egzthunder1 · Feb 14, 2011 at 09:00 pm

XFinity App for Android Sharing Passwords

While we normally like to write about good things going on in the Android world, we also like to warn people about potential dangers to them. XDA member aBSuRDiST posted a thread regarding the XFinity Android app. For those of you outside of the US, XFinity (Comcast) is a cable provider in the US and this app allows the user to have control over various things such as DVR settings and more. The member discovered by reading the activity put out by the app, that this openly reveals both username and password of the user in question. Telling the app to not remember this information seems to not work either.

It would be interesting if those of you with this app can reproduce this. For this you will need something to see the logcat generated in your device. Please leave your comments below if you notice any other weird behavior by this app.

My system log shows <userName>MYUSERNAME@comcast.net</userName> and <password>MYPASSWORD</password> on a line that starts with “D/HTTPManager”. I read the log using aLogcat (app available in the market). Open aLogcat, press menu and filter for “password”. After I clear my log (using aLogcat) that line reappears even when I haven’t used the Xfinity app. I don’t use my comcast credentials in any other app.

You can find more information in the original thread.

Want something published in the Portal? Contact any News Writer.


_________
Want something on the XDA Portal? Send us a tip!
TAGS:

egzthunder1

egzthunder1 is an editor on XDA-Developers, the largest community for Android users. I have been an active member of xda-developers since 2005 and have gone through various roles in my time here. I am Former Portal Administrator, and currently part of the administrator team while maintaining my writer status for the portal. In real life, I am a Chemical Engineer turned Realtor in the Miami area. View egzthunder1's posts and articles here.
Chris Gilliam · May 24, 2015 at 03:59 pm · 2 comments

XDA Recap: This Week In Android (May 17 – 23)

Another week, another recap. The Sunday tradition marches on this week with a fresh no-nonsense look at big-picture news. Here in the digital XDA writers’ room, we spend our days pouring over an average of 2,500 news items and forum threads every 24 hours. Only the most timely and interesting bits survive the editing process, but the portal’s front page still sees weekly counts in excess of 100 posts. This is a glut of content to absorb, especially if following...

XDA NEWS
Mario Tomás Serrafero · May 24, 2015 at 11:00 am · 1 comment

Sunday Debate: Are Smaller Bezels Better or Worth It?

Bezels have been getting smaller and smaller as the years go by, and while devices from 2011 needed to trim some fat, there is no absolute rule that says that smaller bezels, after a happy medium, are beneficial to a phone. Part of this is that, with today’s current smartphone paradigms, an absolute lack of bezels does not produce an inherently better user experience.   With each technological advancement come limitations and compromises of some sort, and bezels are not...

XDA NEWS
Jimmy McGee · May 24, 2015 at 06:00 am · 3 comments

LG G4 First Impressions and Unboxing – XDA TV

The latest in LG’s signature line of “G phones” has been released. The LG G4 is the successor to the popular LG G3. Coming with many different design styles, from two types of leather to ceramic white, the LG G4 has the looks, but does it have the power? In this episode of XDA TV, Producer TK gets hands on with a new LG G4. TK opens the box for a standard unboxing. Then, TK shows off the phone and...

XDA NEWS
Share This