“Massive” security/privacy issues found in HTC phones

The Android world had a major shock earlier today when several members of Android Police (appropriate, no?) published a "massive" security flaw found on several high-profile devices from HTC. The problem comes from a customization that HTC has implemented on the core Android system, allowing any app that asks for the right permission access to a staggering amount of users' private and technical data. Even more disturbing, it seems to be the case that some of this information can be retrieved remotely by HTC or anyone else due to an HTC app opening up a network port on any affected phone. The primary issue stems from the "android.permission.INTERNET" permission. Once an app calls this permission into effect, it has access to all sorts of disturbing information on both rooted and non-rooted phones. The private information which any app can access includes email addresses, GPS locations and at least some former locations, call logs, SMS logs, and information from running apps. The HTC app "HtcLoggers.apk" is capable of collecting much of this data and then supplying it to anyone who opens up a network port on the phone. Theoretically, it's possible to duplicate a user's entire phone using these vulnerabilities. Trevor Eckhart originally discovered these vulnerabilities, and the flaws have been verified and cataloged by Artem Russakovskii and Justin Case of Android Police. According to these three, the problems effect a wide range of HTC Android devices across all major carriers. The EVO 4G, EVO 3D, EVO Shift 4G, MyTouch 4G Slide and Thunderbolt were mentioned specifically, so it's a fair bet that anything running similar hardware and software is likewise affected. The whistle-blowers have created a proof-of-concept app which allows any user (no root required) to examine the data being collected in real-time. You can find their exhaustive research and the proof of concept app at the source link. Though Eckhart said that he alerted HTC of these security issues more than a week ago, no official response has been made. Update: HTC has made the following statement: "HTC takes our customers' security very seriously, and we are working to investigate this claim as quickly as possible. We will provide an update as soon as we're able to determine the accuracy of the claim and what steps, if any, need to be taken"

HTC EVO 4G looks great with Sense UI 3.5 [Video]

I know many readers have already seen HTC Sense UI 3.5 but in case you haven't check out this video. Thanks to a leaked RUU of the HTC Bliss running with the new HTC Sense UI 3.5 developers are starting to port the awesome UI to all the popular phones. The HTC EVO 4G being one of the biggest HTC devices it was only natural it would be one of the first. We have a full video and all the details below.

HTC EVO 4G software update rolling out now

For the masses of HTC EVO 4G users out there you'll be happy to know that starting yesterday, a software maintenance update has started rolling out for those lovely EVO's of yours. You might want to head over and click the check for updates button in settings because it appears HTC has something waiting for you.

HTC EVO 4G Gingerbread gets Rooted along with many other new HTC phones

If you were one of the many people that accepted the Android 2.3 Gingerbread update for your HTC EVO 4G and have been waiting for a easy way to root your phone then I have good news. Thanks to AlpharevX and @Unrevoked you can now easily and quickly root your EVO 4G, EVO 3D, Sensation, the new myTouch 4G Slide, and a slew of other HTC devices thanks to their new tool Revolutionary.

HTC Releases Source Code for Desire Z, Incredible S, and the Flyer Tablet

Lately HTC has been getting some more grief from the development and Facebook communities and another campaign was recently launched demanding they release the source code for many of their popular devices. The main ones being asked for in this online stampede over on Facebook were for newer devices like the EVO 3D or the Sensation and even the EVO 4G just to name a few but that didn't happen. Instead HTC released the source code for a few other not as popular devices to at least show progress.

HTCSense.com Listing a EVO 4G+ and Inspire HD

This is a bit interesting, if you head over to HTCSense.com you will find a few unique names that we haven't seen or heard before. Hearing of new phones is always exciting because then we can sit and wonder about what lies ahead. If you look in the drop-down menu you will see an HTC EVO 4G+ as well as the Inspire HD and both are equally interesting.
1 2 3 4 5 6 7