jerdog · Nov 12, 2012 at 12:00 am

S-Memo Stores Google Account Passwords in Clear Text, Viewable When Rooted

There are always inherent risks when you root your device, though voiding your warranty in and of itself is not one of them, unlike what manufacturers would have you believe. Instead, the real risks are those things like having your /data partition readable by any app in the /system partition, as XDA Recognized Developer and Forum Moderator graffixnyc found out recently.

While browsing his AT&T Samsung Galaxy S3 on a lazy Saturday afternoon, graffixnyc opened the Samsung S-Memo SQLite files and found something shocking: S-Memo stored his Google account password in clear text. After posting his findings in the thread, fellow XDA Recognized Developer ViViDboarder reminded graffixnyc that since he was rooted he was able to view the contents of the SQLite files. And while this is true, graffixnyc pointed out that even though the only users affected by this are root users, the records themselves should have been encrypted.

Let this be a warning to you that if you find yourself with root on your device, be careful.  Some developers don’t take proper precautions when creating an application. They can’t be trusted to protect your credentials; only you can.

 


_________
Want something on the XDA Portal? Send us a tip!

jerdog

jerdog is an editor on XDA-Developers, the largest community for Android users. Jeremy has been an XDA member since 2007, and has been involved in technology in one way or another, dating back to when he was 8 years old and was given his first PC in 1984 - which promptly got formatted. It was a match made in the stars, and he never looked back. He has owned, to date, over 60 mobile devices over the last 15 years and mobile technology just clicks with him. In addition to being a News Editor and OEM Relations Manager, he is a Senior Moderator and member of the Developer and Moderator Committees at XDA. View jerdog's posts and articles here.
Jack Jennings · Jul 1, 2015 at 07:15 am · 3 comments

How to Listen to Beats 1 on Android Right Now

If you felt a bit left out by Apple launching their own online radio station Beats 1 yesterday, Twitter user Benji R has an answer for you, at least temporarily. Beats 1 is Apple's proprietary competitor to established online radio stations like BBC Radio 1, featuring a number of popular DJs curating their favorite tracks, led by Zane Lowe. Bucking their usual trend, Apple have actually planned for the Apple Music app - mandatory for listening to Beats 1 - to come to Android, but it...

XDA NEWS
Jimmy McGee · Jul 1, 2015 at 06:30 am · 3 comments

NVidia SHIELD TV – XDA TV Device Review

The SHIELD TV is a not an Android smartphone device. However, that doesn't mean it is not an awesome device in its own right. Bringing the Power of the Tegra X1 processor to Android TV, the SHIELD TV is an Android based console with unlimited capabilities. Is the SHIELD TV powerful and feature packed enough to be worth considering? That is only one of the questions XDA TV Producer Jordan answers when he takes the opportunity to review the device. Check...

XDA NEWS
Mike McCrary · Jul 1, 2015 at 04:25 am · 3 comments

PSA: Having cellular connectivity or texting issues tonight?

You're not alone... Tonight, many users are experiencing a myriad of problems related to their wireless carrier, be it with LTE connectivity, text messages not being received, delivered, or coming in late, or times of cellular outage. A look at downdetector.com shows spikes of reported problems at every major US carrier, all starting around the same time this evening and persisting into the early morning hours. A potential cause for this communications disturbance could be the "leap second" that was added to...

XDA NEWS
Share This