A serious vulnerability that affected the way some popular HTC Android phones handle 802.1x usernames, passwords, and SSIDs was disclosed publicly today by engineers Chris Hessing and Bret Jordan. The bug allowed applications with only an ACCESS_WIFI_STATE permission to read your Wi-Fi SSIDs, usernames, and, most importantly, passwords on at least the following devices:
Desire HD (both "ace" and "spade" board revisions) - Versions FRG83D, GRI40
Glacier - Version FRG83
Droid Incredible - Version FRF91
Thunderbolt 4G - Version FRG83D
Sensation Z710e - Version GRI40
Sensation 4G - Version GRI40
Desire S - Version GRI40
EVO 3D - Version GRI40
EVO 4G - Version GRI40
Of course, if a malicious application also happens to have access to the Internet, SMS, or other means of sending out information, credentials could leak out from a vulnerable device to a remote location.
You thought we'd stop the prize train because it's Sunday? Well, here at Android Police, we give away awesome stuff seven days a week during the holidays, so we've got a bag of goodies for you today, courtesy of RadioShack.
Even in the event you do win one of the great phones we've got up for grabs today, you might want to check out RadioShack this holiday season regardless - they've got a whole bunch of phones you can get free today on new 2-year agreements on AT&T, Sprint, and Verizon as part of their holiday free phone sale.
Still rocking the HTC G1, the world's first Android phone? Didn't think so, but if you have one laying around somewhere, you may want to grab that thing and knock the dust off of it. Why, you ask? Because there's a "working" (I use that term loosely here) port of ICS ready to flash.
As you may imagine, it is incredibly slow and nearly unusable, but c'mon - you have to admit that it's pretty cool.
HTC's UK Facebook page was updated last night with information regarding just which HTC handsets would be in the "first wave" of phones to receive an update to Android 4.0 Ice Cream Sandwich in early 2012. While the post was made on HTC's UK Facebook, the list contains a number of US-only devices. Those handsets are asterisked to indicate US-only availability (the Rezound, EVO Design, and Amaze). The others on the list include the Sensation (plus XL and XE versions), the Vivid, and the EVO 3D.
We've been hearing information about the HTC Rezound (codenamed Vigor) for quite a while now, and HTC just officially took the wraps off of this beasty. Like most other new HTC devices, it's packed with Beats by Dre, and, similar to the Sensation XE, has those wicked red capacitive buttons. It's quite impressive in terms of hardware spec:
4.3-Inch 720p (1282*720) display
1.5GHz dual-core Snapdragon processor
16GB built-in storage, 16GB microSD card
8P camera, 2MP front cam
Beats by Dre
4G LTE with simultaneous voice/data capabilities (like the Thunderbolt)
If you've been waiting for AT&T to start announcing some smartphones for its LTE network, that time is over. Ma Bell just took the wraps off of its first two LTE-powered smartphones, and they're nothing short of impressive.
Samsung Galaxy S II Skyrocket
The GSII Skyrocket is an incremental upgrade to AT&T's current GSII, with quite a few beefed up specs:
We've been hearing tidbits of information about an HTC device codenamed Runnymede for a few weeks, but the waiting game is now over. HTC officially announced the device as the Sensation XL, and it packs mediocre specs in an oversized shell:
4.7-inch 480x800 Super LCD
1.5GHz single-core Snapdragon
16GB internal storage (no SD Card slot)
8MP rear shooter, 1.3 ffc
Android 2.3.x with Sense 3.5
While the spec list may be less than impressive, there is one thing to be said about the device: it's dead sexy.
There's no doubt that we're all waiting with anticipation for the HTC Vigor, which is rumored to be coming out as the Droid Incredible HD, to hit the market. It's reportedly going to be the first full HD phone, sporting a 720p display, 1.5Ghz dual-core processor, 1GB RAM, Sense 3.5, and Android 2.3.4 -- in other words, it's going to be a beast.
For those who want to get a little taste of what the Vigor has to offer before this upcoming HTC monster is officially released, we have gotten our hands on all of the multimedia goodies from the device.
At the beginning of the month, HTC announced that it would be bringing Gingerbread to the Droid Incredible and ThunderBolt. While that promised has been fulfilled for the former, there's been nary a word of the status of the update for the latter. Until now.
Thanks to our anonymous tipster known only as Pig Benis, we have an official Gingerbread RUU hot of the presses for the HTC ThunderBolt.
Our tipster isn't positive if this is the final build or not, but considering it's so close to the end of the month, it is very likely.
For all the Android-lovin' ladies in the house, HTC has just announced the Rhyme for Verizon: a mid-range device coated in a metallic plum (read: purple) finish with matching accessories. Previously rumored as the Bliss, the Rhyme was designed with the woman in mind (see what I did there?), complete with "charm indicator" -- an accessory that will glow purple when the phone is ringing, so you never miss another call because you didn't hear your phone beneath...