia 900 flagship.

arora.rohan 2011-10-27 13:01

Re: Announcement - PR1.3.1 official security update
 
Ignore the troll. Thank you Nokia. Thank you MAG. thank you CSSU.

erendorn 2011-10-27 13:07

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by sidd211095 (Post 1114538)
Ya i know that the security update is very important but U can neglect video calling its the most necessary update (after security update) (Why the hell we have front camera only for skype ?)
and ya also after video calling we could have got Adobe flash fixed !!
That would make my n900 complete. :)

video calling usage is not really the same in different countries. I've never seen anyone using it in my whole life (Europe). It's pretty much the same in the US. More or less, it' seems to be only popular in India (in terms of major markets). So I doubt it's on the top of the list of Nokia updates for the N900. As the list is certainly awfully short, it's probably not on the list at all, sorry.

abhirajsoni 2011-10-27 13:28

Re: Announcement - PR1.3.1 official security update
 
i thought its just a minor update.. but so many rumours are going here..lol

shadowjk 2011-10-27 16:01

Re: Announcement - PR1.3.1 official security update
 
What rumors? All I see is "diginotar fix".


All times are GMT. The time now is 01:19.

vBulletin® Version 3.8.8