As promised, HTC has released its first wave of OTA system updates to their phones that are affected by the vulnerability which was brought to light a few weeks back which could allow third-party applicatiosn to access personal data. It’s been roughly three weeks since HTC acknowledged the security risk and pledged to roll out timely updates to all their phones which are affected by the issue.

Sprint worked closely with HTC after reports emerged of a potential issue that could allow malicious third-party apps to compromise data on Android™ devices made by HTC. Protecting customer privacy is a top priority at Sprint. Beginning today, HTC EVO™ 4G, HTC EVO™ 3D, HTC EVO Shift™ 4G, HTC EVO Design 4G™, HTC EVO View 4G™ and HTC Wildfire S™ customers will receive the over-the-air software update to address this situation. We urge all users to install the update promptly. Sprint

Rather than roll out updates to phones one at a time, it looks like HTC’s approach for their first round of updates is to focus on all devices on Sprint’s network. The security fix will be received by the HTC EVO 4G, HTC EVO 3D, HTC EVO Shift 4G, HTC EVO Design 4G, HTC EVO View 4G and HTC Wildfire S (which is technically on Virgin Mobile).  If you own any of these devices, you can download the update manually by going to Settings > System updates > HTC software update > Check Now. If you don’t mind waiting around for a bit, Sprint and HTC will send out update notifications to the affected devices in waves over the next few days.

While we applaud HTC and Sprint for rolling out this first wave of security updates, we hope HTC will be taking the same approach with other service providers and make the update available to all of their phones over the next few days. There have been no reports of malicious apps which have taken advantage of the security hole in HTC’s devices, but we’ll sleep better knowing that everyone’s phone is secure and that there is no risk of losing personal data due to a manufacturer’s software design flaw.

How do you feel HTC has handled this whole situation? Has HTC worked fast enough or is a three-week turnaround time just not good enough for an issue like this?

« »