Location : Cleveland, OH
I could be an alarmist, or it could be
I am being melodramatic, however I am not happy with this
revelation concerning Lotus
Traveler.
We are running a Traveler pilot and a customer told me it was possible to move a mail from the Traveler account (business) to another account (private).
You can reproduce it every time. Just open a mail, move it and use the left arrow (account) to display all your e-mail accounts, select one then a folder and voilà, your business mail has ben (sic) moved to a private account without any trace on the enterprise mail server.
Cedric is correct, I was able to reproduce this on the iPhone and iPad (Updated for clarity: this only affects Apple devices, you can't do this on Android or Nokia). Frankly, it calls into question e-discovery, and, IMHO, is a "security" hole.
No, there does not appear to be a setting in the iPhone Configuration Tool to resolve this. There is definitely no setting within Traveler to limit/remove this "feature." I highly doubt that this will be resolved with the use of a Mobile Device Management (MDM) tool, either.
As an aside, if you do talk to MDM vendors, did you know that none of them know anything about Traveler? I find that fascinating.
While I am on a Traveler topic, here's another one to ponder:
If you setup and configure Traveler on an Android device, which, if you are on the outside, requires SSL, then you go inside the firewall, Traveler stops working. Once you setup Traveler to use SSL, it expects SSL all the time. This appears to only affect those Traveler users on Android. Going through the same installation on iPad/iPhone, it doesn't expect an SSL connection when you are on an internal network. Somehow, some way, it moves easily between https and http.
Not so with Android. It looks like "pick one and stick with it."
On a Nokia device, Traveler can work in either mode, however the user has to change the internet settings before launching the Traveler client.
This "consumerization of IT" is certainly interesting.
Link: developerWorks: Lotus: IBM Lotus Notes/Domino 8.5 Forum
We are running a Traveler pilot and a customer told me it was possible to move a mail from the Traveler account (business) to another account (private).
You can reproduce it every time. Just open a mail, move it and use the left arrow (account) to display all your e-mail accounts, select one then a folder and voilà, your business mail has ben (sic) moved to a private account without any trace on the enterprise mail server.
Cedric is correct, I was able to reproduce this on the iPhone and iPad (Updated for clarity: this only affects Apple devices, you can't do this on Android or Nokia). Frankly, it calls into question e-discovery, and, IMHO, is a "security" hole.
No, there does not appear to be a setting in the iPhone Configuration Tool to resolve this. There is definitely no setting within Traveler to limit/remove this "feature." I highly doubt that this will be resolved with the use of a Mobile Device Management (MDM) tool, either.
As an aside, if you do talk to MDM vendors, did you know that none of them know anything about Traveler? I find that fascinating.
While I am on a Traveler topic, here's another one to ponder:
If you setup and configure Traveler on an Android device, which, if you are on the outside, requires SSL, then you go inside the firewall, Traveler stops working. Once you setup Traveler to use SSL, it expects SSL all the time. This appears to only affect those Traveler users on Android. Going through the same installation on iPad/iPhone, it doesn't expect an SSL connection when you are on an internal network. Somehow, some way, it moves easily between https and http.
Not so with Android. It looks like "pick one and stick with it."
On a Nokia device, Traveler can work in either mode, however the user has to change the internet settings before launching the Traveler client.
This "consumerization of IT" is certainly interesting.
Link: developerWorks: Lotus: IBM Lotus Notes/Domino 8.5 Forum
Powered By : Domino
BlogSphere V1.3.1
Join The WebLog Revolution at BlogSphere.net