
So maybe you’ve heard that HTC has a bit of a security issue on its hands. Should you be worried? Let us take a moment to explain the situation and asses its severity to you.
Here’s the situation. When you initially set up a Sense enabled phone you’re presented with multiple preference choices. Specifically, your preference on HTC’s right to collect data from your device is the root of the problem, in this case. When you allow HTC to collect data, you give them the right to record things like what apps you use, where and how you use them, your account names, location, and call logs. It’s no secret that apps exist in the market that collect data such as this, but that’s just the problem. It’s no secret because those apps are required to express what permissions they require. In a somewhat similar fashion you voluntarily allow HTC those permissions when you check the box but they aren’t required to be explicitly expressed because Sense is essentially the operating system, rather than just an app. Alright, so despite how all that sounds, that isn’t the problem. The problem is that HTC has failed to sandbox their collected data meaning that currently the data is potentially accessible to other apps without them having to expressly declare permissions for collecting and using it.
» Read the rest