HTC held true to its promise to look into the security vulnerability that surfaced over the weekend, an apparent glitch that allows any app requesting internet access to take a peek at a user account information, GPS location, system logs, and other potentially private data. While HTC assured us that user data isn’t at risk of being harmed by its own software, a third party malware app could exploit the security flaw and cause some trouble. The outfit is already building a patch, and will ship it out in an over the air update after a short testing period with its carrier partners. Until then? HTC recommends steering clear of apps from publishers you don’t trust. Hit the break to see the official statement.

Continue reading HTC confirms security hole, says patch is incoming

HTC confirms security hole, says patch is incoming originally appeared on Engadget on Tue, 04 Oct 2011 01:47:00 EDT. Please see our terms for use of feeds.

Permalink

The folks at Android Police seem to have stumbled across a rather jarring security vulnerability in HTC handsets running Android, giving common apps with internet access a peek at the device’s vital statistics, user information and more. Demonstrated in the above video, developer Trevor Eckheart found that a recent HTC update packed in a suite of logging tools that collects data on user accounts (including email addresses), recent GPS locations, SMS data and encoded text, phone numbers, system logs, running processes and more — all of which can be accessed by common apps requesting access to android.permission.INTERNET.

HTC is already looking into the issue, stating, “HTC takes our customers’ security very seriously, and we are working to investigate this claim as quickly as possible. We will provide an update as soon as we’re able to determine the accuracy of the claim and what steps, if any, need to be taken.” If you’re too antsy to wait for HTC’s update, head on over to the source link below — Eckheart says the issue can be resolved by removing HTCloggers from a rooted device.

HTC security vulnerability said to leak phone numbers, GPS data, and more, HTC responds (video) originally appeared on Engadget on Sun, 02 Oct 2011 19:17:00 EDT. Please see our terms for use of feeds.

Permalink