jerdog · Nov 12, 2012 at 12:00 am

S-Memo Stores Google Account Passwords in Clear Text, Viewable When Rooted

There are always inherent risks when you root your device, though voiding your warranty in and of itself is not one of them, unlike what manufacturers would have you believe. Instead, the real risks are those things like having your /data partition readable by any app in the /system partition, as XDA Recognized Developer and Forum Moderator graffixnyc found out recently.

While browsing his AT&T Samsung Galaxy S3 on a lazy Saturday afternoon, graffixnyc opened the Samsung S-Memo SQLite files and found something shocking: S-Memo stored his Google account password in clear text. After posting his findings in the thread, fellow XDA Recognized Developer ViViDboarder reminded graffixnyc that since he was rooted he was able to view the contents of the SQLite files. And while this is true, graffixnyc pointed out that even though the only users affected by this are root users, the records themselves should have been encrypted.

Let this be a warning to you that if you find yourself with root on your device, be careful.  Some developers don’t take proper precautions when creating an application. They can’t be trusted to protect your credentials; only you can.

 


_________
Want something on the XDA Portal? Send us a tip!

jerdog

jerdog is an editor on XDA-Developers, the largest community for Android users. Jeremy has been an XDA member since 2007, and has been involved in technology in one way or another, dating back to when he was 8 years old and was given his first PC in 1984 - which promptly got formatted. It was a match made in the stars, and he never looked back. He has owned, to date, over 60 mobile devices over the last 15 years and mobile technology just clicks with him. In addition to being a News Editor and OEM Relations Manager, he is a Senior Moderator and member of the Developer and Moderator Committees at XDA. View jerdog's posts and articles here.
Mathew Brack · Apr 1, 2015 at 05:51 pm · 4 comments

April Fools Round Up: The Year of Nostalgia

April Fools Day is once again upon us and as usual, tech companies everywhere have not failed to keep us entertained. With a trove of fantastic faux product launches and even some real product launches that were taken as April Fools jokes, people have been busy releasing their hilarious ideas. With many of these jokes being nostalgic and some even being functional it's easy to appreciate the spirit behind them. Samsung Galaxy Blade Edge In a reference to the Galaxy...

XDA NEWS
Tomek Kondrat · Apr 1, 2015 at 05:43 pm · 2 comments

Android 5.1 OTA for Nexus Round-Up

The beginning of April is dominated by April Fools. There are jokes and pranks everywhere, which are meant to fool people. This news is no joke though, as Google has pushed the shiny red button to send out over-the-air updates to supported devices. Well, sort of, as only a few of available Nexus devices got updates to Android 5.1. Here's a list of OTAs that can be downloaded and flashed by stock recoveries. You can find guides on how to revert...

XDA NEWS
Chris Gilliam · Apr 1, 2015 at 04:29 pm · 4 comments

Google’s Prank Roundup for April Fools 2015 [Updated]

Once again, we have arrived on the most magical of holidays - the annual unveiling of HalfLife 3, and day on which co-workers believe it is appropriate to duct tape air horns behind doors. I speak, of course, about April Fools Day. As has become their custom, Google launched lighthearted "pranks" for each of their various services (with other tech sites and vendors following suit), and we have done our best to round up the humorous products and tweaks surfacing thus far....

XDA NEWS
Share This