Overclock.net › Forums › Industry News › Hardware News › [NBC]HTC flaw gives hackers easy access
New Posts  All Forums:Forum Nav:

[NBC]HTC flaw gives hackers easy access

post #1 of 44
Thread Starter 
Kinda scary. I use a HTC Evo 4. HTC users be aware.
Quote:
Researchers have found serious security problems with some HTC Android smartphones, which could allegedly give hackers your identity, location and who you've been talking with and texting.

They've posted their findings on Android Police about certain HTC phones (including the Evo 3D, Evo 4G and Thunderbolt) and a vulnerability built into them by a suite of logging tools that collects information about the user — an excessive amount that should be secured and isn't.
Quote:
If you've downloaded any app that requires connection to the Internet (and we're guessing most of yours, as ours, does), that app can now acquire the following off your phone, with your permission:

* the list of user accounts, including email addresses and sync status for each
* last known network and GPS locations and a limited previous history of locations
* phone numbers from the phone log
* SMS data, including phone numbers and encoded text (not sure yet if it's possible to decode it, but very likely)
* system logs (both kernel/dmesg and app/logcat), which includes everything your running apps do and is likely to include email addresses, phone numbers, and other private info
http://technolog.msnbc.msn.com/_news...s-to-your-info
Edited by whitingnick - 10/3/11 at 3:41pm
BleedinRaged
(14 items)
 
  
CPUMotherboardGraphicsRAM
Core i7 4790K ASRock Fatal1ty MSI GTX 970 G.SKILL Sniper Series 16GB (2 x 8GB) 
Hard DriveCoolingOSMonitor
SAMSUNG 850 EVO 2.5" 500GB SSD TRUE Windows 7 Pro 22" Acer Ferrari F-22 
KeyboardPowerCaseMouse
yes ;0 CORSAIR RM Series RM750 750W Lian Li PC-V1200B Logitech G5 
  hide details  
Reply
BleedinRaged
(14 items)
 
  
CPUMotherboardGraphicsRAM
Core i7 4790K ASRock Fatal1ty MSI GTX 970 G.SKILL Sniper Series 16GB (2 x 8GB) 
Hard DriveCoolingOSMonitor
SAMSUNG 850 EVO 2.5" 500GB SSD TRUE Windows 7 Pro 22" Acer Ferrari F-22 
KeyboardPowerCaseMouse
yes ;0 CORSAIR RM Series RM750 750W Lian Li PC-V1200B Logitech G5 
  hide details  
Reply
post #2 of 44
Is this really a security vunerablility? Because it says right there in the quoted part, "that app can now acquire the following off your phone, with your permission." Doesn't seem so grim to me....
Heisenberg
(10 items)
 
Redemption
(18 items)
 
 
CPUGraphicsRAMHard Drive
Intel Core 2 Extreme @ 2.8GHz (upgrade) Intel GMA 950 2 x 2 DDR2 667MHz (upgrade) 120GB Mushkin ECO2 
Optical DriveOSMonitorPower
Replaced with 42 W/hr aux battery Mint 17.3 1280x800 Dell 65w Dell Adapter 
CaseOther
Latitude D630 Chassis Intel 7260-802.11ac 2x2 
CPUMotherboardGraphicsRAM
Not telling AsRock something Pixel Pusher 2 x 8 GB AMD Radeon RAM @ 1600mhz (All the VM's) 
Hard DriveHard DriveHard DriveOptical Drive
Crucial M4 128GB (8 second boot) Western Digital RE4 1TB Western Digital RE4 2TB Pioneer Blu-Ray Reader/Writer 
CoolingOSMonitorKeyboard
Cooler Master Hyper 212 Evo Windows 8.1 Pro x64 Dell U2713HM IBM Model M (CLICKY!!) 
PowerCaseMouseAudio
Antec HCG-900 NZXT Source 210 (it was cheap) Logitech G502 Schiit Modi 
AudioAudio
Sennheiser HD 598 M-Audio AV40's 
CPUMotherboardGraphicsRAM
Intel Core i5-4200U Microsoft BGA1168 Intel HD 4400 8 GB LPDDR3 Dual Channel @ 1600mhz 
Hard DriveOSMonitorKeyboard
SK Hynix 256GB SSD Windows 8.1 Professional 1920 x 1080p IPS Display Microsoft Touch Cover 2 
Power
48w PSU 
  hide details  
Reply
Heisenberg
(10 items)
 
Redemption
(18 items)
 
 
CPUGraphicsRAMHard Drive
Intel Core 2 Extreme @ 2.8GHz (upgrade) Intel GMA 950 2 x 2 DDR2 667MHz (upgrade) 120GB Mushkin ECO2 
Optical DriveOSMonitorPower
Replaced with 42 W/hr aux battery Mint 17.3 1280x800 Dell 65w Dell Adapter 
CaseOther
Latitude D630 Chassis Intel 7260-802.11ac 2x2 
CPUMotherboardGraphicsRAM
Not telling AsRock something Pixel Pusher 2 x 8 GB AMD Radeon RAM @ 1600mhz (All the VM's) 
Hard DriveHard DriveHard DriveOptical Drive
Crucial M4 128GB (8 second boot) Western Digital RE4 1TB Western Digital RE4 2TB Pioneer Blu-Ray Reader/Writer 
CoolingOSMonitorKeyboard
Cooler Master Hyper 212 Evo Windows 8.1 Pro x64 Dell U2713HM IBM Model M (CLICKY!!) 
PowerCaseMouseAudio
Antec HCG-900 NZXT Source 210 (it was cheap) Logitech G502 Schiit Modi 
AudioAudio
Sennheiser HD 598 M-Audio AV40's 
CPUMotherboardGraphicsRAM
Intel Core i5-4200U Microsoft BGA1168 Intel HD 4400 8 GB LPDDR3 Dual Channel @ 1600mhz 
Hard DriveOSMonitorKeyboard
SK Hynix 256GB SSD Windows 8.1 Professional 1920 x 1080p IPS Display Microsoft Touch Cover 2 
Power
48w PSU 
  hide details  
Reply
post #3 of 44
Quote:
Originally Posted by coachmark2 View Post
Is this really a security vunerablility? Because it says right there in the quoted part, "that app can now acquire the following off your phone, with your permission." Doesn't seem so grim to me....
yea buts if you download an app that requires internet to function or have certain parts work, and it asks you if its allowed to connect, would you allow it? Most people will click "yes".

So although it may ask for your permission, its still something the majority of users will be vulnerable to.
M06
(20 items)
 
  
CPUMotherboardGraphicsRAM
AMD FX6300 Gigabyte 990FXA-UD5 XFX 7950 - 3GB G.Skill Sniper 8GB (2x4GB) DDR3 2133 CL9 @ 1733... 
Hard DriveHard DriveHard DriveOptical Drive
WD Blue 500GB WD Black 1.5TB Crucial M4 128GB (OS) LG ODD 
CoolingOSMonitorMonitor
Deepcool Lucifer v2 Win7 Ultimate 64 bit Acer X223w (1050) LG 22EN33 (1080) 
KeyboardPowerCaseMouse
Sharkoon Tactix OCZ ModXstream Pro 700w Modular Corsair 300R CM Storm Xornet 
Mouse PadAudioAudioAudio
Steelseries Qck+ DOTA2 Edition Edifier e1100+  Sennheiser HD215 Plantronics Gamecom 307 
  hide details  
Reply
M06
(20 items)
 
  
CPUMotherboardGraphicsRAM
AMD FX6300 Gigabyte 990FXA-UD5 XFX 7950 - 3GB G.Skill Sniper 8GB (2x4GB) DDR3 2133 CL9 @ 1733... 
Hard DriveHard DriveHard DriveOptical Drive
WD Blue 500GB WD Black 1.5TB Crucial M4 128GB (OS) LG ODD 
CoolingOSMonitorMonitor
Deepcool Lucifer v2 Win7 Ultimate 64 bit Acer X223w (1050) LG 22EN33 (1080) 
KeyboardPowerCaseMouse
Sharkoon Tactix OCZ ModXstream Pro 700w Modular Corsair 300R CM Storm Xornet 
Mouse PadAudioAudioAudio
Steelseries Qck+ DOTA2 Edition Edifier e1100+  Sennheiser HD215 Plantronics Gamecom 307 
  hide details  
Reply
post #4 of 44
Quote:
Originally Posted by coachmark2 View Post
Is this really a security vunerablility? Because it says right there in the quoted part, "that app can now acquire the following off your phone, with your permission." Doesn't seem so grim to me....
Website typo maybe? I think they meant without your permission.
 
Just another BF3
(15 items)
 
 
CPUMotherboardGraphicsRAM
AMD A8-3850 Llano Asus F1A75-V PRO APU 8GB G.Skill Sniper DDR3 1866 
Hard DriveOptical DriveCoolingOS
120GB V3 MAX IOPS, 12TB External Lian Li EX-50 Lite-On iHBS112-29, Pioneer BDR-206DBKS Stock Windows 7 Pro x64 
MonitorKeyboardPowerCase
Sony 54.6" XBR HX929 Logitech MK550 Seasonic X650 GOLD Lian Li PC-B25FWB 
MouseMouse PadAudio
Logitech MK550 Ikea Leather mouse pad Onboard 
CPUMotherboardGraphicsRAM
i7 2600K (4.6GHz) ASUS P8Z68 Deluxe MSI R6970 Lightning 8GB G.Skill Ripjaws X 1600MHz 
Hard DriveOptical DriveCoolingOS
OCZ Vertex 3 240GB, 12TB External Lian Li EX-50 2x Samsung SH-S223F NZXT Havik 140 Windows 7 Ultimate x64 SP1 
MonitorKeyboardPowerCase
Samsung P2570 CM Storm Trigger Seasonic X750 GOLD Lian Li PC-P80NB 
MouseMouse PadAudio
Logitech G400 (the new MX518) NuPad Leather Mouse Pad Asus Xonar Essence ST (UNi drivers 1.41) 
  hide details  
Reply
 
Just another BF3
(15 items)
 
 
CPUMotherboardGraphicsRAM
AMD A8-3850 Llano Asus F1A75-V PRO APU 8GB G.Skill Sniper DDR3 1866 
Hard DriveOptical DriveCoolingOS
120GB V3 MAX IOPS, 12TB External Lian Li EX-50 Lite-On iHBS112-29, Pioneer BDR-206DBKS Stock Windows 7 Pro x64 
MonitorKeyboardPowerCase
Sony 54.6" XBR HX929 Logitech MK550 Seasonic X650 GOLD Lian Li PC-B25FWB 
MouseMouse PadAudio
Logitech MK550 Ikea Leather mouse pad Onboard 
CPUMotherboardGraphicsRAM
i7 2600K (4.6GHz) ASUS P8Z68 Deluxe MSI R6970 Lightning 8GB G.Skill Ripjaws X 1600MHz 
Hard DriveOptical DriveCoolingOS
OCZ Vertex 3 240GB, 12TB External Lian Li EX-50 2x Samsung SH-S223F NZXT Havik 140 Windows 7 Ultimate x64 SP1 
MonitorKeyboardPowerCase
Samsung P2570 CM Storm Trigger Seasonic X750 GOLD Lian Li PC-P80NB 
MouseMouse PadAudio
Logitech G400 (the new MX518) NuPad Leather Mouse Pad Asus Xonar Essence ST (UNi drivers 1.41) 
  hide details  
Reply
post #5 of 44
Thread Starter 
Quote:
Originally Posted by kikkO View Post
Website typo maybe? I think they meant without your permission.
Yes, I think you're right.
BleedinRaged
(14 items)
 
  
CPUMotherboardGraphicsRAM
Core i7 4790K ASRock Fatal1ty MSI GTX 970 G.SKILL Sniper Series 16GB (2 x 8GB) 
Hard DriveCoolingOSMonitor
SAMSUNG 850 EVO 2.5" 500GB SSD TRUE Windows 7 Pro 22" Acer Ferrari F-22 
KeyboardPowerCaseMouse
yes ;0 CORSAIR RM Series RM750 750W Lian Li PC-V1200B Logitech G5 
  hide details  
Reply
BleedinRaged
(14 items)
 
  
CPUMotherboardGraphicsRAM
Core i7 4790K ASRock Fatal1ty MSI GTX 970 G.SKILL Sniper Series 16GB (2 x 8GB) 
Hard DriveCoolingOSMonitor
SAMSUNG 850 EVO 2.5" 500GB SSD TRUE Windows 7 Pro 22" Acer Ferrari F-22 
KeyboardPowerCaseMouse
yes ;0 CORSAIR RM Series RM750 750W Lian Li PC-V1200B Logitech G5 
  hide details  
Reply
post #6 of 44
I don't download any non-essential apps.
Some people are app crazy and would give access to them just to try them out.
Render Bender
(10 items)
 
On The Move
(11 items)
 
 
CPUGraphicsRAMHard Drive
Intel X5690 Xeon (12 Cores @ 3.46) Nvidia GTX 1070 64GB 1333MHz ECC DDR3 Samsung 850 EVO 1TB x2 - RAID 0 
MonitorCaseAudio
Samsung UN40JU6700 40" 4K Curved Apple Mac Pro 2010 Klipsch 2.1 
CPUGraphicsRAMHard Drive
Intel Core 2 Duo Nvidia GeForce 9400M 8GB 1067 MHz DDR3 Toshiba 500GB 
OSMonitorKeyboardCase
Mavericks 10.9 Dell U3011 Rosewill Mech Reds 2010 Unibody 
MouseMouse PadAudio
Logitech G700 Multi-Touch Kilpsch 2.1 
  hide details  
Reply
Render Bender
(10 items)
 
On The Move
(11 items)
 
 
CPUGraphicsRAMHard Drive
Intel X5690 Xeon (12 Cores @ 3.46) Nvidia GTX 1070 64GB 1333MHz ECC DDR3 Samsung 850 EVO 1TB x2 - RAID 0 
MonitorCaseAudio
Samsung UN40JU6700 40" 4K Curved Apple Mac Pro 2010 Klipsch 2.1 
CPUGraphicsRAMHard Drive
Intel Core 2 Duo Nvidia GeForce 9400M 8GB 1067 MHz DDR3 Toshiba 500GB 
OSMonitorKeyboardCase
Mavericks 10.9 Dell U3011 Rosewill Mech Reds 2010 Unibody 
MouseMouse PadAudio
Logitech G700 Multi-Touch Kilpsch 2.1 
  hide details  
Reply
post #7 of 44
Like others have say. You press yes to allow them to collect data. I'm guilty of doing it without reading what will be collected
Mitx Love
(13 items)
 
  
CPUMotherboardRAMHard Drive
Pentium G6950 Zotac H55 ITX 2x2GB Kingston 500GB Hitachi 
OSPowerMouseMouse Pad
Windows Server 2008 R2 Lite-on 300w Logitech Wireless Laser ULTRA wrist rest 
  hide details  
Reply
Mitx Love
(13 items)
 
  
CPUMotherboardRAMHard Drive
Pentium G6950 Zotac H55 ITX 2x2GB Kingston 500GB Hitachi 
OSPowerMouseMouse Pad
Windows Server 2008 R2 Lite-on 300w Logitech Wireless Laser ULTRA wrist rest 
  hide details  
Reply
post #8 of 44
Quote:
Originally Posted by annavogelgm View Post
Researchers have found serious security problems with some HTC Android smartphones, which could allegedly give hackers your identity, location and who you've been talking with and texting.
I can't tell if you're spamming...
Quote:
Originally Posted by kikkO View Post
Quote:
Originally Posted by coachmark2 View Post
Is this really a security vunerablility? Because it says right there in the quoted part, "that app can now acquire the following off your phone, with your permission." Doesn't seem so grim to me....
Website typo maybe? I think they meant without your permission.
That would make a lot more sense if it were a typo.
 
The Asgard II
(10 items)
 
 
CPUMotherboardGraphicsRAM
Phenom II x4 965 BE C3 Revision ASRock 890FX DELUXE5 GIGABYTE GTX 480 Super Overclock 8GB G.SKILL PI 1600MHz 
Hard DriveOptical DriveOSMonitor
Mushkin Callisto 120GB SSD + WD 7200RPM 500GB Who cares? Windows 7 Home Premuim 64bit Viewsonic vx2265wm 
KeyboardPowerCaseMouse
AZIO Levetron Mech4 CORSAIR CMPSU-750TX 750W NZXT M59 Logitech G9x 
Mouse PadAudio
Razer Goliathus (Speed Edition) ASUS Xonar D1 
CPUMotherboardGraphicsRAM
A4-3300 APU BIOSTAR TA75M+ AMD Radeon HD 6450 G.SKILL Ripjaws 
Hard DriveCoolingMonitorPower
Corsair Nova Series 2 CSSD-V60GB2 SSD Ultra ChillTec Black I-Inc iP-192ABB 19" Class Widescreen LCD Monitor Mushkin Enhanced Volta MKNPSVT500 PSU 
CaseMouse
Xigmatek Asgard II KINGWIN KW-03 Wired Optical 800 dpi Mouse 
  hide details  
Reply
 
The Asgard II
(10 items)
 
 
CPUMotherboardGraphicsRAM
Phenom II x4 965 BE C3 Revision ASRock 890FX DELUXE5 GIGABYTE GTX 480 Super Overclock 8GB G.SKILL PI 1600MHz 
Hard DriveOptical DriveOSMonitor
Mushkin Callisto 120GB SSD + WD 7200RPM 500GB Who cares? Windows 7 Home Premuim 64bit Viewsonic vx2265wm 
KeyboardPowerCaseMouse
AZIO Levetron Mech4 CORSAIR CMPSU-750TX 750W NZXT M59 Logitech G9x 
Mouse PadAudio
Razer Goliathus (Speed Edition) ASUS Xonar D1 
CPUMotherboardGraphicsRAM
A4-3300 APU BIOSTAR TA75M+ AMD Radeon HD 6450 G.SKILL Ripjaws 
Hard DriveCoolingMonitorPower
Corsair Nova Series 2 CSSD-V60GB2 SSD Ultra ChillTec Black I-Inc iP-192ABB 19" Class Widescreen LCD Monitor Mushkin Enhanced Volta MKNPSVT500 PSU 
CaseMouse
Xigmatek Asgard II KINGWIN KW-03 Wired Optical 800 dpi Mouse 
  hide details  
Reply
post #9 of 44
Lawl. Motorola always ftw.

Sent from my DROID BIONIK
Needs Updated
(14 items)
 
  
CPUMotherboardGraphicsRAM
i7 960 EVGA X58 3X SLI EVGA GTX580 (3 x 2GB) G.Skill PI Series 5-5-5-18 1.6V 
Hard DriveCoolingOSMonitor
2X WD 320GB Raid0 + WD500GB Heatkiller CPU/GPU blocks, Feser Quad/Dual rads Windows 7 Annihilation x64 40" Toshiba LED 120Hz 1920x1200 
KeyboardPowerCaseMouse
Razer Black Widow Ultimate Corsair Pro Series Gold 1200W Corsair 800D Uber Modded Razer Mamba 2012 Edition 
Mouse PadAudio
Razer Scarab Logitech 5.1, Polk Audio 10" sub, Plantronics G... 
  hide details  
Reply
Needs Updated
(14 items)
 
  
CPUMotherboardGraphicsRAM
i7 960 EVGA X58 3X SLI EVGA GTX580 (3 x 2GB) G.Skill PI Series 5-5-5-18 1.6V 
Hard DriveCoolingOSMonitor
2X WD 320GB Raid0 + WD500GB Heatkiller CPU/GPU blocks, Feser Quad/Dual rads Windows 7 Annihilation x64 40" Toshiba LED 120Hz 1920x1200 
KeyboardPowerCaseMouse
Razer Black Widow Ultimate Corsair Pro Series Gold 1200W Corsair 800D Uber Modded Razer Mamba 2012 Edition 
Mouse PadAudio
Razer Scarab Logitech 5.1, Polk Audio 10" sub, Plantronics G... 
  hide details  
Reply
post #10 of 44
Quote:
Originally Posted by whitingnick View Post
Kinda scary. I use a HTC Evo 4. HTC users be aware.




http://technolog.msnbc.msn.com/_news...s-to-your-info
Just use a custom ROM without HTC Sense ;-)
     
CPUMotherboardGraphicsRAM
Intel 7700k Z270M-DH3 UD 1151 MATX Zotac 1070 Amp! Edition CORSAIR 16GB 2X8 D4 3200 C16 VLPX 
Hard DriveHard DriveHard DriveCooling
Samsung 250GB 850 EVO Samsung 250GB 850 EVO Corsair 64GB M4 CORSAIR H110i 
OSMonitorKeyboardPower
Windows 10 ASUS VG248QE 24" 1920x1080 144Hz  Corsair K65 - Cherry Reds SEASONIC 80PLUS GOLD X-650 
CaseMouseMouse Pad
NZXT S340 Mid Tower Computer Case Logitech G502 SteelSeries QcK mass 
CPUMotherboardGraphicsRAM
2500k Gigabyte Z68X-ED3H-B3 EVGA GTX 680 8GB (4 x 2GB) DDR3 1600 HyperX Genesis 
Hard DriveHard DriveHard DriveCooling
256GB Samsung OEM SSD (SLOW POS) 64GB Samsung 830 64GB Crucial M4 Corsair H100 
OSMonitorKeyboardPower
Windows 7 Professional 64-bit Alienware OptX AW2310 Saitek Eclipse Seasonic X750 
CaseMouseAudio
Corsair 650D Logitech G500 Creative Titanium HD 
  hide details  
Reply
     
CPUMotherboardGraphicsRAM
Intel 7700k Z270M-DH3 UD 1151 MATX Zotac 1070 Amp! Edition CORSAIR 16GB 2X8 D4 3200 C16 VLPX 
Hard DriveHard DriveHard DriveCooling
Samsung 250GB 850 EVO Samsung 250GB 850 EVO Corsair 64GB M4 CORSAIR H110i 
OSMonitorKeyboardPower
Windows 10 ASUS VG248QE 24" 1920x1080 144Hz  Corsair K65 - Cherry Reds SEASONIC 80PLUS GOLD X-650 
CaseMouseMouse Pad
NZXT S340 Mid Tower Computer Case Logitech G502 SteelSeries QcK mass 
CPUMotherboardGraphicsRAM
2500k Gigabyte Z68X-ED3H-B3 EVGA GTX 680 8GB (4 x 2GB) DDR3 1600 HyperX Genesis 
Hard DriveHard DriveHard DriveCooling
256GB Samsung OEM SSD (SLOW POS) 64GB Samsung 830 64GB Crucial M4 Corsair H100 
OSMonitorKeyboardPower
Windows 7 Professional 64-bit Alienware OptX AW2310 Saitek Eclipse Seasonic X750 
CaseMouseAudio
Corsair 650D Logitech G500 Creative Titanium HD 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Hardware News
Overclock.net › Forums › Industry News › Hardware News › [NBC]HTC flaw gives hackers easy access