DroidForums.net is the original Verizon Android Forum! Registered Users do not see these ads. Please Register - It's Free!
Results 1 to 4 of 4

Thread: HTC Working on fix for WiFi Vulnerability They Found and Shared Themselves

  1. Editor in Chief
    dgstorm's Avatar
    Member #
    154790
    Join Date
    Dec 2010
    Posts
    6,334
    Liked
    2060 times
    Phone
    Enter Current Phone Model Here
    Premium Member
    #1

    HTC Working on fix for WiFi Vulnerability They Found and Shared Themselves


    The folks at HTC were very forthcoming recently. Apparently, one of their own engineers found a security vulnerability that has been inherent in most HTC Android devices for quite some time. The company is working on a fix, but also wanted to share it with the community. It shouldn't be surprising that they did, as it is their responsibility, but it is refreshing, nonetheless, that they are trying to deal with it publicly by giving full disclosure.

    The problem could allow applications with just an ACCESS_WIFI_STATE permission to read your Wi-Fi SSIDs, usernames, and, even passwords. The vulnerability was found on at least the following devices, but could be on more:
    • Desire HD (both "ace" and "spade" board revisions) - Versions FRG83D, GRI40
    • Glacier - Version FRG83
    • Droid Incredible - Version FRF91
    • Thunderbolt 4G - Version FRG83D
    • Sensation Z710e - Version GRI40
    • Sensation 4G - Version GRI40
    • Desire S - Version GRI40
    • EVO 3D - Version GRI40
    • EVO 4G - Version GRI40
    They have actually been working hand in hand with Google to fix the issue for the last few months, and already have a fix for it. In fact, many of the devices already received the fix through an OTA update. The company wanted to make sure to comply with the ethics of full disclosure, so they shared the following info:
    Timeline
    - 2012-02-01: Public disclosure
    - 2012-01-31: Submit final public disclosure doc to HTC Global for feedback
    - 2012-01-31: HTC publishes information via their web site
    - 2012-01-20: Public disclosure ? postponed
    - 2012-01-19: Discussion with HTC Global on their time schedule
    - 2012-01-05: Conference call with HTC Global
    - 2012-01-02: Public disclosure ? postponed
    - 2011-12-05: Discussed public disclosure time frames with HTC and Google
    - 2011-10-11: Updated all individuals and groups that are aware of the issue
    - 2011-10-11: Follow-up conference call with HTC Global and Google
    - 2011-09-19: Updated all individuals and groups that were aware of the issue
    - 2011-09-19: Conference call with HTC Global and Google
    - 2011-09-08: HTC and Google verified exploit
    - 2011-09-07: Notified key government agencies and CERT under non-public disclosure
    - 2011-09-07: Initial email and phone call with HTC Global and Google
    WiFi security fix

    HTC has developed a fix for a small WiFi issue affecting some HTC phones. Most phones have received this fix already through regular updates and upgrades.However, some phones will need to have the fix manually loaded. Please check back next week for more information about this fix and a manual download if you need to update your phone.
    It's interesting to note that this security vulnerability probably wouldn't have existed had HTC simply put a stock version of Android on their phones. I understand the desire of the various OEMs to differentiate their products from the competition by making them "seem" different with custom UI's; however, this is another case which clearly indicates it would better serve these companies and their consumers to stick to as close to a stock Android experience as possible.

    Source: AndroidPolice
  2. Theme Developer
    bazar6's Avatar
    Member #
    15789
    Join Date
    Dec 2009
    Location
    MD
    Posts
    683
    Liked
    39 times
    Twitter
    Bazar6
    Phone
    GNex & Xoom & OG Droid
    DroidForums.net Theme Developer
    Premium Member
    #2
    If they didn't report it, and a consumer/hacker figured it out, they would have a much worse PR problem. It's always best to come out and tell em somethings wrong and you're working on a fix, than try to keep it quiet and hope some random consumer doesn't light up the internet with how much of a security vulnerability it is and blow it out of proportion.

    Lucky for me, I hardly ever turn on WiFi on my tbolt, this issue doesn't bother me too much.
    Moto Droid 1 : Project Elite v4.2
    HTC Thunderbolt : Sold
    Samsung Droid Charge : Stock
    Moto Xoom Wifi : CM10.1
    Samsung Galaxy Nexus : CM10.2
  3. Droid Ninja
    Larry_ThaGr81's Avatar
    Member #
    55936
    Join Date
    Apr 2010
    Location
    Hesperia
    Posts
    1,031
    Liked
    1 times
    Twitter
    Larry_ThaGr81
    Phone
    rooted Droid 1 & Thunderbolt
    #3
    Can somebody confirm that the Thunderbolt is still supported by HTC, because under their help link I didn't see it listed after checking the entire HTC lineup twice.
    Simply Stunning rooted OGD
    Sent from the Bolt powered by Thunder on
    SkyRaider Zeus
  4. Senior Droid
    srothkin's Avatar
    Member #
    6448
    Join Date
    Nov 2009
    Location
    Ossining, NY
    Posts
    103
    Phone
    HTC Thunderbolt (Verizon)
    #4
    Quote Originally Posted by Larry_ThaGr81 View Post
    Can somebody confirm that the Thunderbolt is still supported by HTC, because under their help link I didn't see it listed after checking the entire HTC lineup twice.
    I suspect htc.com isn't supporting the U.S at all. I tried to sign up for news notifications on the site. The signup form requires selecting your region. U.S. is NOT listed.

Links

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Similar Threads

  1. LG Revolution WIFI Problem - WebPage Not Found
    By PhxWilsonsKen in forum LG Revolution
    Replies: 0
    Last Post: 11-23-2011, 01:18 PM
  2. AT&T working on shared data plan
    By kodiak799 in forum Droid Forums Member News Depot
    Replies: 0
    Last Post: 06-02-2011, 01:52 PM
  3. Wifi on computer stops working after using wifi on droid
    By geronimogman in forum Android General Discussions
    Replies: 16
    Last Post: 03-14-2011, 02:45 PM
  4. WiFi Scan, router not found
    By coggs in forum Android Tech Support
    Replies: 36
    Last Post: 12-26-2010, 08:10 AM
  5. Droid vulnerability
    By astevens54 in forum Android General Discussions
    Replies: 5
    Last Post: 07-27-2010, 08:54 AM

Search tags for this page

fix htc thunderbolt wifi issue
,

fix thunderbolt wifi

,
fix wifi on thunderbolt
,

fix wifi vulnerabilities

,
how to fix htc thunderbolt wifi issues
,

how to fix wifi on htc thunderbolt

,

htc android 4 wifi fix

,

htc hotfix incredible

,

htc incredible hotfix

,

htc thunderbolt wifi fix

,

htc wifi security fix

,

htc wifi vulnerability

,
is wifi vulnerable to thunderbolt
,

thunderbolt wifi fix

,

wifi logo

Click on a term to search our site for related topics.
Find us on Google+