text:
- BlackBerry Z10 smartphone users
- IT administrators who deploy BlackBerry Z10 smartphones in an enterprise
- BlackBerry Z10 smartphone users
- IT administrators who deploy BlackBerry Z10 smartphones in an enterprise
Have any BlackBerry customers been subject to an attack that exploits this vulnerability?
BlackBerry is not aware of any attacks on, or specifically targeting, BlackBerry Z10 smartphone customers using this vulnerability.
What factors affected the release of this security advisory?
This advisory addresses a publicly known WebKit vulnerability. BlackBerry publishes full details of a software update in a security advisory after the fix is available to the majority of our customers and wireless service provider partners. Publishing this advisory ensures that all of our customers can protect themselves by updating their software, or implementing mitigations included in this advisory until the software update is available to them. BlackBerry Z10 smartphone customers for whom the software update is not yet available should contact their wireless service provider to request BlackBerry 10 OS version 10.1.0.1392 or later.
Where can I read more about BlackBerry Z10 smartphone security?
Read the BlackBerry Enterprise Service 10 Security Technical Overview for more information on security features in the BlackBerry Z10 smartphone.
Where can I read more about the security of BlackBerry products and solutions?
Visit http://us.blackberry.com/business/topics/security.html for more information on BlackBerry security.
Customers can read the following lists to determine if their BlackBerry Z10 smartphone is affected.
- BlackBerry 10 OS version 10.1.0.1392 or later
- BlackBerry 7 OS and earlier
- BlackBerry® PlayBook™ tablet software
BlackBerry has issued a fix for this vulnerability, which is included in BlackBerry 10 OS 10.1.0.1392. The software update resolves this vulnerability on affected versions of BlackBerry Z10 smartphones. Customers should update their BlackBerry Z10 smartphone to BlackBerry 10 OS version 10.1.0.1392 or later to be fully protected from this issue.
Note: Customers who are running a BlackBerry 10 OS version earlier than 10.1.0.1392 but do not see a software update notification, and whose device indicates that the software is up to date, should contact their wireless service provider to request BlackBerry 10 OS version 10.1.0.1392 or later.
See the Mitigations section of this advisory for information on how to mitigate potential risk until the software update is available for all customers.
Update by Accessing the Software Update Notification
BlackBerry Z10 smartphones use notifications to keep customers informed about software updates. When a new software update notification is available, it appears within the Notifications section of the BlackBerry Hub on a BlackBerry Z10 smartphone.
Simply view the notifications and follow the steps to access the latest software update notification and complete the software update.
Manually Check for Software Updates on BlackBerry Z10 smartphones
- From the home screen, swipe down from the top of the screen.
- Tap Settings, then Software Updates.
- Tap Check for Updates.
Customers can also update their BlackBerry Z10 smartphone software using BlackBerry® Link. For more information, see the Help documentation for BlackBerry Link.
After customers update their software, the screen will indicate that BlackBerry 10 OS version 10.1.0.1392 or later is installed on the device.
How can I find out what version of the BlackBerry 10 OS I am running?
- From the home screen, swipe down from the top of the screen.
- Tap Settings.
- Tap About, and view the OS Version or Software Release field in the OS settings.
Are new (still in the box) BlackBerry Z10 smartphones exposed to this vulnerability?
During the initial setup process, the BlackBerry Z10 smartphone will download and install the latest version of the OS available from the user's carrier. The fix for this vulnerability is included in all versions of the BlackBerry Z10 smartphone software after version 10.1.0.1392.
Note: If customers are running a BlackBerry 10 OS version earlier than 10.1.0.1392 but do not see a software update notification but their device indicates that the software is up to date, customer can contact their wireless service provider to request BlackBerry 10 OS version 10.1.0.1392 or later.
Are BlackBerry Q10 and Q5 smartphones exposed to this vulnerability?
No. The fix for this vulnerability is included in all versions of the BlackBerry Q10 and Q5 smartphone software.
Does the BlackBerry Z10 smartphone force me to update my software?
No, customer action is required to update the software. BlackBerry Z10 smartphones use notifications to keep customers informed about software updates and provide instructions to easily install a software update. Customers can also manually check for software updates. See the Resolution section of this advisory for steps to update the software.
This vulnerability has a Common Vulnerability Scoring System (CVSS) score of 6.8. For a description of the WebKit security issue that this security advisory addresses, see the CVE® identifier CVE-2013-1000.
The capabilities and permissions of BlackBerry Z10 smartphone applications are restricted using a technique called sandboxing. Sandboxing limits the impact of vulnerabilities in applications to the confidentiality or integrity of other applications or the private data associated with them.
In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit these vulnerabilities through the BlackBerry Browser and then convince a user to view the website, or the attacker could take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit these vulnerabilities. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content.
BlackBerry recommends that all users apply the available software update to fully protect their BlackBerry Z10 smartphone.
All workarounds should be considered temporary measures for customers to employ if they cannot install the update immediately or must perform standard testing and risk analysis. BlackBerry recommends that customers without these requirements install the update to secure their systems.
There are no workarounds for this vulnerability. BlackBerry recommends that all users apply the available software update to fully protect their BlackBerry Z10 smartphone .
Common Vulnerabilities and Exposures (CVE) is a dictionary of common names (CVE Identifiers) for publicly known information security vulnerabilities maintained by the MITRE Corporation.
CVSS is a vendor agnostic, industry open standard designed to convey the severity of vulnerabilities. CVSS scores may be used to determine the urgency for update deployment within an organization. CVSS scores can range from 0.0 (no vulnerability) to 10.0 (critical). BlackBerry uses CVSS in vulnerability assessments to present an immutable characterization of security issues. BlackBerry assigns all relevant security issues a non-zero score. Customers performing their own risk assessments of vulnerabilities that may impact them can benefit from using the same industry-recognized CVSS metrics.
Initial publication.
By downloading, accessing or otherwise using the Knowledge Base documents you agree:
(a) that the terms of use for the documents found at www.blackberry.com/legal/knowledgebase apply to your use or reference to these documents; and
(b) not to copy, distribute, disclose or reproduce, in full or in part any of the documents without the express written consent of RIM.
Visit the BlackBerry Technical Solution Center at www.blackberry.com/btsc.


text:
For months now I've noticed this funny little graph on the right of the page when log into my bank accounts.
Usually in a rush to pay a bill or check a transfer, I've never really bothered to take a look. Until this week, that is. And I discovered a pretty powerful personal finance app that tracks all of our spending for the last two years.
Having just completed a renovation that created a large pile of receipts that we planned to one day compile to reveal the horrible truth of exactly how much we really spent, it was eye-opening to see the numbers already aggregated on the screen.
Personal budgeting is something we know we should all do – especially once you've got a mortgage and are trying to juggle repayments.
There are plenty of online apps that are aimed at helping people track their spending, some that even allow you to pull data from your bank accounts and investments.
But I'm surely not the only one who has never got around to seriously investigating what app would work for me let alone having bothered to set it up. Call it laziness or just being snowed under with the all-too-common demands of children, house repayments and work.
In Australia, ANZ Bank was the first to roll out a personal budgeting offering. Its free MoneyManager app sits outside of online banking and lets users – whether they are ANZ bank customers or not – track their spending from one website. Users can add bank accounts from a variety of financial institutions.
Earlier this year, NAB launched its offering – Money Tracker. It is only available to NAB customers and only aggregates information from your NAB bank accounts, loans and credit cards.
The advantages of the NAB offering are you don't need to log into a separate site. The tool pre-assigns your spending but is a bit confused – a hardware item I had purchased was assigned to the dining out category. If only! But the blurb promises that the program learns as it goes and should get better at deciphering transactions.
It took a couple of hours to trawl through nearly two years of spending and assign everything to the right categories but going forward I'm assuming I'd need to run my eye over recent entries once a month and make sure everything is in the right spot.
The major downside of relying on a personal finance app from your financial institution is that should you want to change providers, you'd presumably have to say good-bye to a lot of the data. But if you're using it just to keep track of recent spending, that probably won't matter too much anyway.
The Commonwealth Bank of Australia is said to be trialling various tools for its customers. When asked earlier this year whether it would follow suit, Westpac was non-committal.
Given the power that this type of spending tracker would give householders – particularly people first starting out with a mortgage and trying to understand where their money goes – it won't be surprising to see this as a common feature from all financial providers in the not too distant future.
Do you use a personal finance tool to keep track of your spending? If so, how has it helped you?
Please note: In the comments below, some readers give mention of products. This columnist is not endorsing these products and has not reviewed them. Readers should conduct their own research into the quality and security of the products mentioned.

subset: commoncrawl


text:
FACE Stockholm
- Color:
- pink/ruby/clear
Qty: 1
- 1
- 2
- 3
Please select an available size.
Please select a size.
Share This Item: Email
Description: Lip gloss #1, #3, #17
WHAT IT IS: A trio of FACE Stockholm take-anywhere glosses for gorgeous color and shine. A must-have for every purse and pocket.
Size: 0.28 oz. (each)
INCLUDES: Set of three lip glosses in signature shades: #1 (clear), #3 (shimmer sheer nude pink) and #17 (ruby).
Brand: FACE Stockholm


text:
Crocs Kids Duet Orb Slip-On (Toddler/Little Kid/Big Kid)SKU: #8081977
Product Information
- You're perfectly styled to tackle any playground that comes your way!
- Made from Croslite™ material for lightweight comfort.
- Durable outer shell provides lasting wear.
- Slip-on style for easy on and off.
- Footbed conforms to the foot for enhanced comfort.
- Ventilation ports offer enhanced breathability.
- Non-marking Croslite outsole.
- Imported.
- Measurements:
- Weight: 3 oz
- Product measurements were taken using size 2 Little Kid, width M. Please note that measurements may vary by size.


text:
|Louisiana.gov > Division of Administration > Office of Information Technology > Strategic Planning
|Text Size
OTS Procurement Procedures
Effective July 1, 2014, DOA/OTS started implementing a consolidated IT Procurement Policy whereby the OTS will procure all IT Equipment throughout the state in accordance with Act 712 of the 2014 Regular Legislative Session. In an effort to keep all day to day procurement flowing, all requests for all IT acquisitions (i.e. hardware, software, maintenance, and services) must be initiated with the completion of an IT Procurement Request Form until we are able to further automate this work flow. This form will be signed by Agency Management with delegated authority from the agency that can approve the expense being recharged back to the agency from OTS and submitted to the Agency's IT Director / Liaison. The Agency Liaison or delegate(s) shall be responsible for the review and approval of all requests (Does it meet the standards and strategic direction? Do we have something else I stock that could meet the need or be shared? Does this need to be a part of a volume discount, etc.?) This is important because OTS needs to be involved as early as possible in all IT related technology activities at the agency to assure optimal use of IT resources and funds. OTS will determine the standards for the various types of computer equipment and peripherals that will be approved and utilized within the state, with the goal of technical compliance and efficient use of resources and funding dollars. This is necessary to ensure consistency of the statewide computing network. The Agency Liaison who approves the purchase will scan the document and email it to email@example.com.
Click here for a basic list of items that will be procured centrally by OTS.
There are some consumable or specialty items which may be required only by a specific agency which will not have to be procured centrally by OTS and the agencies may procure those items themselves. These are listed on the Exemption List . Each Agency Liaison that would like to have items added to the exemption list that are specific for their agency should send them to David Dousay and Tom Sands.
Agency Liaisons should work with their agency management to decide who should be the authorized agency approvers delegated to sign off on the request from the viewpoint of need and willingness of the agency to accept the recharge from OTS. A Delegation of authority form (still in draft form) is located here, however the official copy and request will be sent out via the OTS office at a later date.
If you need any assistance completing the IT Acquisition Request form, feel free to contact OTS or your Agency Liaison. Also, click here for a set of slides which will give further details including a written description of the Procurement Process, a Procurement Process Flowchart and a list of FAQs.
Please also remember to capture the required packing slips and paper work upon delivery to assure the required PCard logs (refer to "LaCarte P-Card Certification Course for Cardholders" in LEO) and return as needed to Janelle Hart if it was processed through the OTS Help Desk so proper paper work can be provided to the agency upon recharge.
All items purchased by OTS for an agency's benefit (either through PO or PCard) that will be billed back to agency will remain the property of the requesting agency. The liaison officer will work with the agency's property section to insure these items are tagged according to the agency's policy.
All property purchased by OTS for an agency as part of a "line of service" (as well as inventory purchased for use by an OTS employee) will belong to OTS and should be tagged in OTS's inventory system. You may communicate with OTS Receiving to request tags.
Useful Links
For additional information, please browse these sites: