Go Back   Android Forums > Android Phones > HTC Rezound

test: Reply
 
LinkBack Thread Tools
Old October 2nd, 2011, 09:03 AM   #1 (permalink)
Thread Author (OP)
 
Join Date: Mar 2011
Posts: 1,532
 
Device(s):
Carrier: Not Provided

Thanks: 944
Thanked 567 Times in 461 Posts
Default huge security vulnerability, still going to buy?

Massive Security Vulnerability In HTC Android Devices (EVO 3D, 4G, Thunderbolt, Others) Exposes Phone Numbers, GPS, SMS, Emails Addresses, Much More

Makes me think twice about sense phones. Anyone else wonder if this will be fixed by the time the vigor comes out?

Advertisements
redraider1 is offline  
Last edited by redraider1; October 2nd, 2011 at 11:40 AM.
Reply With Quote
sponsored links
Old October 2nd, 2011, 11:21 AM   #2 (permalink)
Senior Member
 
trophynuts's Avatar
 
Join Date: Jul 2010
Location: SouthEastern US
Posts: 5,606
 
Device(s): Iphone 5 Moto G LTE
Carrier: Verizon

Thanks: 1,843
Thanked 1,884 Times in 1,206 Posts
Default

doesn't bother me. my info is probably already out in the wild anyways.
trophynuts is offline  
Reply With Quote
Old October 2nd, 2011, 11:41 AM   #3 (permalink)
Thread Author (OP)
 
Join Date: Mar 2011
Posts: 1,532
 
Device(s):
Carrier: Not Provided

Thanks: 944
Thanked 567 Times in 461 Posts
Default

Quote:
Originally Posted by trophynuts View Post
doesn't bother me. my info is probably already out in the wild anyways.
Yeah but not everything that this leaks like your messages and what not. I just am surprised it has only come up now and will be interesting to see what htc does and how long it takes them to fix this.
redraider1 is offline  
Reply With Quote
Old October 2nd, 2011, 12:26 PM   #4 (permalink)
ASC
I'm Shy
 
ASC's Avatar
 
Join Date: Mar 2010
Location: Phoenix, AZ
Gender: Male
Posts: 458
 
Device(s): Nexus 5 & Nexus 10
Carrier: T-Mobile

Thanks: 1,257
Thanked 441 Times in 207 Posts
Default

Root and remove /system/app/HtcLoggers.apk Problem solved?
ASC is offline  
Reply With Quote
The Following User Says Thank You to ASC For This Useful Post:
Crashumbc (October 5th, 2011)
Old October 2nd, 2011, 12:37 PM   #5 (permalink)
Thread Author (OP)
 
Join Date: Mar 2011
Posts: 1,532
 
Device(s):
Carrier: Not Provided

Thanks: 944
Thanked 567 Times in 461 Posts
Default

Quote:
Originally Posted by ASC View Post
Root and remove /system/app/HtcLoggers.apk Problem solved?
That is the thing though you shouldn't have to root the phone to prevent this security risk. I mean yes you can root but not everyone wants to root their phone.
redraider1 is offline  
Reply With Quote
Old October 2nd, 2011, 12:58 PM   #6 (permalink)
ASC
I'm Shy
 
ASC's Avatar
 
Join Date: Mar 2010
Location: Phoenix, AZ
Gender: Male
Posts: 458
 
Device(s): Nexus 5 & Nexus 10
Carrier: T-Mobile

Thanks: 1,257
Thanked 441 Times in 207 Posts
Default

Agreed. But until HTC Get's their heads out of their butt's, there is a "fix" for users who do want to go that route.
ASC is offline  
Reply With Quote
Old October 2nd, 2011, 02:46 PM   #7 (permalink)
Member
 
Join Date: Nov 2009
Posts: 234
 
Device(s): Moto Droid
Carrier: Not Provided

Thanks: 8
Thanked 31 Times in 22 Posts
Default

This really isn't a gigantic deal everyone's making it out to be. If you're the kind of person who doesn't pay attention to permissions of that apps you're installing you've already opened yourself up to the risk. If you are - you're probably the kind of person who roots your phone anyway and can fix it.
Telexen is offline  
Reply With Quote
Old October 3rd, 2011, 10:54 AM   #8 (permalink)
Senior Member
 
jikhead's Avatar
 
Join Date: Apr 2010
Posts: 753
 
Device(s): Galaxy Nexus, Droid Incredible (WiFi only)
Carrier: Not Provided

Thanks: 9
Thanked 184 Times in 106 Posts
Default

I'm not doing anything that I should be worried about getting stolen (data) or whatnot.

I'm pretty sure nearly ALL phones are doing something similar. It's big business and $$ when it comes to collecting information on users...look at the iPhone thing that was found to track people's movement. Every business wants to know how to better market their products to you better in order to sell you something.
jikhead is offline  
Reply With Quote
Old October 3rd, 2011, 11:51 AM   #9 (permalink)
Trouble Just Finds Me!
 
BabyBlues's Avatar
 
Join Date: Jun 2010
Location: Jersey - born & bred
Gender: Female
Posts: 13,125
 
Device(s): VZW Galaxy Nexus - rooted - Shiny ROM
Carrier: Verizon

Thanks: 10,842
Thanked 11,671 Times in 5,893 Posts
CowgirlKL25
Default

Quote:
Originally Posted by jikhead View Post
I'm not doing anything that I should be worried about getting stolen (data) or whatnot.

I'm pretty sure nearly ALL phones are doing something similar. It's big business and $$ when it comes to collecting information on users...look at the iPhone thing that was found to track people's movement. Every business wants to know how to better market their products to you better in order to sell you something.
Exactly. There was something similar found in one of the other phone brands recently as well (not apple). You get the warnings that apps are asking for permissions and while most of the time it's harmless, there is always that chance that it's not.
__________________
Did someone help you? Click
Rude or abusive posts, spam or threads that need staff attention, click
BabyBlues is offline  
Reply With Quote
Old October 3rd, 2011, 02:29 PM   #10 (permalink)
Member
 
Join Date: Apr 2010
Location: Raleigh, NC
Posts: 316
 
Device(s): Samsung Galaxy Note 2, HTC Rezound, HTC Thunderbolt, HTC Droid Incredible
Carrier: Verizon Wireless

Thanks: 70
Thanked 131 Times in 76 Posts
Default

This security flaw doesn't even exist for non-root users. Just tried it on my thunderbolt...app CANNOT connect to the logger (permission denied).

For root users, you're running at your own risk. Running all phone software with open root permission exposes you to all kinds of crap. If you're worried about this one, simply remove the app. If that's too tough for you, don't root.

The site that posted this "news" is completely irresponsible, pajama-boy garbage. Listing the "Vigor" (even with a weasel-like question mark, which nobody pays attention to), when "confirmed" models don't even have the vulnerability.
Puppa is offline  
Reply With Quote
sponsored links
Old October 3rd, 2011, 02:50 PM   #11 (permalink)
Member
 
Join Date: Apr 2011
Posts: 144
 
Device(s):
Carrier: Not Provided

Thanks: 3
Thanked 98 Times in 70 Posts
Default

Quote:
Originally Posted by Puppa View Post
This security flaw doesn't even exist for non-root users. Just tried it on my thunderbolt...app CANNOT connect to the logger (permission denied).

For root users, you're running at your own risk. Running all phone software with open root permission exposes you to all kinds of crap. If you're worried about this one, simply remove the app. If that's too tough for you, don't root.

The site that posted this "news" is completely irresponsible, pajama-boy garbage. Listing the "Vigor" (even with a weasel-like question mark, which nobody pays attention to), when "confirmed" models don't even have the vulnerability.
Reading through the comments on androidpolice show at least half of the users trying the proof of concept fail to replicate the problem. Very few who actually try it are confirming the issue.
rrhartjr is offline  
Reply With Quote
The Following User Says Thank You to rrhartjr For This Useful Post:
compchick813 (October 6th, 2011)
Old October 3rd, 2011, 07:31 PM   #12 (permalink)
Sad Bounty Hunter
 
NightAngel79's Avatar
 
Join Date: May 2010
Location: Northern Ky
Gender: Male
Posts: 21,493
 
Device(s): HTC OneMax; Note 10.1; DROID DNA (retired);Transformer Prime(daughter); Rezound(retired); Droid In
Carrier: Verizon

Thanks: 13,806
Thanked 6,550 Times in 3,944 Posts
Send a message via Skype™ to NightAngel79
Default

Yea, i aint buying this as a credible threat....
NightAngel79 is offline  
Reply With Quote
The Following User Says Thank You to NightAngel79 For This Useful Post:
lawnboy (October 4th, 2011)
Old October 4th, 2011, 06:20 AM   #13 (permalink)
New Member
 
Join Date: Apr 2010
Posts: 7
 
Device(s):
Carrier: Not Provided

Thanks: 2
Thanked 1 Time in 1 Post
Default

Identified and fix incoming...

HTC confirms security hole, says patch is incoming -- Engadget
hovercraftdriver is offline  
Reply With Quote
The Following User Says Thank You to hovercraftdriver For This Useful Post:
lawnboy (October 4th, 2011)
Old October 4th, 2011, 12:16 PM   #14 (permalink)
Senior Member
 
jamor's Avatar
 
Join Date: Apr 2010
Location: Planet Earth
Posts: 3,677
 
Device(s): Galaxy Note 3 (retired galaxy nexus, htc incredible)
Carrier: Not Provided

Thanks: 643
Thanked 841 Times in 516 Posts
Default

Damn this is bad news
jamor is offline  
Reply With Quote
Old October 4th, 2011, 01:47 PM   #15 (permalink)
Senior Member
 
blackepoxy's Avatar
 
Join Date: Jan 2011
Location: Dirty South, Louisiana
Gender: Male
Posts: 1,078
 
Device(s): Past: hTC Wildfire Int'l Version,hTC Droid Incredible 2 Vzw, hTC OneX,Current:Nexus 4,Broken NO!!!
Carrier: none

Thanks: 670
Thanked 252 Times in 193 Posts
Question hTC Droid incredible 2

Is hTC Droid incredible 2 on the list?
I just looked where it said the logger file was stored with es on my non rooted dinc2 running 2.3.4, I couldn't find it.
I guess it said all Android phones running hTC sense...
__________________
How I Does 'Dat
blackepoxy is offline  
Reply With Quote
Old October 5th, 2011, 10:53 AM   #16 (permalink)
AF Contributor
 
blkbeltkid17's Avatar
 
Join Date: Nov 2010
Location: Virginia, United States Of America
Posts: 4,203
 
Device(s): Rooted Samsung Galaxy Note 3 Rooted Motorola Xoom & Nexus 7
Carrier: T-Mobile

Thanks: 292
Thanked 641 Times in 450 Posts
Default

I know i am still gonna buy HTC phones no matter what i have seen the hell my parrents have gone trough with samsung and moto phones
and i am running a inc2 rooted couldnt find the .apk in my rooted rom and stock backup
__________________
~kid~ (AF Contributor)
Samsung Galaxy Note 3, Motorola XOOM, & Asus Nexus 7 (Rooted & Unlocked)
If something needs attention, Report it /!\.
If someone helped you, hit Thanks to show it.

blkbeltkid17 is offline  
Reply With Quote
Old October 6th, 2011, 08:40 AM   #17 (permalink)
Member
 
jbh00jh's Avatar
 
Join Date: Apr 2010
Location: SC
Posts: 392
 
Device(s): HTC Incredible
Carrier: Not Provided

Thanks: 26
Thanked 45 Times in 41 Posts
Default

Quote:
Originally Posted by redraider1 View Post
Massive Security Vulnerability In HTC Android Devices (EVO 3D, 4G, Thunderbolt, Others) Exposes Phone Numbers, GPS, SMS, Emails Addresses, Much More

Makes me think twice about sense phones. Anyone else wonder if this will be fixed by the time the vigor comes out?
It took me about two minutes to uninstall those polling apks in my TBolt, what's the big deal.
__________________
HTC 4G LTE Rezound
jbh00jh is offline  
Reply With Quote
Old October 6th, 2011, 09:10 AM   #18 (permalink)
Member
 
hovercraftdriver25's Avatar
 
Join Date: Apr 2010
Posts: 252
 
Device(s): Rooted Droid Incredible rocking MIUI
Carrier: Not Provided

Thanks: 56
Thanked 76 Times in 44 Posts
Default

Quote:
Originally Posted by jbh00jh View Post
It took me about two minutes to uninstall those polling apks in my TBolt, what's the big deal.
Some folks aren't that tech savvy...regardless, why should the consumer have to worry about it in the first place?

BTW, where's that Vigor announcement that was supposed to happen yesterday that you posted about on XDA?
hovercraftdriver25 is offline  
Reply With Quote
Old October 6th, 2011, 09:16 AM   #19 (permalink)
Trouble Just Finds Me!
 
BabyBlues's Avatar
 
Join Date: Jun 2010
Location: Jersey - born & bred
Gender: Female
Posts: 13,125
 
Device(s): VZW Galaxy Nexus - rooted - Shiny ROM
Carrier: Verizon

Thanks: 10,842
Thanked 11,671 Times in 5,893 Posts
CowgirlKL25
Default

I saw stuff that there is an announcement today. Not sure when but I'm keeping my fingers crossed
BabyBlues is offline  
Reply With Quote
The Following User Says Thank You to BabyBlues For This Useful Post:
hovercraftdriver25 (October 6th, 2011)
Old October 6th, 2011, 09:37 AM   #20 (permalink)
Member
 
hovercraftdriver25's Avatar
 
Join Date: Apr 2010
Posts: 252
 
Device(s): Rooted Droid Incredible rocking MIUI
Carrier: Not Provided

Thanks: 56
Thanked 76 Times in 44 Posts
Default

Quote:
Originally Posted by BabyBlues View Post
I saw stuff that there is an announcement today. Not sure when but I'm keeping my fingers crossed
US or UK? UK is having an event, supposedly Beats related and probably formal announcement of Sensation XE/XL or whatever it is called.
hovercraftdriver25 is offline  
Reply With Quote
sponsored links
Old October 6th, 2011, 09:46 AM   #21 (permalink)
Trouble Just Finds Me!
 
BabyBlues's Avatar
 
Join Date: Jun 2010
Location: Jersey - born & bred
Gender: Female
Posts: 13,125
 
Device(s): VZW Galaxy Nexus - rooted - Shiny ROM
Carrier: Verizon

Thanks: 10,842
Thanked 11,671 Times in 5,893 Posts
CowgirlKL25
Default

Damn, looks like the UK. Sad face for me.
BabyBlues is offline  
Reply With Quote
Old October 6th, 2011, 02:21 PM   #22 (permalink)
Member
 
jbh00jh's Avatar
 
Join Date: Apr 2010
Location: SC
Posts: 392
 
Device(s): HTC Incredible
Carrier: Not Provided

Thanks: 26
Thanked 45 Times in 41 Posts
Default

Quote:
Originally Posted by hovercraftdriver25 View Post
Some folks aren't that tech savvy...regardless, why should the consumer have to worry about it in the first place?

BTW, where's that Vigor announcement that was supposed to happen yesterday that you posted about on XDA?
All you have to do is go into settings/applications with System App Remover and uninstall the two apks. If they are tech savvy enough to root a phone they can do that.
jbh00jh is offline  
Reply With Quote
Old October 7th, 2011, 12:54 PM   #23 (permalink)
AF Contributor
 
blkbeltkid17's Avatar
 
Join Date: Nov 2010
Location: Virginia, United States Of America
Posts: 4,203
 
Device(s): Rooted Samsung Galaxy Note 3 Rooted Motorola Xoom & Nexus 7
Carrier: T-Mobile

Thanks: 292
Thanked 641 Times in 450 Posts
Default

I wanna see the announcement for this now
blkbeltkid17 is offline  
Reply With Quote
Reply

HTC Rezound
Current Rating:
Rate this Phone:

The HTC Rezound is the first Beats by Dre smartphone from HTC and will be available on Verizon. It truly is a high-end beast as it boasts a 4.3 inch 720p HD display, a 1.5Ghz processor, 1GB of RAM, an 8 megapixel rear camera with 1080p HD video rec... Read More



Go Back   Android Forums > Android Phones > HTC Rezound
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 01:48 PM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.