jerdog · Nov 12, 2012 at 12:00 am

S-Memo Stores Google Account Passwords in Clear Text, Viewable When Rooted

There are always inherent risks when you root your device, though voiding your warranty in and of itself is not one of them, unlike what manufacturers would have you believe. Instead, the real risks are those things like having your /data partition readable by any app in the /system partition, as XDA Recognized Developer and Forum Moderator graffixnyc found out recently.

While browsing his AT&T Samsung Galaxy S3 on a lazy Saturday afternoon, graffixnyc opened the Samsung S-Memo SQLite files and found something shocking: S-Memo stored his Google account password in clear text. After posting his findings in the thread, fellow XDA Recognized Developer ViViDboarder reminded graffixnyc that since he was rooted he was able to view the contents of the SQLite files. And while this is true, graffixnyc pointed out that even though the only users affected by this are root users, the records themselves should have been encrypted.

Let this be a warning to you that if you find yourself with root on your device, be careful.  Some developers don’t take proper precautions when creating an application. They can’t be trusted to protect your credentials; only you can.

 


_________
Want something on the XDA Portal? Send us a tip!

jerdog

jerdog is an editor on XDA-Developers, the largest community for Android users. Jeremy has been an XDA member since 2007, and has been involved in technology in one way or another, dating back to when he was 8 years old and was given his first PC in 1984 - which promptly got formatted. It was a match made in the stars, and he never looked back. He has owned, to date, over 60 mobile devices over the last 15 years and mobile technology just clicks with him. In addition to being a News Editor and OEM Relations Manager, he is a Senior Moderator and member of the Developer and Moderator Committees at XDA. View jerdog's posts and articles here.
Mario Tomás Serrafero · Apr 18, 2015 at 10:00 am · 4 comments

Open War for Open Android: Antitrust for Cyanogen?

Android and openness is something we talk about all the time, but the recent developments in the industry point towards inherent flaws with this very premise. Be it from bloggers, political institutions or corporations, Android is seemingly not open enough. The “War on Openness” is ironically becoming an open war, where many players are increasing their stakes and scope to try and land a bigger hold - or at the very least, restrict Google’s - on what is the world’s...

XDA NEWS
Emil Kako · Apr 17, 2015 at 01:22 pm · 3 comments

What Do You Do with All of Your Old Photos?

Smartphone cameras have advanced so tremendously over the past few years that they have almost completely replaced point and shoot digital cameras for the most of us. Furthermore, since our smartphones are always with us, the majority of us end up taking tons of photos throughout the lifespan of our devices. But what happens to all the old photos you take? Do you store them on an external hard-drive or keep them backed up to an online cloud service like Flickr? Let us know what your favorite way of storing old photos is and why.

DISCUSS
Faiz Malkani · Apr 17, 2015 at 01:04 pm · 1 comment

Diving into the April 2015 Material Design Update

Before the release of Android 5.0 Lollipop, the Holo Design guidelines served as the official reference for Android design, right from IceCream Sandwich to KitKat. However, updates to the guidelines were few and far between, leading to a lack of synchronization between Android design and current UI/UX trends. Google seems to have learned from their mistake the last time around, and earlier this week, a significant update was released for the Material Design guidelines, marking the second revision in less...

XDA NEWS
Share This