The Ethical Hacker Network - Massive Security Vulnerability In HTC Android Devices

Latest Additions

Who's Online

don

Editor-In-Chief
Administrator
Hero Member

Offline

Posts: 4165

Editor-In-Chief

Massive Security Vulnerability In HTC Android Devices

« on: October 03, 2011, 10:19:58 AM »

Posted by Artem Russakovskii of Android Police:

Quote

Massive Security Vulnerability In HTC Android Devices (EVO 3D, 4G, Thunderbolt, Others) Exposes Phone Numbers, GPS, SMS, Emails Addresses, Much More

I am quite speechless right now. Justin Case and I have spent all day together with Trevor Eckhart (you may remember him as TrevE of DamageControl and Virus ROMs) looking into Trev's findings deep inside HTC's latest software installed on such phones as EVO 3D, EVO 4G, Thunderbolt, and others.

These results are not pretty. In fact, they expose such ridiculously frivolous doings, which HTC has no one else to blame but itself, that the data-leaking Skype vulnerability Justin found earlier this year pales in comparison. Without further ado, let me break things down.

For full story:
http://www.androidpolice.com/2011/10/01/massive-security-vulnerability-in-htc-android-devices-evo-3d-4g-thunderbolt-others-exposes-phone-numbers-gps-sms-emails-addresses-much-more/

Don


	Logged

CISSP, MCSE, CSTA, Security+ SME

tturner

Sr. Member

Offline

Posts: 432

Re: Massive Security Vulnerability In HTC Android Devices

« Reply #1 on: October 04, 2011, 07:34:49 AM »

I've talked to 4 different people about this issue and every single one of them felt I was being paranoid. One of them was a security administrator at a local company and the other 3 were fairly technical folks. It boggles the mind.


	Logged

Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, OPSE, CSWAE, CSTP, VCP

WIP: OSWP, GSSP-JAVA, GXPN

Udacity on hold, again. I suck.

http://sentinel24.com/blog @tonylturner http://bsidesorlando.org

SephStorm

Hero Member

Offline

Posts: 530