jerdog · Nov 12, 2012 at 12:00 am

S-Memo Stores Google Account Passwords in Clear Text, Viewable When Rooted

There are always inherent risks when you root your device, though voiding your warranty in and of itself is not one of them, unlike what manufacturers would have you believe. Instead, the real risks are those things like having your /data partition readable by any app in the /system partition, as XDA Recognized Developer and Forum Moderator graffixnyc found out recently.

While browsing his AT&T Samsung Galaxy S3 on a lazy Saturday afternoon, graffixnyc opened the Samsung S-Memo SQLite files and found something shocking: S-Memo stored his Google account password in clear text. After posting his findings in the thread, fellow XDA Recognized Developer ViViDboarder reminded graffixnyc that since he was rooted he was able to view the contents of the SQLite files. And while this is true, graffixnyc pointed out that even though the only users affected by this are root users, the records themselves should have been encrypted.

Let this be a warning to you that if you find yourself with root on your device, be careful.  Some developers don’t take proper precautions when creating an application. They can’t be trusted to protect your credentials; only you can.

 


_________
Want something on the XDA Portal? Send us a tip!

jerdog

jerdog is an editor on XDA-Developers, the largest community for Android users. Jeremy has been an XDA member since 2007, and has been involved in technology in one way or another, dating back to when he was 8 years old and was given his first PC in 1984 - which promptly got formatted. It was a match made in the stars, and he never looked back. He has owned, to date, over 60 mobile devices over the last 15 years and mobile technology just clicks with him. In addition to being a News Editor and OEM Relations Manager, he is a Senior Moderator and member of the Developer and Moderator Committees at XDA. View jerdog's posts and articles here.
Mario Tomás Serrafero · Jul 28, 2015 at 04:20 pm · 1 comment

OnePlus 2 Forums: Discuss Everything About The OP2!

Now that the OnePlus 2 has been officially unveiled and that we have had close-up looks at the device itself, it is time for XDA users to begin discussing what to expect out of the company's new flagship phone. Can the OnePlus 2 help you never settle? If you want to find out by discussing with fellow users, the XDA forums are the right place to do so.   The OnePlus One is known for its great community which helped...

XDA NEWS
Aamir Siddiqui · Jul 28, 2015 at 12:56 pm · 2 comments

Galaxy Unpacked: What is Samsung Going to Unveil?

Amidst all the hype of the OnePlus 2 and the rain of Moto 2015 news, Samsung tried stealing the limelight back to itself by announcing their next "Galaxy Unpacked" event, which will be held on August 13th 2015. Samsung took to Twitter to reveal a very cryptic gif associated with the event, which probably has some clue on the device(s) to be launched. The hashtag "#TheNextGalaxy" does indeed point that the event will be the launchpad for a Galaxy device,...

XDA NEWS
Mario Tomás Serrafero · Jul 28, 2015 at 12:26 pm · 1 comment

Arrow Launcher: Good Effort Without Direction

Microsoft’s Android expansion has been well received on the productivity front, but not so much in terms of original applications. While their Office suite managed to bring some of the document-editing excellence to mobile, attempts at entering one’s interface through apps like Picturesque proved to be pointless failures. But even then, some apps like Hyperlapse redeem the computing giant through great quality. Microsoft seems to be approaching Android with brute, misdirected development and plenty of unorganized output, and if they want...

XDA NEWS