Sprint HTC EVO 4G rooting tutorial is out. Big security holes found in Sprint’s Android customizations

When you give your best and newest phone to a few thousands of developers, you should be prepared that the device will be hacked soon.

And that's exactly what happened when Google gave Sprint 4G during the same EVO I / O conference last month. The phone is based on a few hours. But really needed to know what they are doing to unlock EVO 4G far.

Well, no. Android Central, with the help of XDA developers has been launched alongside a very good tutorial on how to do it yourself. That with the commercial availability of the morning Sprint 4G EVO, could not come at better time.

But there is one more thing, when you make a mobile phone into a crowd of developers hacking obsessed. Especially if you're getting with the underlying operating system, locking it up and adapt to the needs of your network.

You must ensure that your changes do not undermine the basic security of the device. And it seems that Sprint screwed up the great in it.

According to Matthew Mastracci Grock. As one of the guys behind the root of the original EVO 4G, Sprint customizations really bad the underlying Android OS:

Android Sprint customizations are so bad that any Android application at random (with permission or not), basically you can access all your data with very little work.

It seems that the same problem also affects Hero Sprint HTC devices too.

Now, do not fear too soon, and do not cancel your order EVO 4G yet. The problem is not so bad really. Nobody will be able to take care of your phone via 3G, Wi-Fi, Bluetooth or by sending some SMS smart. You must install a malicious application to receive a blow.

So if you get all your job applications through Android Market, you must be a bit strong. And Matthew, Sprint has been very sensitive about security these complaints and is working hard on a patch.

However, if you marked it "Allow install applications not related to the market" option in their EVO 4G, and are about to install some third party application, make sure you trust the source and know you are creating.

Via:Grock.com