jerdog · Nov 12, 2012 at 12:00 am

S-Memo Stores Google Account Passwords in Clear Text, Viewable When Rooted

There are always inherent risks when you root your device, though voiding your warranty in and of itself is not one of them, unlike what manufacturers would have you believe. Instead, the real risks are those things like having your /data partition readable by any app in the /system partition, as XDA Recognized Developer and Forum Moderator graffixnyc found out recently.

While browsing his AT&T Samsung Galaxy S3 on a lazy Saturday afternoon, graffixnyc opened the Samsung S-Memo SQLite files and found something shocking: S-Memo stored his Google account password in clear text. After posting his findings in the thread, fellow XDA Recognized Developer ViViDboarder reminded graffixnyc that since he was rooted he was able to view the contents of the SQLite files. And while this is true, graffixnyc pointed out that even though the only users affected by this are root users, the records themselves should have been encrypted.

Let this be a warning to you that if you find yourself with root on your device, be careful.  Some developers don’t take proper precautions when creating an application. They can’t be trusted to protect your credentials; only you can.

 


_________
Want something on the XDA Portal? Send us a tip!

jerdog

jerdog is an editor on XDA-Developers, the largest community for Android users. Jeremy has been an XDA member since 2007, and has been involved in technology in one way or another, dating back to when he was 8 years old and was given his first PC in 1984 - which promptly got formatted. It was a match made in the stars, and he never looked back. He has owned, to date, over 60 mobile devices over the last 15 years and mobile technology just clicks with him. In addition to being a News Editor and OEM Relations Manager, he is a Senior Moderator and member of the Developer and Moderator Committees at XDA. View jerdog's posts and articles here.
Jimmy McGee · May 5, 2015 at 06:00 am · 2 comments

Android System WebView Update – XDA Xposed Tuesday

Android Webview is a system component powered by Chrome that allows Android apps to display web content. Google released a security update for the pre-installed feature, but didn’t take effect on many AOSP based ROMs. However, there is no need to fear, an Xposed Module is here. In this episode of XDA Xposed Tuesday, XDA TV Producer TK reviews an Xposed Module that enables the update on AOSP based ROMs. Xposed Developer PeterCxy created the WebViewGoogle module. TK shows off...

XDA NEWS
Emil Kako · May 4, 2015 at 12:33 pm · 4 comments

Who Is Your Favorite YouTuber That Covers Mobile?

There are dozens of talented YouTubers who cover mobile, but we want to know which ones are your favorite. Let us know who your favorite tech reviewers are and what makes them stand out compared to the others.

DISCUSS
Faiz Malkani · May 4, 2015 at 12:25 pm · 1 comment

Galaxy S6 Shipping with Different Camera Models

One of the Galaxy S6's most flaunted features is its spectacular camera, its 16MP with an f/1.9 aperture performing excellently in well-lit shots as well as low-light ones, with most reviews concluding that it trounces the camera on the iPhone 6 as well. However, all may not be right in Monde de la Samsung, as earlier today, XDA Member Bananaz came across a surprising detail about the shooter on the S6, and while the revelation is not necessary groundbreaking, it...

XDA NEWS
Share This