Printable View
In new updates to few of its devices, HTC introduces a set of logging tools that composed lots of information. Anything the cause was, whether for superior sympathetic evils on users' devices, easier remote examination, business evilness - it doesn't issue. If you, like a corporation, plant these data collectors on a device, you better be certain the information they gather is protected and simply obtainable to privileged services otherwise the user, following opting in.
The problem for the Android operating system does not seem to have an end. After the safety problem on the application of Skype for our green robot found a few months ago, today we are seeing something that could go beyond the problem just mentioned. Trevor Eckhart, known as Trevi, examining the latest version of Android for some smartphones HTC has noticed some security flaws, which could give access to important information about the infected user.
The HTC devices with Android, cited above, found this problem only if they have the stock firmware, in fact if you have a ROM AOSP CyanogenMod or your HTC will be safe and sound.
Are you wondering what ever face this new problem so serious?
The explanation is simple, the giant Taiwanese in recent updates Sense interface for high-end devices have been added or changed something that would allow any application installed or not installed on Android Market for access to personal information that should be hidden one looking bad.
So far the app HTCloggers.apk as a source of evil has been identified, but it is assumed that this is not solely responsible. Anyone with root privileges can remove the file from the device but for safety's sake - even if the problem is apparently solved by then not completely.
The vulnerability has been reported in five days HTC without anything happened. Now the information has been distributed in the hope that it increases public pressure on the Taiwanese manufacturer. We can only fervently hope that there will soon be a public opinion and above all a security update for the affected devices.
Vulnerabilities in the software of smart phones are not big news, and the problem actually affects all manufacturers. Apple has had problems with a Geolocation Detail, there are always little things in Android and Windows at P7 had been strong to be improved. One problem with the Android applications. In contrast to Apple's App Store, where every app is checked before the release can also be installed with Android apps that come from unverified sources. Some HTC devices, there is obviously a double problem.
If you want to get rid of the file, you must be rooten phone and delete the data manually, which is now also not for everyone. HTC has promised at least in the United States, a patch.
HTC has a press release the confirmed existence of the security error and says currently working on a security patch after a short period of testing automatically via an over-the-air' update to the equipment will be brought.
Until the update of your device, you are basically still vulnerable. HTC asks users of their equipment to look by downloading and installing applications from parties that cannot be trusted. Something you obviously do not see the name of the application, but be careful before you install the application on the reactions in the Market for that application and are in doubt, throw it as a Google search against it.
Yes, I agree with you. HTC makes solid phones but the service leaves much to be desired. Now my question is that your mobile security issues with a custom rom and all HTC smartphones are affected?
There are several models of smartphones with Android mobile platform corporation that producer HTC have a vulnerability that can be exploited from a malicious application that steals user data, counting GPS location, SMS as well as phone numbers.
HTC has been put to work as soon as the cake has been discovered, and has run to state that "from HTC we take very seriously the safety of users, and are working to discover the problem as soon as we can. Free an update as soon as we determine the next steps should be necessary, "they say in the press release. But if you cannot wait for the response of HTC, Eckheart seems to have found a temporary solution found by clicking on Read.