In information security we generally don't like surprises - so we are not amused that Fortinet chose to update Fortitoken 4.0 without any advanced warning, especially when it asks for mail and storage access on my android phone without any explanation whatsoever. I'm very surprised that Fortinet would pull such a bone-headed move. Even stranger that they didn't change the version from 4.0, the version shows on my phone as 4.0.0.0032 even though it seems like a pretty major update. Does anyone else find this odd?
