Why cannot ActiveSync 4.0 work with ethernet connections!!! (e.g. Socket LP Ethernet CF Card)? All o

Well I just installed Active Sync 4.0 and I discovered a MAJOR new issue:

ActiveSync 4.0 does not work with Ethernet connection!!!

I'm talking etherner on wire, i.e. using the Socket Low Power Ethernet CF
Card, which provides super-fast communication between the device and the PC
and is INVALUABLE for development.

So, basically, onlu USB is available (5 times slower that Ethernet), and
this is a MAJOR problem.

I understand that this is a consequence of removing support for WiFi sync,
which is considered "unsafe" or have a security hole.... but ethernet on
wire does NOT have such security issue! yet, they removed it too.

Is there any hidden way to re-enable ethernet sync in AS 4.0 ?

Are there are plans from MSFT to provide an upade that DOES support ethernet
sync?

I have heard that many people are asking that, so PLEASE, PLEASE, MSFT, do
something, at least for developers (where security is NOT an issue). Please
provide us a beta with ethernet sync support!!!

 

Hi,
Microsoft chose not to support network connections due to a security risk.

Please read AirScanner Reports Possible Equipment ID and Password Hack via
Network with ActiveSync 3.71 and 3.8 -
http://www.airscanner.com/security/activesync371.htm


--
Chris De Herrera
http://www.pocketpcfaq.com
http://www.tabletpctalk.com
http://www.pocketpctalk.com
http://www.mobilitytalk.com

 

The security risk is for people who use WiFi.

We use wire ethernet!

BTW, apparently there is a workaround to use ethernet for deployment and
debugging, see
http://blogs.msdn.com/vsdteam/archive/2005/04/28/413304.aspx

-t

 

Please read AirScanner Reports Possible Equipment ID and Password Hack via

i don't think that developers password-protect their development devices!

then MSFT could have just disabled ethernet sync when devices are password
protected, without pissing-off ten thousand developers.

 

Hi,
The security risk is for both. Any machine that is accessible on the
network can attempt this hack.


--
Chris De Herrera
http://www.pocketpcfaq.com
http://www.tabletpctalk.com
http://www.pocketpctalk.com
http://www.mobilitytalk.com

 

The security risk is not "listening to wi-fi", but using a remote
connection - the ActiveSync program actually acts as a server and this is a
risk without proper identification and authentication in place, in my view.

When synchronising over-the-air to Exchange for example, Certificates are
used to authenticate the server and the user must enter a password.

--
Mauricio Freitas, Microsoft MVP Mobile Devices
http://www.geekzone.co.nz
Bluetooth guides: http://www.geekzone.co.nz/content.asp?contentid=449
Software for Pocket PC and Smartphone: http://www.geekzone.co.nz/store
Software for Pocket PC directly on your device:
http://www.geekzone.co.nz/inhand.asp

 

I hardly think running ActiveSync over my home LAN wireless segment
encrypted with WPA-PSK (TKIP) and a 63-character totally random ASCII is a
security risk. Personally I think this is total overkill...

Not everyone in the home community is an Exchange user...

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the mutual
benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

 

Just because you personally don't have a risk does not mean that a security
risk would not be present for other users. MS are trying to remove a risk,
if they added 'features' that increased risk they would be criticised
heavily by more users than those who criticise for removing risks. Sometimes
you need to accept that changes may be for the greater good.

 

IMHO, its just another example of MS catering to the Exchange world and
ignoring the home user. Of course that is where the $$$ are...

I wonder how many corporate folks don't use Exchange and don't realize new
devices requiring AS 4.0 will not be able to sync over a wired Ethernet or
wireless 802.11b/g network.

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the mutual
benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

 

And how many home users use exchange and .....

It's a 2 sided coin.

 

It does look that Exchange users are the focus, but it is not the case. Just
that Exchange users have the ability to use certificates, with a proper IT
support infrastructure.

How many home users would go through the trouble of creating certificates,
installing then and configuring everything so that ActiveSync to Outlook
over a remote connection is as safe? Not many, but as soon as someone
creates a exploit that steals private user information during that
connection, then everyone would cry.

It is just that it looks like there's not a safe enough security solution
for remote syncing. There's apparently no "better product for Exchange" or
something like that.


--
Mauricio Freitas, Microsoft MVP Mobile Devices
http://www.geekzone.co.nz
Bluetooth guides: http://www.geekzone.co.nz/content.asp?contentid=449
Software for Pocket PC and Smartphone: http://www.geekzone.co.nz/store
Software for Pocket PC directly on your device:
http://www.geekzone.co.nz/inhand.asp

 

Not entirely sure it is a significant home user issue. Home developer,
developer, sure, because of the significant hit in throughput if you can't
sync via the network, wired or wireless. As a minor compensation you now
have a significantly improved PPC emulator for development work. Sure it
isn't the same as a real PPC, but I bet a lot more can be tested on the PC
before loading it to a PPC for final tweaking. If the average home user
really wants to sync around the house wirelessly, there is always BT. The
vast majority of current Paces support it and it is no harder to set up than
Wife (IMHO). I just ordered another BT USB dongle for under $25 for a PC. If
you have an older non-BT PPC, then there is no need to be upgrading to AS4
in the first place. (Except for those folks needing to support both old and
WM5 PPCs. A small percentage I would guess) Being able to sync remotely to
my home PC from some odd location (Starbuck's) just doesn't seem all that
critical to me. I'm not at my PC adding stuff, I'm at Starbuck's. Yea I
miss out on the 'backup' effect of syncing, but if I add something that
critical to my PPC, I can just run a backup, or save it on a flash card.
Probably easier than remote sync, and doesn't require me to have internet
access. Just don't lose the PPC.

I don't like it being gone either, but the I really feel the folks who
really need it are a fairly small percentage compared to the damage the
insecurity could cause, both to an individual, or company, as well as to the
platform perception.

 

Can't you make the same argument for ISPs that don't provide SSL encrypted
email? If my ISP does not offer SSL encrypted email, and they don't, then
someone could sniff passwords, email, etc while I am at a wireless hotspot
and exploit that. Perhaps MS should rewrite Outlook Express so users that
don't connect to a mail server that uses SSL will not be able to
send/receive email from that server...

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the mutual
benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...