Why cannot ActiveSync 4.0 work with ethernet connections!!! (e.g. Socket LP Ethernet CF Card)? All o

Discussion in 'ActiveSync' started by The PocketTV Team, Aug 25, 2005.

  1. Well I just installed Active Sync 4.0 and I discovered a MAJOR new issue:

    ActiveSync 4.0 does not work with Ethernet connection!!!

    I'm talking etherner on wire, i.e. using the Socket Low Power Ethernet CF
    Card, which provides super-fast communication between the device and the PC
    and is INVALUABLE for development.

    So, basically, onlu USB is available (5 times slower that Ethernet), and
    this is a MAJOR problem.

    I understand that this is a consequence of removing support for WiFi sync,
    which is considered "unsafe" or have a security hole.... but ethernet on
    wire does NOT have such security issue! yet, they removed it too.

    Is there any hidden way to re-enable ethernet sync in AS 4.0 ?

    Are there are plans from MSFT to provide an upade that DOES support ethernet
    sync?

    I have heard that many people are asking that, so PLEASE, PLEASE, MSFT, do
    something, at least for developers (where security is NOT an issue). Please
    provide us a beta with ethernet sync support!!!
     
    The PocketTV Team, Aug 25, 2005
    #1
    1. Advertisements

  2. Chris De Herrera, Aug 25, 2005
    #2
    1. Advertisements

  3. The PocketTV Team, Aug 25, 2005
    #3
  4. Please read AirScanner Reports Possible Equipment ID and Password Hack via
    i don't think that developers password-protect their development devices!

    then MSFT could have just disabled ethernet sync when devices are password
    protected, without pissing-off ten thousand developers.
     
    The PocketTV Team, Aug 25, 2005
    #4
  5. Chris De Herrera, Aug 25, 2005
    #5
  6. The security risk is not "listening to wi-fi", but using a remote
    connection - the ActiveSync program actually acts as a server and this is a
    risk without proper identification and authentication in place, in my view.

    When synchronising over-the-air to Exchange for example, Certificates are
    used to authenticate the server and the user must enter a password.

    --
    Mauricio Freitas, Microsoft MVP Mobile Devices
    http://www.geekzone.co.nz
    Bluetooth guides: http://www.geekzone.co.nz/content.asp?contentid=449
    Software for Pocket PC and Smartphone: http://www.geekzone.co.nz/store
    Software for Pocket PC directly on your device:
    http://www.geekzone.co.nz/inhand.asp
     
    Mauricio Freitas [MVP], Aug 25, 2005
    #6
  7. I hardly think running ActiveSync over my home LAN wireless segment
    encrypted with WPA-PSK (TKIP) and a 63-character totally random ASCII is a
    security risk. Personally I think this is total overkill...

    Not everyone in the home community is an Exchange user...

    --

    Al Jarvi (MS-MVP Windows Networking)

    Please post *ALL* questions and replies to the news group for the mutual
    benefit of all of us...
    The MS-MVP Program - http://mvp.support.microsoft.com
    This posting is provided "AS IS" with no warranties, and confers no
    rights...
     
    Sooner Al [MVP], Aug 25, 2005
    #7
  8. The PocketTV Team

    Alan Smith Guest

    Just because you personally don't have a risk does not mean that a security
    risk would not be present for other users. MS are trying to remove a risk,
    if they added 'features' that increased risk they would be criticised
    heavily by more users than those who criticise for removing risks. Sometimes
    you need to accept that changes may be for the greater good.
     
    Alan Smith, Aug 26, 2005
    #8
  9. IMHO, its just another example of MS catering to the Exchange world and
    ignoring the home user. Of course that is where the $$$ are...

    I wonder how many corporate folks don't use Exchange and don't realize new
    devices requiring AS 4.0 will not be able to sync over a wired Ethernet or
    wireless 802.11b/g network.

    --

    Al Jarvi (MS-MVP Windows Networking)

    Please post *ALL* questions and replies to the news group for the mutual
    benefit of all of us...
    The MS-MVP Program - http://mvp.support.microsoft.com
    This posting is provided "AS IS" with no warranties, and confers no
    rights...
     
    Sooner Al [MVP], Aug 27, 2005
    #9
  10. The PocketTV Team

    Alan Smith Guest

    And how many home users use exchange and .....

    It's a 2 sided coin.
     
    Alan Smith, Aug 27, 2005
    #10
  11. It does look that Exchange users are the focus, but it is not the case. Just
    that Exchange users have the ability to use certificates, with a proper IT
    support infrastructure.

    How many home users would go through the trouble of creating certificates,
    installing then and configuring everything so that ActiveSync to Outlook
    over a remote connection is as safe? Not many, but as soon as someone
    creates a exploit that steals private user information during that
    connection, then everyone would cry.

    It is just that it looks like there's not a safe enough security solution
    for remote syncing. There's apparently no "better product for Exchange" or
    something like that.


    --
    Mauricio Freitas, Microsoft MVP Mobile Devices
    http://www.geekzone.co.nz
    Bluetooth guides: http://www.geekzone.co.nz/content.asp?contentid=449
    Software for Pocket PC and Smartphone: http://www.geekzone.co.nz/store
    Software for Pocket PC directly on your device:
    http://www.geekzone.co.nz/inhand.asp
     
    Mauricio Freitas [MVP], Aug 27, 2005
    #11
  12. The PocketTV Team

    Sven Guest

    Not entirely sure it is a significant home user issue. Home developer,
    developer, sure, because of the significant hit in throughput if you can't
    sync via the network, wired or wireless. As a minor compensation you now
    have a significantly improved PPC emulator for development work. Sure it
    isn't the same as a real PPC, but I bet a lot more can be tested on the PC
    before loading it to a PPC for final tweaking. If the average home user
    really wants to sync around the house wirelessly, there is always BT. The
    vast majority of current Paces support it and it is no harder to set up than
    Wife (IMHO). I just ordered another BT USB dongle for under $25 for a PC. If
    you have an older non-BT PPC, then there is no need to be upgrading to AS4
    in the first place. (Except for those folks needing to support both old and
    WM5 PPCs. A small percentage I would guess) Being able to sync remotely to
    my home PC from some odd location (Starbuck's) just doesn't seem all that
    critical to me. I'm not at my PC adding stuff, I'm at Starbuck's. Yea I
    miss out on the 'backup' effect of syncing, but if I add something that
    critical to my PPC, I can just run a backup, or save it on a flash card.
    Probably easier than remote sync, and doesn't require me to have internet
    access. Just don't lose the PPC.

    I don't like it being gone either, but the I really feel the folks who
    really need it are a fairly small percentage compared to the damage the
    insecurity could cause, both to an individual, or company, as well as to the
    platform perception.
     
    Sven, Aug 27, 2005
    #12
  13. Can't you make the same argument for ISPs that don't provide SSL encrypted
    email? If my ISP does not offer SSL encrypted email, and they don't, then
    someone could sniff passwords, email, etc while I am at a wireless hotspot
    and exploit that. Perhaps MS should rewrite Outlook Express so users that
    don't connect to a mail server that uses SSL will not be able to
    send/receive email from that server...

    --

    Al Jarvi (MS-MVP Windows Networking)

    Please post *ALL* questions and replies to the news group for the mutual
    benefit of all of us...
    The MS-MVP Program - http://mvp.support.microsoft.com
    This posting is provided "AS IS" with no warranties, and confers no
    rights...
     
    Sooner Al [MVP], Aug 27, 2005
    #13
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.