Fortify Software warns on modification risks from portable devices

San Mateo, CA, (PresseBox) - Fortify Software, the application vulnerability specialist, has warned that software crackers are likely to continue modifying relatively lowcost specificapplication devices, such as ereaders, but that the potential security risks to companies are significant.

The reason, says Richard Kirk, Fortify's European director, is that whilst best practice principles are usually applied to a firmwaredriven device, such as an ereader, in terms of operating system and allied software, all of these principles disappear out of the window when the device is cracked and repurposed.

Kirk's comments come as the Nook ebook reader, a lowcost device developed by Barnes & Noble last year, has been hacked ( to fully utilise the Android operating system.

"Although the Nook ( uses a customised version of the Android operating system, it also supports WiFi and 3G cellular, which means it has connectivity with all manner of systems via the Internet," he said.

"This is why the ereader, which has already been cracked to load the Pandora Webbased music service, the Twitter application and a number of Facebook applications, has now been fully cracked to run most Android applications," he added.

According to Kirk, whilst this is potentially great news for home users of the Nook, it poses a significant security risk for companies interested in using the device for corporate purposes, since there is no way of knowing whether the newly installed software - as well as the operating system cracks - comply with security best practices.

These practices, he explained, include the need for regular security testing to ensure software that is being developed is inherently secure.

The software industry, he says, has been extolling the benefits of secure coding practices - so that developers do not keep introducing vulnerabilities - for many years now, as witnessed by the Fortify 360 initiative (

Most 'home brew' software is excellent from a functional perspective he went on to say, but rarely complies with software development best practices when it comes to security, which is where the risk of using such cracked devices in a company environment enters the frame.

"You wouldn't expect an IT manager to allow unchecked thirdparty applications to be loaded onto company desktops, so why allow a modified ereader into the office environment?" he said.

"The problem facing IT managers is that they have no way of knowing whether a portable device like the Nook, has been modified or not, which is why we believe that cracked devices like this pose a potentially serious security risk for companies of all sizes," he added.

For more on Fortify Software:

Press releases you might also be interested in

Weitere Informationen zum Thema "Security":

9 DSGVO-Mythen enttarnt!

Die Vor­be­rei­tun­gen auf die DSG­VO / GD­PR kom­men bei vie­len Un­ter­neh­men nicht sch­nell ge­nug voran. Um­so wich­ti­ger ist des­halb die Auf­klär­ung, was wir­k­lich hin­ter der Da­ten­schutz-Grund­ver­ord­nung steckt. Ak­tu­ell kur­sie­ren vie­le My­then und fal­sche In­for­ma­tio­nen zur DSG­VO im Netz. Wir klä­ren auf.


Subscribe for news

The subscribtion service of the PresseBox informs you about press information of a certain topic by your choice at a choosen time. Please enter your email address to receive the email with the press releases.

An error occurred!

Thank you! You will receive a confirmation email within a few minutes.

I want to subscribe to the gratis press mail and have read and accepted the conditions.