12-05-2002, 10:43 AM
|
|
Pontificator
Join Date: Aug 2006
Posts: 1,177
|
|
The Orange SPV Smartphone Lock Down
The Orange SPV is the first Smartphone 2002 and the first mobile phone with a Microsoft operating system, so it is not a surprise that anything related to the Orange SPV attracts attention. The last couple of days we've seen reports and comments about the new Orange SPV mobile phone and how the phone is "locked" from a software perspective, forcing developers to first get their applications signed by third party certificate authorities such as Verisign. Many have reacted strongly to this as it severly impacts developers ability to reach users and thereby limiting the growth of the software market and user choice. Reactions have been strong also because the process of forced application certification and device locks is uncommon in the software market we've lived in for decades: the PC market.
With these thoughts in mind, I put together the questions below to Microsoft. Check them out and read the answers.
Question: From a software deployment point-of-view, how is the Orange SPV phone locked and why?
Answer: Windows Powered Smartphone includes a X.509 based applications security model which allows operators to optionally require applications to be digitally signed prior to installation and execution on devices. The Orange SPV has applications security enabled, making devices "locked" to unsigned applications. For these locked devices, mobile operators engage public trusted authorities i.e. Verisign or Baltimore (certificate authorities) to digitally sign applications before they are installed and executed on devices on their networks
Question: What does a developer have to do and obtain to develop, market and sell Smartphone 2002 applications that Orange SPV users can buy, install and use?
Answer:
-Register as a member of Microsoft Partner Program and choose "Smartphone" on the left hand menu.
-Download the Software Development Kit (SDK) (More than 225,000 developers have already done so.)
-Once developers receive logo certification, they can submit their applications into the Mobile2Market catalog which is promoted to operators and retailers worldwide.
-Engage Mobile2Market Certificate Authority partner, Verisign or Baltimore, to digitally sign application.
Please note: There is a nominal fee for logo certification and code signing. This fee is paid directly to third party testing houses and code signing partners (and not Microsoft nor Orange). Microsoft is making a limited discount available to partners getting an app certified before 30th January. The discount is being paid directly to the third party testing labs.
Question: Is the software lock imposed as a request by Orange or by Microsoft?
Answer: Device lockdown is a choice for OEMs or mobile operators. Windows Powered Smartphone 2002 includes optional advanced applications security architecture designed to enable OEMs, operators and corporations the flexibility to meet their customers� requirements. The X.509 based applications security model allows operators to require applications to be digitally signed prior to installation and execution.
Question: What is Microsoft's view on restricting users what they can and can't install on their devices?
Answer: A large and empowered end user and software developer community is essential to the health of the computing ecosystem. As the worlds of telephony and software converge on next generation devices like Smartphone, we'll undoubtedly see the traditions in each of these industries evolve somewhat. From a security standpoint, the Smartphone 2002 architecture (based on the X.509 certificate model) allows operators not only to protect their customers from malicious applications and viruses, but also to provide their corporate customers additional levels of device control and customization.
Microsoft supports security efforts designed to maximize user experience by protecting the integrity of:
1. User data - ensure contacts are not posted to obscure websites, for example
2. Network - prevent applications from interfering with network stability through signaling or SMS, for example
3. Billing � guarantee applications are not generating traffic or transaction events (and accruing costs) without users knowledge
By remaining 100% committed to the Windows developer community and doing our part by providing a fertile platform for innovation, Microsoft hopes to ship every software platform, with the developer community and its needs, as well as the computing ecosystem, in mind.
Question: Will an unlocked Smartphone 2002 ever be released by anyone?
Answer:The Orange SPV is the first of several Smartphone-based handsets to come to market. Microsoft has nothing to announce today but stay tuned...
As far as I can tell, Orange is in true mobile network operator spirit imposing the device lockdown. That is said with ambigious feelings: I would love to see an completely open architecture, and I read the statements about "evolving traditions" both ways: we will eventually see more open telephony architectures as well as more secure and closed software architectures. However, while it is Orange that decided to lock their devices, I don't doubt that product teams at Microsoft will address their not so perfect security track record and act when Bill Gates says: "Trustworthy Computing". Open and secure are each other's opposites, so we will see more closed and more secure architectures from Microsoft moving forward, not only in the areas of telephony.
Now it's your turn! What would be the best move by a mobile network operator and by Microsoft moving forward on their next Smartphone projects?
|
| |
|
|
|
12-05-2002, 11:42 AM
|
|
Thinker
Join Date: Oct 2004
Posts: 318
|
|
I was planning on changing my T68i for a SPV. I even went as far as placing the order. Then I read about the lockdown so I canceled the order straight away.
There have been several issues with the SPV (not being able to dial contacts from the phone book being a major one) which had me a bit on edge about it. The lack of Bluetooth had me a bit concerned but I thought I'd just buy the SDIO card when it comes out. But the lockdown is just a killer for me!!!
I guess I'll wait for the P800 instead. Sorry Microsoft and Orange but if I can't any apps that I want on a "Smartphone" then it doesn't seem that smart to me! :cry:
|
| |
|
|
|
12-05-2002, 11:56 AM
|
|
Pupil
Join Date: Oct 2002
Posts: 47
|
|
I also can't wait for the P800 
Operators should just remove the lock and provide ZoneAlarm for Smartphones.
I've read the comments of an Orange representative saying that they wouldn't want customers being wrongly billed. That is a lame excuse. The same problem exists on the desktop. Just make a popup appear when an app dials a GPRS connection, etc.
|
| |
|
|
|
12-05-2002, 12:03 PM
|
|
Ponderer
Join Date: Nov 2004
Posts: 102
|
|
Well it is the first device ever made with this OS. Everybody make mistakes and Orange as well as MS will learn form this.
I still think that this OS will really change our way of telephoning. Just be patient
I cannot use such things in Japan, but I am working with China and must go there sometimes. I will prefer to buy the new 6650 Nokia (who arrive this month in Japan the First Mobile phone in the world who can be use almost everywhere  ) than any Smartphone now... just wait and see
When I was in France I play with 2 P800 they look so cheap  (those Model were borrowed by SE)
|
| |
|
|
|
12-05-2002, 12:08 PM
|
|
Intellectual
Join Date: Jul 2003
Posts: 174
|
|
I think the market will speak on this one, both from the developer side and the end user side. I'm all for app signing but I think the user needs to be allowed to turn it off.
I've had Lextionary for the Smartphone at beta stage for over a month and that's where it has stayed. No phones to test on, cash up front to certify it, signing hassles, and did I mention a microscopically small Smartphone installed base? I have more pressing things to attend to.
Microsoft and their partners (Orange chose the specific signing model, not MS) will see that software support for the SPV will be a trickle at best and will panic in a few months. The model they have setup works fine for large corporate applications but doesn't work for a cool, hip device with fun and interesting software. Makes even less sense for an inexpensive mass market device such as the SPV.
I guess they are happy to give this market away to Nokia. Nokia has their problems but they also have the head start.
And has Microsoft fallen so far that they were only able to get 2 launch partners, one of which did the unheard of and pulled out at the last minute and the other one is just one more operator in just one more country (no offense UK)?
Okay, it's 3 in the morning and I've been programming all day and I'm a little grouchy....but Microsoft is not getting off to a good start on this one. It's a shame because the hardware and OS are pretty darn decent for a version 1.
|
| |
|
|
|
12-05-2002, 12:53 PM
|
|
Pupil
Join Date: Sep 2004
Posts: 14
|
|
And if someone wants to make program for smartphone. They can't test it before signing. And it is so different to code for real hw.
This just verifies my opinion about carrying 2 devices...
It is so useful to make notes to PocketPC while talking on phone.
|
| |
|
|
|
12-05-2002, 01:13 PM
|
|
Thinker
Join Date: Oct 2004
Posts: 318
|
|
Changing the subject a bit!!!
I went to see the new James Bond film last weekend. 14 months ago one of the guys there has a P800!!! How come these terrist get a P800 14 months ago yet I have to wait this long!  It worked and all. Had a really good image of Bond on it. He didn't even need to look at the phone when he took the picture it snapped a perfect image of Bond from 20 yards and had him slap bang in the middle of the frame.
Then some bird blew up a building using a stick of dynamite and a t68i. So I decided then to turn my phone off!
Sorry just thought I'd say SmartPhones can be used for Good :angel: and Evil :twisted: . So just be careful with the phones people.
|
| |
|
|
|
12-05-2002, 01:18 PM
|
|
Pupil
Join Date: Oct 2002
Posts: 47
|
|
The SPV is just a toy for consumers. Internet, ONE email account only, games, no bluetooth.
Biz people will always have two devices. A phone enabled PDA with a large screen and a bluetooth audio earset
|
| |
|
|
|
12-05-2002, 01:33 PM
|
|
Ponderer
Join Date: May 2002
Posts: 105
|
|
Another nail for the coffin
The flood of very cheap quality software for the Symbian OS is amazing me, Smartphones are slipping behind, soon the gap will be unrecoverable.
|
| |
|
|
|
12-05-2002, 01:58 PM
|
|
Ponderer
Join Date: May 2006
Posts: 63
|
|
Thoughtful arguments on both sides.
In the final analysis, the customer/user will decide what is most useful and acceptable.
Discussion groups such as this one allow the future customers to learn about the product features limitations and capabilities and thus be prepared to decide.
Thanks for the operations of this discussion goup.
8O
|
| |
|
|
|
|
|
Linear Mode
