HTC Sense Risks Your Personal Data; Android Security Loopholes

HTC's version of Android is posing a serious threat to critical user data in the light of the recent Security loopholes found in the popular Open-Source Operating System. Apparently, HTC's Sense interface, installed on the likes of HTC Evo 4G and Thunderbolt, give access to personal data, adding to the rising number of Android viruses and malware.

Sense, the graphical user interface by HTC for smartphones, manages almost everything on the phone ranging from GPS information to SMS data (plain numbers and encoded data). Now any application on the HTC can gain access to all those personal files with just a permissions request. Access to personal data so simply can put users at risk, especially now when people have web access and mobile banking is a norm.
[​IMG]
Considering Android is a hugely popular Mobile OS, a vulnerability of this degree might hamper its current position in the market. Android Police's research on the GUI claims that any application on the device which requests for android.permission.INTERNET can get access to hordes of data digging as deep as the system logs. Putting so much information on the table, theoretically, it is close to cloning a device using a subset of the data leaked by the system.

Adding to all the chaos, HTC has another app called HtcLoggers.apk which holds the power to collect all data and provide to anyone with permission through a local port. A way out here is to remove the HtcLoggers.apk file but it wouldn't be simple task for non-technical crowd who will have to wait for an update. HTC has promised for a Security Patch soon, but until then it is strictly advised to take care of your personal data.

Replies

You are reading an archived discussion.

Related Posts

Mercedes Benz has revealed the launch of a new middle sized B class car at the Frankfurt Motor Show and the worldwide launch of the car is expected in the...
Stumble Upon is the one thing that will never let you get bored of the web. This is a sort of discovery engine that picks up everything according to users...
Gemalto N.V., a public company incorporated in the Netherland, launched a client/server SIM application for operators which could enable the mobile users to have Facebook connection without any data connectivity. ...
Toyota motor corp. has announced a major development in accessories offered with its RAV4 model with the introduction of latest audio system. The company has incorporated some facilities which were...
Multiple bomb blasts in different parts of India has got us thinking whether terrorists have began using India as 'bomb testing center'. IIT Bombay - India's premier technology institute has...