AllInfo

Bug in HTC devices allows apps wi-fi passwords, steal

HTC has confirmed that several of its Android smartphones are vulnerable to a bug where the password for the wi-fi connection obsolete. An update to correct the problems, is already rolled out.

The bug appeared in an American overheidsdatabase and was discovered by developer Chris Hessing. The meldingspagina indicates that applications that are authorised to use the wi-fi status from the Android device to view, the password for the connect in can see. Normally, the password is not public, but by an error can be applications of this in plain text view. The password would then easily could be stolen; when the app has internet access, can this be forwarded to the servers of the developers.

From the publication it appears that a large number of HTC smartphones are prone to leak. Of the devices also sold in the Netherlands, it is the Desire S, Desire HD, Sensation and Evo 3D. It is unknown whether there is currently abuse of the bug. The Android Market would in any case does not contain software, that from this abuse, as decided by Google after a scan.

Previously, the bug can also be found in the standard version of Android, but Google has here some time ago a fix for released. HTC uses a custom version of Android, more for his own skin Sense to be able to run. Thereby, many devices are still susceptible to the problem, but the manufacturer has now released a software update. This is over-the-air rolled out for users who have a device that is susceptible to the leak. For some devices, however, it is necessary to manually install the update; this will appear in the coming weeks online. Android-smartphones from other manufacturers would not suffer from the wifi bug.

Exit mobile version