HTC security vulnerability said to leak phone numbers, GPS data, and more, HTC responds (video)




The folks at Android Police seem to have stumbled across a rather jarring security vulnerability in HTC handsets running Android, giving common apps with internet access a peek at the device’s vital statistics, user information and more. Demonstrated in the above video, developer Trevor Eckheart found that a recent HTC update packed in a suite of logging tools that collects data on user accounts (including email addresses), recent GPS locations, SMS data and encoded text, phone numbers, system logs, running processes and more — all of which can be accessed by common apps requesting access to android.permission.INTERNET.

HTC is already looking into the issue, stating, “HTC takes our customers’ security very seriously, and we are working to investigate this claim as quickly as possible. We will provide an update as soon as we’re able to determine the accuracy of the claim and what steps, if any, need to be taken.” If you’re too antsy to wait for HTC’s update, head on over to the source link below — Eckheart says the issue can be resolved by removing HTCloggers from a rooted device.

HTC security vulnerability said to leak phone numbers, GPS data, and more, HTC responds (video) originally appeared on Engadget on Sun, 02 Oct 2011 19:17:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceAndroid Police, InfectedROM  | Email this | Comments

Refresh Roundup: week of September 26, 2011

Your smartphone and / or tablet is just begging to get updated. From time to time, these mobile devices are blessed with maintenance refreshes, bug fixes, custom ROMs and anything in between, and so many of them are floating around that it’s easy for a sizable chunk to get lost in the mix. To make sure they don’t escape without notice, we’ve gathered every possible update, hack, and other miscellaneous tomfoolery from the last week and crammed them into one convenient roundup. If you find something available for your device, please give us a shout at tips at engadget dawt com and let us know. Enjoy!

Official Android updates

  • The top story this week revolves around the HTC Thunderbolt’s long-awaited Gingerbread OTA update. It was finally rolling out, which was exciting news for owners of the device — until it had to be pulled because of some rather significant bugs. The largest of them all was that voicemail notifications no longer worked properly; video chatting through Google Talk was also slightly messed up as well. No word on when we can expect to see it come back with those bugs fixed. [Droid-Life]
  • Unfortunately, the Thunderbolt isn’t the only phone falling victim to pulled revamps; the LG Optimus S on Sprint had its Gingerbread update kiboshed, though users have had two weeks to get it — plenty of time for anyone to experience some of the bugs, which included the phone not charging, the SD card not being recognized when the phone’s connected to the computer, no access to data services, and predictive text on the virtual keyboard stopped working. It’s disappointing to see this happen so soon after the Kyocera Echo update went through a similar debacle. [SprintFeed]
  • LG Optimus 3D: V10K firmware update, enables phone to convert OpenGL-capable 2D games into stereoscopic 3D. Note: this still runs Android 2.2.2, so we’re still waiting for Gingerbread. [AndroidCentral]
  • Motorola Xoom WiFi: Android 3.2.1 is beginning to roll out. [AndroidCentral]
  • Dell Streak 7: Honeycomb update rolling out now to unspecified regions [AndroidCentral]
  • Asus Eee Pad Transformer: Revamped to Android 3.2.1, adds other bug fixes [AndroidCommunity]
  • Casio G’Zone Commando: Gingerbread rolling out now [Droid-Life]
  • Motorola Droid 3: Minor maintenance refresh; enhances Google Talk with video chat support, several other fixes. [PhoneDog]
  • T-Mobile Samsung Nexus S: OTA install (with option to manually install) to Android 2.3.6; doesn’t appear to break tethering. [AndroidCentral]

Unofficial Android updates, custom ROMs and misc. hackery

  • The Android 2.3.5 ROM for the global Samsung Galaxy S II leaked early this week. [Pocketnow, SamFirmware]
  • You can now download the Android 2.3.4 SBF for the Motorola Droid X2, courtesy of XDA. [Droid-Life]
  • If you have a Sony Ericsson Xperia-branded device from 2010 or 2011, CyanogenMod7 support will most likely come included as part of an upcoming update. Ten Xperia devices will be added, though a timeframe for release wasn’t announced. Check here to see if your device made the list. [XperiaBlog]

Other platforms

  • Check here to see if your phone is ready to receive Windows Phone Mango.
  • The ultra-rare AT&T HP Pre 3 just received an OTA update to 2.2.3.2207, right after a new webOS Doctor became available for the same refresh. [PreCentral]

Refreshes we covered this week

Refresh Roundup: week of September 26, 2011 originally appeared on Engadget on Sun, 02 Oct 2011 11:00:00 EDT. Please see our terms for use of feeds.

Permalink   |   | Email this | Comments

HTC Android phones leak personal data to any app with Internet permissions

If you are running a HTC Android smartphone with the latest updates applied, chances are your personal data is freely accessible to any app you have given network access to in the form of full Internet permissions. This vulnerability isn’t a backdoor or some inherent flaw in Android, it is instead HTC failing to lock […]

Mobile Miscellany: week of September 26, 2011

This week was packed with news on the mobile front, so it was easy to miss a few stories here and there. Here’s some of the other stuff that happened in the wide world of wireless for the week of September 26, 2011:

  • Last week we heard the rumor that Sprint would be launching the BlackBerry Curve 9350 on October 2nd, and we’ve finally received the official confirmation. The device will be hitting stores tomorrow for $80 with a two-year contract. [PhoneArena]
  • The Motorola Photon WiMAX, referred to as the Photon 4G in the US, is now making its way to Japan as KDDI announced the launch of the device this past Monday. [Motorola]
  • Verizon Wireless launched the Pantech Jest 2 this week, which is a feature phone with a full slide-out QWERTY keyboard. [Verizon Wireless]
  • The Samsung Galaxy Y is now listed as “coming soon” on O2’s website, which makes it the second carrier to announce upcoming availability in the UK. The actual date of release, however, is still unofficial. [O2]
  • Softbank (Japan) looks ready to land the ZTE Lord V882, which appears to be an Android device running on Gingerbread, and comes packed with a 1GHz CPU, 512MB of RAM, 3.8-inch LCD at WVGA resolution and a 5MP camera. [LandofDroid]
  • NTT DoCoMo and Orange have teamed up to offer the Sharp AQUOS SH80F, which features dual 8MP stereoscopic cameras and claims to be the world’s first Android device capable of converting 2D content into 3D in real time. It’ll first be launched in France on October 6th and will follow to other European and Asian countries shortly after. [Softpedia]
  • Maybe Microsoft Canada just assumed nobody actually reads terms and conditions, because the company outed the names of a few upcoming Windows Phones in the T&C for a developer contest: the Nokia Sabre and a duo of Samsungs named the Yukon and Wembley. The Nokia Searay was also named in the list, indicating the Sabre is a second device running on Mango. [Nokia HDBlog (translated)]
  • In preparation for its Windows Phone debut, Nokia is also rumored to be featuring a new voice navigation system with 3D maps, according to some leaked marketing materials. [WinRumors]
  • Here’s a rendering of the HTC EVO Design 4G, also known as the Kingdom or Hero S. [Pocketnow]
  • Samsung may have a midrange device coming soon to AT&T’s lineup as a complement to the Galaxy S II. We’ve already seen the I857 pass through the FCC and show up in a leaked roadmap, and now it appears to have been dubbed the Doubletime, according to uncovered Cellebrite records. [Pocketnow]
  • Also appearing in Cellebrite records are the HTC Vigor (PH98100), Motorola Droid HD (XT912), and the Samsung Nexus Prime (SCH-i515). [Droid-Life]

Mobile Miscellany: week of September 26, 2011 originally appeared on Engadget on Sat, 01 Oct 2011 11:01:00 EDT. Please see our terms for use of feeds.

Permalink   |   | Email this | Comments

HTC Holiday spotted sunning itself on Australian shores

Australian carrier Telstra has revealed this 4.5-inch colossus from HTC, and the above picture from CNET shows it’s likely to arrive under its Holiday moniker. This is the first LTE smartphone announced for Australia, while something similarly tall, dark and Android recently arrived in Korea as the HTC Raider 4G. CNET reports specs that tally with that other model: the big screen is qHD and the power comes from a dual-core 1.5GHz CPU coupled with 1GB of RAM. Like the Raider, the Holiday appears to be running Sense 3.0, not the refreshed 3.5 iteration that debuted on the Rhyme, and it looks primed to be one of the first handsets to launch on AT&T’s brand new 4G network. So, expect to hear more from Ma Bell on this “titanic” rival soon.

HTC Holiday spotted sunning itself on Australian shores originally appeared on Engadget on Thu, 29 Sep 2011 16:56:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceCNET Australia  | Email this | Comments

HTC Holiday hits the FCC, ready to deliver AT&T’s LTE to 3-percent of Americans

HTC Holiday at the FCC

We’re not sure how much longer it’ll be before the tiny fraction of Americans that can take advantage of AT&T’s LTE network will actually be able to put the HTC Holiday in their hands, but we imagine it won’t be too much longer. It looks like the dual-core super-phone just stopped by the FCC to have its radio checked out, and we’re happy to report the PH39100 came out unscathed. Though photos and specific branding were missing from the filing, we’re pretty confident that this 1700/2100/700 LTE device from HTC is, in fact, the Holiday. We’re also certain that Ma Bell is working like mad to get this 4.5-inch beast out the door real soon. Hit up the source link if you’re into things like RF exposure reports and label placement diagrams.

HTC Holiday hits the FCC, ready to deliver AT&T’s LTE to 3-percent of Americans originally appeared on Engadget on Thu, 29 Sep 2011 13:15:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceFCC  | Email this | Comments

HTC Sensation Z710t becomes first smartphone to offer ST-Ericsson’s NovaThor SoC

There’s a new Sensation on the block that’ll be making its way to China Mobile, but rather than rehashing more of the same, this release marks the first smartphone to place ST-Ericsson’s NovaThor SoC under the hood. Unlike offerings from Qualcomm, the chip inside the Sensation Z710t offers a dual-core A9 processor along with connectivity to the carrier’s TD-SCDMA infrastructure. Other specs are expected to remain the same, which includes a 4.3-inch qHD display and 8 megapixel camera. Unfortunately, press photos weren’t released, which suggests its design hasn’t changed. You’ll find the full PR after the break, heralding this latest Sensation among the top-tier of China Mobile’s offerings. While pricing or a release date have yet to be announced, we’re inclined to agree.

Continue reading HTC Sensation Z710t becomes first smartphone to offer ST-Ericsson’s NovaThor SoC

HTC Sensation Z710t becomes first smartphone to offer ST-Ericsson’s NovaThor SoC originally appeared on Engadget on Thu, 29 Sep 2011 08:22:00 EDT. Please see our terms for use of feeds.

Permalink   |   | Email this | Comments

HTC Explorer now official, we go hands-on (updated)

This little soldier carries the big responsibility of extending HTC’s dominance to the budget end of the Android spectrum, and it must achieve this mission with only a bare minimum of weaponry: a 3.2-inch HVGA (480 x 320) capacitive display, 600MHz processor, 3MP camera and 512MB of expandable memory. You’ll just have to believe us when we say we had a play with a pre-release device at an HTC event recently, even though the manufacturer’s reps refused to let us take any photos or video to prove it. You’ll find publicity shots in the gallery below plus a full press release, some educated guesswork about price and availability and our initial impressions of the handset right after the break.

Update: The UK’s Three network has confirmed it will stock the device, but it hasn’t divulged the price.

Continue reading HTC Explorer now official, we go hands-on (updated)

HTC Explorer now official, we go hands-on (updated) originally appeared on Engadget on Thu, 29 Sep 2011 04:00:00 EDT. Please see our terms for use of feeds.

Permalink   |   | Email this | Comments

HTC Hero S coming to US Cellular next month alongside Wildfire S and Flyer

Guess what’s officially on its way to US Cellular in October? The headline probably gave you a pretty good clue — it’s the HTC Hero S. And it’s not coming alone: apparently the new device is big enough to warrant its very own entourage. Its brethren, the Wildfire S and Flyer, will both waltz into stores at roughly the same time. The Gingerbread-running Hero S will offer a 1.2GHz Qualcomm MSM8655 CPU, 4-inch qHD (960 x 540) display, a 1,520mAh battery and a 5MP CMOS rear camera accompanied by a 1.3MP front-facing cam. Add it to the lineup next to the Motorola Electrify, and we’d say the carrier’s got some good options for the getting. The Hero S will be available sometime next month for $200 after $100 mail-in rebate, while the Wildfire S (which will come in grey and purple) will go for $80 after rebate and the Flyer can be yours for $400 — once again, after rebate. Head below to find the full press release.

Continue reading HTC Hero S coming to US Cellular next month alongside Wildfire S and Flyer

HTC Hero S coming to US Cellular next month alongside Wildfire S and Flyer originally appeared on Engadget on Wed, 28 Sep 2011 16:10:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceUS Cellular  | Email this | Comments

HTC, LG, Motorola, RIM, Samsung and Sony Ericsson to add Isis NFC tech in future phones

Stacking the lineup against Google Wallet, manufacturers HTC, LG, Motorola, RIM, Samsung and Sony Ericsson have been drafted by team Isis, agreeing to implement its NFC technology standard into future phone offerings. By garnering multi-manufacturer support, the joint AT&T, T-Mobile and Verizon venture is pulling a power move against Mountain View’s offering — currently only functional on Sprint’s Nexus S 4G (although that’s almost certainly bound to change). Finally gearing up for battle, the crew recently pumped $100 million into the initiative, helping to win support from the aforementioned hardware heavy hitters. For those who aren’t ready to buy a new phone just to jump on the NFC bandwagon, Isis says it’s working with DeviceFidelity to add the functionality to older models as well. The more devices that have the technology, the better the chance we’ll be ditching our leather wallets for the mobile variety. Or so they say. Check out the full PR after the break.

Continue reading HTC, LG, Motorola, RIM, Samsung and Sony Ericsson to add Isis NFC tech in future phones

HTC, LG, Motorola, RIM, Samsung and Sony Ericsson to add Isis NFC tech in future phones originally appeared on Engadget on Tue, 27 Sep 2011 19:42:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceIsis  | Email this | Comments