HTC Phone Bug Allows Wi-Fi Passwords to Be Stolen

Uh-Oh... this is crazy... 

HTC acknowledged a vulnerability Thursday that can expose a user's Wi-Fi password and SSID to a malicious application running on the phone.

HTC also said that a fix for the vulnerability has already been pushed to several phones, although others will need to be manually updated. HTC said that more details on the update would be available next week.

HTC representatives were unable to be reached at press time to comment on which phones had been patched, which had not, and when those patches would be forthcoming.

Security architects Chris Hessing and Bret Jordan were credited with the vulnerability, which was published on the US-CERT Web site on Thursday. 

Read the rest of the article...