x404.co.uk
http://www.x404.co.uk/forum/

HTC Android phone security vuln..
http://www.x404.co.uk/forum/viewtopic.php?f=4&t=14886
Page 1 of 1

Author:  jonbwfc [ Sun Oct 02, 2011 10:26 pm ]
Post subject:  HTC Android phone security vuln..

Details
The article is a bit 'chicken little' but it's genuinely serious.

Jon

Author:  JJW009 [ Sun Oct 02, 2011 10:48 pm ]
Post subject:  Re: HTC Android phone security vuln..

Awesome.

*goes out to play*

Author:  rustybucket [ Mon Oct 03, 2011 5:26 am ]
Post subject:  Re: HTC Android phone security vuln..

jonbwfc wrote:
Details
The article is a bit 'chicken little' but it's genuinely serious.

Chicken Licken.

It's supposed to rhyme.

Author:  finlay666 [ Mon Oct 03, 2011 12:35 pm ]
Post subject:  Re: HTC Android phone security vuln..

rustybucket wrote:
jonbwfc wrote:
Details
The article is a bit 'chicken little' but it's genuinely serious.

Chicken Licken.

It's supposed to rhyme.


Both are acceptable
http://en.wikipedia.org/wiki/Henny_Penny

Author:  big_D [ Tue Oct 04, 2011 3:55 am ]
Post subject:  Re: HTC Android phone security vuln..

The title is a little misleading, it is an htc Evo and Thunderbolt problem. They have made a mistake in the way it handles the keychain.

But it doesn't affect Android, just 4 current phones, plus some that haven't been released yet (don't forget, that every carrier in America has the same phone under a different name, which makes the list artificially long).

That said, it is a serious problem for those affected, if they download a rogue app, which tries to read the information.

But the headline is a bit like saying that 4th generation iMacs had a graphics driver problem and screaming "all Macs crash with Lion!"

Edit: It is the anonymous metrics information that people can agree to send to htc, when they set up the phone.

htc have responded to say that it is an issue and they are looking into it.

(Source: All About Android 28, from 03.10.2011)

Author:  jonbwfc [ Tue Oct 04, 2011 11:14 am ]
Post subject:  Re: HTC Android phone security vuln..

big_D wrote:
Edit: It is the anonymous metrics information that people can agree to send to htc, when they set up the phone.

That's fair enough but data is only actually anonymous once you aggregate it. if you have a phone and you have access to this 'anonymous data' for only that phone, by definition it's not anonymous - you know exactly where it's come from. If a rogue app was able to somehow link this information to something overtly not anonymous like say an email address or google log in, then any sense the data is anonymous is actually lost.

Data of itself is never dangerous, it's the use it's put to that makes it so.

Jon

Author:  big_D [ Tue Oct 04, 2011 11:35 am ]
Post subject:  Re: HTC Android phone security vuln..

Further information coming to light indicates, that it is HTC's Sense GUI that is the problem, not Android itself.

Author:  jonbwfc [ Tue Oct 04, 2011 11:56 am ]
Post subject:  Re: HTC Android phone security vuln..

Yep. That's why I was very careful to put 'HTC' first in the thread title. Are many peopel liekly to have rooted their HTC phones and removed the Sense GUI? I thought it was quite well regarded...

Jon

Page 1 of 1 All times are UTC
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/