A data logger pushed out by HTC to Android handsets has opened up a vulnerability allowing any app with internet permissions to access private customer information.
The vulnerability was spotted by Trevor Eckhart, who informed HTC about it and waited five days for a response. Following that he decided to go public and gave Android Police the details along with demonstration code and a video showing how an application that is supposed to see almost nothing can now see almost everything.
http://www.theregister.co.uk/2011/10/03/htc_android_security/
HTC do seem a bit indifferent to customers at times. :(
I saw this yesterday on Android police but unless I'm mistaken it doesn't affect any HTC device on sale in the UK?!?
EVO 4G
EVO 3D
Thunderbolt
EVO Shift 4G
MyTouch 4G Slide
Those affected.
Quote from: Rik on Oct 03, 2011, 12:44:06
HTC do seem a bit indifferent to customers at times. :(
I was dead set to get the sensation, Rik. Now I think I'll keep what I have and wait and see, I have just remembered, if its not broken, dont fix it :sigh:
My life's motto. :)
Quote from: .Griff. on Oct 03, 2011, 12:45:32
I saw this yesterday on Android police but unless I'm mistaken it doesn't affect any HTC device on sale in the UK?!?
EVO 4G
EVO 3D
Thunderbolt
EVO Shift 4G
MyTouch 4G Slide
Those affected.
Cheers griff I have few friends with those handsets in teh states, I may tell them. Still going to stay put for a while, HTC push out to many handsets and not all get the lastest updates, also operators can slow that down to, least for now my iPhone gets every patch and new OS. Nothing is straight forward anymore. Edit It now ominously says 'others' According to the beeb the Sensation range could be included
Better add phone security maintenance to my to do list.
Quote from: pctech on Oct 03, 2011, 13:23:50
Better add phone security maintenance to my to do list.
Not much you can do until HTC patch it, if yours is a handset affected :-\
Mine is a Desire S.
Just installed Webroot security on it.
Is that the free version or the paid version? Mitch.
Free version Ray, allows me to lock the phone or make it scream (to aid finding it) or even locate it on a map from the website.
:thumb: