jadi inget kejadian google nge remote wipe nexus s sampe jadi bengong... gara gara pake ice cream sandwich leak version On Oct 1, 2011 10:27 AM, "Defriando Riza" <[email protected]> wrote:
> Kl sy, tak remove semua om.. ;) > Wong ngak tahu jg yg mana, soalnya hrs liat ke permission section-nya.. > Imho ya, kcuali sense, bloatware incre2 lumayan byk, terutama aplikasi > vcast-nya verizon.. > > Sent from Mr.Incredible > On Oct 1, 2011 10:19 AM, "Bayu Seno Adji" <[email protected]> wrote: > > Yang perlu di remove yg mana om bloatwarenya? > > > > Regards, > > > > Bayu Seno Adji > > http://bayusenoadji.com > > http://rnbwebhosting.com > > Sent from my luvly EVO 3D aka Shooter > > On Oct 1, 2011 9:55 AM, "Defriando Riza" <[email protected]> > wrote: > >> Msh ingat beberapa wkt lalu, di beberapa htc devices, ada apps yg > >> "mengumpulkan" data2 usernya dan dikirim ke sebuah tempat.. Nah, > ternyata > >> msh berlanjut hingga saat ini, cekidot.. Mndingan, lakukan root trus > >> remove bloatwarenya.. > >> > >> For the last few weeks, we have been intensely covering security and > > privacy > >> issues that involve quite a few of the latest HTC devices (Sensation, > EVO > >> 3D, etc). It was discovered by XDA Recognized Developer > >> TrevE<http://forum.xda-developers.com/member.php?u=473262> that > >> there are multiple apps and services that basically collect all sorts of > >> information about our devices, their usage, and everything that is done > on > >> them to later on be sent to some Amazon cloud drive. HTC has come back a > >> couple of times with official statements saying that the apps are indeed > >> harmless and that the information collected is to basically help HTC and > > the > >> carriers to improve their products and services to us. Moreover, they > >> claimed that, at least, the HTC services can be opted out and they would > >> stop collecting said information. Well, TrevE has been doing a lot of > >> research as of lately and further proved that not only can these > services > >> not be turned off by regular means, but also has shown, by doing an > >> experiment in a controlled environment, that the apps are inherently > >> dangerous as they can be easily exploited by virtually any app that has > >> android.permission.INTERNET enabled, which a ton of apps in the market > >> currently do. > >> > >> The kind of information that can be pulled from the device could be > > enough, > >> potentially, to clone a device completely if the person receiving this > > knows > >> how to do it. The app seems to allow the dump of virtually all stats and > >> values by the device. Regardless of HTC’s motives to collect this > >> information, the important part about this, and really the core of the > >> issue, is that the information from these apps can be easily intercepted > > and > >> sent anywhere to anyone. For the skeptics in the room, TrevE has put > >> together a small demo app (proof of concept) that shows what could > >> potentially happen when this is intercepted. He also has put together a > >> Youtube video that shows exactly what is going on. It seems that the > only > >> real way to get rid of these services is by rooting the device and > > manually > >> removing them, but there is no known way to remove them from an unrooted > >> device. > >> > >> HTC has been notified about the issue approximately 5 days ago and we > are > >> still waiting for a response, which they said they are working on. You > > will > >> have to keep in mind that this is only the first app that TrevE is > working > >> on, and if you remember from previous articles, there are 5 of them. > Long > >> story short, you can expect one of these articles on XDA at least once a > >> week for the next month or so. > >> > >> Well, HTC, as you may see it, this is no longer about us wondering why > you > >> are getting our information, but it was discovered that whatever you are > >> using to get it is simply not secure. For the sake of your customer’s > >> privacy, we request that you take the proper measures and release any > and > >> all necessary patches to fix this for any and all devices being > affected. > >> This is about people’s data falling in the wrong hands, so please we ask > >> that you take action on this soon. > >> > >> *HTCLogger allows any app that has access to android.permission.INTERNET > > on > >> devices such as the evo3d to obtain full access to query sensitive info > > such > >> as network/appusagestats/meid/esn/phone#/past 10 location broadcasts and > >> last known locations/and more.* > >> > >> > >> http://www.youtube.com/watch?v=YoTUkQ7SlNU&feature=player_embedded > >> > >> You can find the original thread > >> here< > > > http://infectedrom.com/showthread.php/559-Vunerability-1-Android-Security-Elevation > >>. > >> Also, you can check if you are vulnerable by using the app found in this > >> thread< > > http://forum.xda-developers.com/showpost.php?p=17612559&postcount=110> > >> . > >> > >> Want something published in the Portal? Contact any News Writer. > >> > >> Thanks TrevE <http://forum.xda-developers.com/member.php?u=473262> for > the > >> tip! > >> > >> Read full article at > >> > > > http://www.xda-developers.com/android/remember-the-ciq-apps-found-in-htc-devices-well-there-is-more-and-it-isnt-pretty/ > >> > >> Sent from Mr.Incredible > >> > >> -- > >> "Indonesian Android Community" Join: http://forum.android.or.id > >> > >> =============== > >> Join ID-ANDROID Developers > >> http://groups.google.com/group/id-android-dev > >> --------------------- > >> Gunakan Paket Unlimited Data XL Mobile Broadband > >> http://www.xl.co.id/XLInternet/BroadbandInternet > >> -------------------- > >> PING'S Mobile - Plaza Semanggi > >> E-mail: [email protected] Ph. 021-25536796 > >> -------------------- > >> i-gadget Store - BEC Bandung > >> E-mail: [email protected] Ph. 0812-21111191 > >> -------------------- > >> Toko EceranShop - BEC Bandung > >> E-mail: [email protected] Ph. 0815-56599888 > >> =============== > >> > >> Aturan Jualan dan Kloteran ID-Android http://goo.gl/YBN21 > > > > -- > > "Indonesian Android Community" Join: http://forum.android.or.id > > > > =============== > > Join ID-ANDROID Developers > > http://groups.google.com/group/id-android-dev > > --------------------- > > Gunakan Paket Unlimited Data XL Mobile Broadband > > http://www.xl.co.id/XLInternet/BroadbandInternet > > -------------------- > > PING'S Mobile - Plaza Semanggi > > E-mail: [email protected] Ph. 021-25536796 > > -------------------- > > i-gadget Store - BEC Bandung > > E-mail: [email protected] Ph. 0812-21111191 > > -------------------- > > Toko EceranShop - BEC Bandung > > E-mail: [email protected] Ph. 0815-56599888 > > =============== > > > > Aturan Jualan dan Kloteran ID-Android http://goo.gl/YBN21 > > -- > "Indonesian Android Community" Join: http://forum.android.or.id > > =============== > Join ID-ANDROID Developers > http://groups.google.com/group/id-android-dev > --------------------- > Gunakan Paket Unlimited Data XL Mobile Broadband > http://www.xl.co.id/XLInternet/BroadbandInternet > -------------------- > PING'S Mobile - Plaza Semanggi > E-mail: [email protected] Ph. 021-25536796 > -------------------- > i-gadget Store - BEC Bandung > E-mail: [email protected] Ph. 0812-21111191 > -------------------- > Toko EceranShop - BEC Bandung > E-mail: [email protected] Ph. 0815-56599888 > =============== > > Aturan Jualan dan Kloteran ID-Android http://goo.gl/YBN21 > -- "Indonesian Android Community" Join: http://forum.android.or.id =============== Join ID-ANDROID Developers http://groups.google.com/group/id-android-dev --------------------- Gunakan Paket Unlimited Data XL Mobile Broadband http://www.xl.co.id/XLInternet/BroadbandInternet -------------------- PING'S Mobile - Plaza Semanggi E-mail: [email protected] Ph. 021-25536796 -------------------- i-gadget Store - BEC Bandung E-mail: [email protected] Ph. 0812-21111191 -------------------- Toko EceranShop - BEC Bandung E-mail: [email protected] Ph. 0815-56599888 =============== Aturan Jualan dan Kloteran ID-Android http://goo.gl/YBN21
