Skip to main content

RIM: turn off JavaScript on your BlackBerry

Research In Motion is urging BlackBerry users to disable JavaScript on their devices following the public reveal of an exploit during last week’s Pwn2Own contest at the annual CanSecWest security conference. The hack springs from a vulnerability in the WebKit browser rendering engine used in BlackBerry Device Software version 6.0 and later.

Any data stored the device’s media card and built-in media storage is in danger of being accessed, though e-mail, calendar and contacts data are safe, according to a RIM security advisory. Application data on a BlackBerry is stored separately, alongside the app itself, and the exploit is apparently unable to access anything saved on that level.

RIM notes in its advisory that “the exploitation of the vulnerability was performed at the Pwn2Own 2011 contest and is publicly known.” Though the security hole was demonstrated at the event, there have been no reports to the BlackBerry Security Incident Response Team that the hack has been successfully exploited outside the closed Pwn2Own setting.

That said, the vulnerability exists and caution is advised. At the most basic level, RIM recommends that all BlackBerry users be cautious about which websites they browse to until the issue has been addressed. The company also recommends disabling JavaScript on your BlackBerry’s web browser, noting that “the issue is not in JavaScript but the use of JavaScript is necessary to exploit the vulnerability.” The method for turning off the service may vary by phone, but the basic idea is simple: open your browser, select “Web Content” in the options menu and uncheck the “Enable JavaScript” box.

Editors' Recommendations

Adam Rosenberg
Former Digital Trends Contributor
Previously, Adam worked in the games press as a freelance writer and critic for a range of outlets, including Digital Trends…
BlackBerry Key2 LE: Everything you need to know
The BlackBerry Key2 LE is back home at Verizon, but only for business types
BlackBerry Key2 LE Hands On

The BlackBerry Key LE is a lower-cost version of the Key2, doing away with some of the more high-tech features seen on the expensive sister phone, and cutting costs by using different materials for the body, to create a more affordable but still distinctly BlackBerry smartphone.

You can check out our Key2 LE review to learn more about what it's like to live with the phone, but in the meantime, here are all the technical specs, details, and availability options.
The BlackBerry Key2 LE is available to buy at Verizon, but only to business and enterprise customers, according to reports. Verizon's selling the Key2 LE for $450 without a contract, or for $100 if you sign up for a two-year plan. The phone does not show up on Verizon's non-business store, so there does not seem to be the option to buy the phone for this price without a business plan.

Read more
BlackBerry Key2: Everything you need to know
The dramatic BlackBerry Key2 Red Edition is now available in the U.S.
blackberry keytwo news and rumors key2 red main

Blackberry is always at the top of its game when it sticks to what it knows best -- security-focused phones with QWERTY keyboards. The Blackberry KeyOne was a return to form for the company, and its successor has improved upon it in every way. Here's everything you need to know about the BlackBerry Key2.
The BlackBerry Key2 Red Edition is now available


Read more
BlackBerry sets own pace for 2019: Strikes Verizon deal, but no 5G phone coming
BlackBerry Key2 LE review


BlackBerry continues to look to its roots to continue growing in 2019, but isn’t about to jump into one of the biggest — and buzzword-filled — mobile trends of the moment. First, BlackBerry is going home this year, and no, we don’t mean to Canada. We mean it’ll be selling its latest smartphone on the Verizon network in the U.S.. Anyone waiting for a BlackBerry Android phone with 5G capabilities will have to wait at least a year before one arrives.
Verizon deal

Read more