ARTL: upgrade now for security
Those who have Adobe Acrobat 7 installed for use in automated registration are advised to upgrade now if their system permits
The Journal, May 2007, page 51
Registers of Scotland (RoS) have advised of a security issue identified in relation to Adobe Acrobat Reader 7, the software initially intended to support the digital signature capability for ARTL.
It has been learned that in version 7.0.9 of Adobe Acrobat Reader 7 (a bug was also found in the previous version 7.0.7), when the ARTL smartcard is left in the card reader after the user’s PIN number has been entered and the digital signature applied, the software remains functional in the background – retaining the user’s PIN – until the internet browser is closed down or the user removes the smartcard from the card reader.
This could result in a digital signature being applied unlawfully, without the knowledge of the ARTL user, if the user’s computer is left unattended and unlocked with the smartcard still in the reader.
ARTL users who have version 7.0.9 installed must remove their smartcards straight after digitally signing electronic documents, to prevent any security vulnerability arising. (Policy documents concerning smartcard usage, to be published soon by RoS, will require this.) It is also good practice to lock computers whenever they are left unattended.
In late 2006, version 8 of Adobe Reader was released. Available as a free download from the Adobe website, this provides improved security and RoS now recommends version 8 for use with ARTL.
In version 8, after an ARTL user has digitally signed and submitted an electronic document, the Adobe software automatically shuts down after a short time (about 30 seconds).
While the user using Adobe version 8 should still remove the smartcard from the card reader after a signing event, because that is always best practice from a security standpoint, the potential for misuse of the smartcard is drastically reduced as the Adobe software quickly shuts down and no longer retains the user’s PIN.
Having taken advice from Adobe, both RoS and their IT partner BT plc recommend that ARTL users upgrade their Adobe Reader software to version 8 if their operating system allows them to do so. They should check that upgrading will not have any adverse impact on any other applications in their office systems that use Adobe Acrobat Reader.
Due to extended testing, it is now expected that most firms will not have access to the ARTL system until September.
Current Issue FeaturesBraving the stormHow different types of legal firm are coping with the current economic downturn, and how they see their future Civil justice: where next?An abridged version of the keynote address delivered to the conference on civil justice held in Edinburgh on 20 June Title Conditions Act: new registration proceduresNew procedures are in place for deeds intended to create new real burdens, to assist solicitors in complying with the requirement for dual registration Young lawyers rebornInterview with Scottish Young Lawyers Association President Maryam Labaki on SYLA's ambitions as it relaunches Shining some more light...Second part of overview of this year's Finance Act looks at the provisions on savings, pensions, residence/domicile and business taxes, among others Power to the tribunal?An advocate's and a solicitor's views of how the Scottish Government's proposed reforms to arbitration law might work in practice Piece by pieceA progress report from England & Wales on the setting up of the complex regulatory machinery under the Legal Services Act 2007 The poor in our midstInterview with Scottish Solicitors' Benevolent Fund convener Craig Bennet, who aims to raise awareness of the Fund so it can provide more help to those in need Current Issue ArticlesShifting sandsPresident's message: with economic issues dominating the profession's thoughts, the Society is taking steps to provide advice and support to those in need A rank bad ruleOpinion by two advocates that the Faculty's response to the OFT does its members a disservice by defending the cab rank rule and by resisting the use of ABS The Society's future role in complaints handlingA reminder, in the light of reactions to the first levy issued on behalf of the new Complaints Commission, of when and how the Society's responsibilities are changing Appreciation: Lord JohnstonReport of the tribute paid in court by the Lord President Professional Practice CommitteeNew guidelines on acting as a company director; and document control and file tracking Facing the lean yearsSome advice on how to pull through a recession and be ready for the next upturn, as word goes round of legal firms looking at staff cuts and other measures (part 1 of 2) It's a web 2.0 worldThe interactive nature of web 2.0 technology presents business opportunities, while posing new risks for those with inadequate precautions as to employee internet use Questions, questionsIn reviewing their risk profiles and risk controls, all firms might benefit from conducting a self-assessment by addressing questions put by some insurers elsewhere Bare necessitiesLatest criminal cases, including offensive weapons; Moorov rule; withdrawal of representation; evidence of a deceased; contempt of court by solicitor Coming on the blind sideA technical-sounding consultation, currently open for comments, covers some significant aspects of dispute resolution in employment Relocation, relocationA recent decision explores the matters to consider when one parent wants to relocate abroad along with their child Worse than the disease?Has the UK quietly outlawed "alternative" medicine through the Consumer Protection from Unfair Trading Regulations? Sleeping bountyThe Scottish Community Foundation has a scheme to breathe new life into dormant charitable trusts Scottish Solicitors' Discipline TribunalReports relating to Eileen Agnes Coogans; Zosia Marion Elizabeth Fraser; Annaline Webster; Ian Samuel Gerard Donnelly; Mark David Sheppard Website reviewsReviews of sites of organisations concerned with domain name disputes Book reviewsReview of Child and Family Law (Sutherland) Industry standardA survey south of the border suggests that in-house work in commerce and industry doesn't always match expectations - but most in-house lawyers expect to stay Meet the committeeProfile of In-house Lawyers Group committee member Sara Scott What's in a motto?A sample of In-house Lawyers Group members' notarial mottoes, collected by ILG secretary Tricia Sim Leasing by example"Green leases" appear to be some way off yet for the UK, but a Canadian model now published shows how they might work Good call?Reply to article questioning the Donald Trump planning application call-in argues that the decision is both competent and consistent with proper operation of the system Home reports - the practice questionsOpen letter over reservations as to the Society's proposed guidelines on the operation of home reports, in so far as they deal with conflict of interest |