jerdog · Nov 12, 2012 at 12:00 am

S-Memo Stores Google Account Passwords in Clear Text, Viewable When Rooted

There are always inherent risks when you root your device, though voiding your warranty in and of itself is not one of them, unlike what manufacturers would have you believe. Instead, the real risks are those things like having your /data partition readable by any app in the /system partition, as XDA Recognized Developer and Forum Moderator graffixnyc found out recently.

While browsing his AT&T Samsung Galaxy S3 on a lazy Saturday afternoon, graffixnyc opened the Samsung S-Memo SQLite files and found something shocking: S-Memo stored his Google account password in clear text. After posting his findings in the thread, fellow XDA Recognized Developer ViViDboarder reminded graffixnyc that since he was rooted he was able to view the contents of the SQLite files. And while this is true, graffixnyc pointed out that even though the only users affected by this are root users, the records themselves should have been encrypted.

Let this be a warning to you that if you find yourself with root on your device, be careful.  Some developers don’t take proper precautions when creating an application. They can’t be trusted to protect your credentials; only you can.

 


_________
Want something on the XDA Portal? Send us a tip!
Jimmy McGee · Mar 6, 2015 at 06:00 am · no comments

LG G4 Confirmed, New Blackphone 2 & More – XDA TV

Nvidia unveiled the SHIELD Tegra X1 TV Box! That and much more news is covered by Jordan when he reviews all the important stories from this week. Included in this week's news is the announcement of the Cyanogen's new corporate identity and partnership with Qualcomm and be sure to check out the article talking about Lollipop devices being no longer encrypted by default! That's not all that's covered in today's video! Jordan talks about the other videos released this week...

XDA NEWS
GermainZ · Mar 5, 2015 at 01:50 pm · 1 comment

HTC to Replace Swype with TouchPal

According to engadget (citing TouchPal as well as an internal source), HTC aims to replace Swype with TouchPal as the default input method in upcoming devices, including the new HTC One M9. The official TouchPal Twitter account also tweeted the engadget article about this, further confirming the move. What prompted this move? The CEO of CooTek, the company behind TouchPal, says it's because of their better contextual prediction and language support. If you actually look at the supported languages, you'll...

XDA NEWS
Emil Kako · Mar 5, 2015 at 12:10 pm · no comments

Do You Think the Apple Watch Will Be a Huge Success?

Many people are under the impression that once Apple finally launches its smartwatch, the market for wearables will suddenly become mainstream and be taken to the next level. Taking an idea that already exists and making it incredibly successful isn't something new to Apple, but does the Apple Watch have what it takes? The wearable hasn't even shipped yet, but has already won multiple awards and has been featured on numerous fashion magazine covers. Do you think the Apple Watch will be a huge success? Let us know your thoughts.

DISCUSS
Share This