If you own a mobile phone made by HTC and connect using Bluetooth, there's a decent chance security researcher Alberto Moreno Tablado can rummage through sensitive files stored on the device using a critical bug in some of its wireless device features. The directory traversal flaw resides in the File Transfer Profile (OBEX FTP …

COMMENTS

House rules Send corrections

This topic is closed for new posts.

Wednesday 15th July 2009 22:47 GMT TrixyB

Pity...

I used to quite enjoy my HTC tyan a couple of years back. I always thought they were quite good until my nokia N95 and now N97. You could install so much stuff on those HTC phones even years ago. If you didnt mind it crashing everyday!!

0 0
Thursday 16th July 2009 09:16 GMT Nathan Askew

What are the chances!?

I understand it may be a vulnerability but the chance of this actually happening are tiny. Considering you would have to stay with 10m of the hacker while firstly he had to anonymously pair with your handset which is not the easiest thing to do, then set up the FTP connection.

Rubbish!

0 0
Thursday 16th July 2009 09:16 GMT g e

* Snigger * Can't resist

My HTC runs Linux... (Android) So I guess it's using bluez. So I guess I can relax.

The temptation to post a wee piece of Linux vs Windows trollery in an HTC context has obviously proved too much :oD

0 1
Thursday 16th July 2009 09:54 GMT Fred Flintstone

Well duh..

"A spokesman for HTC America didn't immediately return a phone call seeking comment for this article."

Did you call him on his mobile? :-)

Mine's the one with the iPhone in the pocket, thanks

0 0
Thursday 16th July 2009 11:31 GMT Andy Watt

@Nathan Askew

"I understand it may be a vulnerability but the chance of this actually happening are tiny. Considering you would have to stay with 10m of the hacker while firstly he had to anonymously pair with your handset which is not the easiest thing to do, then set up the FTP connection.

Rubbish!"

two words for you: YAGI aeiral - http://gizmodo.com/019057/imterview-with-bluetooth-hacking-flexiliss-john-hering - oh yes, the bluesnipe rifle! Using carefully crafted antenas and a class 3 device rxtends the range you can snarf (and presumably use this exploit) to about 1 MILE.

Wake up divot, you don't know everything....

0 0
Monday 27th July 2009 13:47 GMT David Pickering

suprised?

don't expect to hear anything useful back from htc ever on this tbh (well, maybe some lip service) - existing devices with this problem will _never_ be fixed - only devices that haven't yet come out will have the required patch - this is how htc work - once you've bought one of their f*ck-off expensive handsets they stick 2 fingers up at you and tell you to go swivel (if they bother responding at all) when you ask for some support (or they'll lie to you about graphics drivers etc).

BOO.

0 0