Nokia & Sun: Yes, Nokia S40 J2ME vulnerabilities exist
I have never understood news articles using terms like ‘claims’ and ‘rumors’ when reporting about several vulnerabilities reported in Nokia Series 40 (S40) phones.
It is not known if Sun Microsystems or Nokia Corp. paid €20 000 to Gowdiak, last week or possible later.
Update 22nd Aug: From IDG.no:
“Gowdiak would not disclose if he was paid, but said that only reputable, vetted companies that pay would get the full research, which amounted to 180 pages and 14,000 lines of proof-of-concept code.
Nokia has a complete copy of Gowdiak’s research, said Mark Durrant of Nokia’s corporate communications.”