http___www.tportal.hr_scitech_tehno_151817_Hakeri-pronasli-rupu-u-HTC-Senseu.html_1.xml
1.1 1.2 2.1 2.2 2.3 3.1 4.1 5.1 5.2 6.1 6.2 7.1 8.1 8.2
Are you an HTC Android smartphone user on Sprint’s network? If yes, you are in for luck, as the mobile carrier is now rolling a certain software update to HTC Android smartphones on its list, in order to fix some nasty privacy issues for users. Users of the smartphone on Sprint’s network often complained about a security issue that enabled malicious third-party apps to access all types of sensitive data and other user information. Now, Sprint is in the process of rectifying this issue. The update, which started rolling out since Tuesday, will automatically update itself on all HTC Android smartphones, but those of you who just cannot wait that long can manually install the same onto your smartphones. HTC smartphones including the Wildfire, EVO 4G, EVO 3D, EVO Shift 4G, EVO View 4G and EVO Design 4G are already receiving over-the-air updates. More Info on the Vulnerability It was found that certain Web apps and ads could actually manage to access data such as phone numbers, user accounts, SMS data, location history and even a list of other user accounts. Other more sensitive data included network info, IP address of the user, list of installed apps, list of installed apps along with user ids and versions of the app and much more. HTC stated that the software itself would not do much harm to consumer data, but that it was a vulnerability that could probably be exploited by malicious third-party apps. HTC also said that its other carriers have also started rolling out the same update ever since the last week. To find out if the fix is installed on your device, you need to go to the Settings menu and tap About Phone> System Update> HTC Software Update. Has your HTC phone gotten the update already? What is your experience of the same?
1.1 2.1 3.1 5.1 6.1 7.1 7.2 8.1 9.1 9.2 10.1 11.1 12.1 12.2 14.1
Sučelje za neke od najpopularnijih HTC-ovih pametnih telefona ima sigurnosni propust koji omogućuje pristup SMS-ovima i lokaciji vlasnika Sigurnosni propust pronađen u nekim HTC-ovim pametnim telefonima pogonjenim operativnim sustavom Android mogao bi aplikacijama koje se spajaju na internet omogućiti pristup podacima kao što su lokacija korisnika telefona, SMS poruke koje šalje i slično. Rupa je pronađena u sklopu korisničkog sučelja Sense, pa se stoga odnosi na neke od najpopularnijih HTC-ovih uređaja, poput Thunderbolta i EVO 4G, piše Ars technica Ti mobiteli imaju predinstaliran paket aplikacija nazvan HTCLoggers.apk, kojem je dodijeljen pristup njihovim ključnim funkcijama. Aplikacije koje se spajaju na Mrežu mogu putem tog paketa pristupiti podacima vezanim uz GPS, mreže WiFi, memoriju, aktivnim aplikacijama, SMS-ove (uključujući tekst i telefonske brojeve) te sistemske logove, u kojima se mogu naći i e-mail adrese te telefonski brojevi. Kad ga se aktivira, paket aplikacija otvara lokalni port za pristup tim podacima bilo kojoj aplikaciji koja to zatraži. A one ih mogu prosljeđivati dalje. Rupu, čini se, neće biti moguće zakrpati bez HTC-ove nadogradnje ili patcha. Korisnici modela Thunderbolt, EVO 3D, EVO 4G, EVO Shift 4G i drugih mogu obrisati HTCLoggers sa svojih uređaja ako si dodijele administratorske ovlasti. Ako ne znate to učiniti sami, potražite pomoć kod telekom operatera. Dosad još nisu zabilježene zlorabe, no taj propust omogućuje daleko veći pristup podacima no što to Google dopušta. Android obično ne pušta podatke ovog tipa izvan telefona bez izravnog odobrenja korisnika. - Sviđa vam se članak? Preporučite ga prijateljima putem ovih servisa: Pošaljite mailom