ActiveSync Is More Dangerous Than You Think

The thing I missed most about ActiveSync 3.x is its ability to sync over WiFi networks. Unfortunately, Microsoft chose to remove this feature when they released ActiveSync 4.x on the grounds that they wanted to make the application more secure. Well, I guess they missed this security loophole then:

Thanks to the RNDIS technology that was introduced in ActiveSync 4.x, anyone with the right tools will be able to take control of your computer with just their Pocket PC. This proof-of-concept, aptly called ActiveSink, allows the user to gain access to your data just by hooking up to it and using command line tools.

And I thought I was watching too much TV to think that such a thing was not possible. Guess I was wrong. (via jkOnTheRun)

Related posts

• Protect Yourself From ActiveSync Attacks (0)
• Your HTC Questions Answered (12)
• You Comment On The Layout, We Give You Prizes (2)
• XPERIA X1 Launches Mid-September (1)
• X1, Touch Pro or Touch HD? (10)