HTC mobile phone owners may already be aware that HTC found a security vulnerability in the WiFi programme in several smartphones. The security hole could allow software with some WiFi permissions to gain access to a user’s SSID and access credentials.

Additionally, the gathered information could be sent to a remote server without the user’s permission or even overt knowledge.

HTC has devised a solution, and they will be sending the patch to many models via the automatic update system. Some affected models, however, must be updated manually.

To date HTC models affected include

Desire HD (Both Ace and Spade board revisions) – versions Versions FRG83D, GRI40 and Glacier, version FRG83.
Droid Incredible, Version FRF91
Thunderbolt, Version FRG83D.
Sensation Z710e – Version GRI40
Sensation 4G, Version GRI40
Desire S, Version GRI40
EVO 3D, Version GRI40
EVO 4G, Version GRI40

So far, the myTouch 3G and the Nexus One have not been reported as vulnerable.

If your smartphone is listed as vulnerable, watch for the update. If you don’t automatically receive the patch or if you don’t know if you have, check for updates manually until the problem is reported fix across the board.

If you believe your device is vulnerable but not listed, please contact the tech support service area for your device.

Responsibility for mobile phone safety is a responsibility of both the manufacturer and the user. The manufacturer can help with system-related faults, but it’s the user’s responsibility to keep the device current in updates and protect it with good anti-virus, anti-malware programmes. The operating system owners do everything they can in firewalls and OS security, but users must be aware of risks in downloading apps and syncing with other devices, taking care not to infect their device or inadvertently cause malware to spread.

Take a few moments each day to ensure you have the current versions of patches and protection software. Those few minutes daily could save hours of anguish and frustration – and cost – later.