Samsung Galaxy S3 found storing passwords in plain text
Posted on 13 November 2012.
Samsung Galaxy S3, currently one of the most popular smartphones on the market, stores passwords in plain text.


The culprit is actually Samsung's S-Memo app, and all the passwords stored in it can be accessed by anyone who has root access to the device.

Normally, that would mean only its owner, but since some users root their devices in order to customize their mobile experience as they see fit, the passwords contained in the app can be seen by anyone who has physical access to the device.

The fact was discovered by a XDA Recognized Developer and Forum Moderator, after he poked around his own rooted Samsung Galaxy S3 device one afternoon and discovered that the app's SQLite files contained his Google account password in plaintext format.

The great majority of users don't bother with rooting their smartphones, so they are safe for now. Still, the S-Memo app should encrypt passwords stored in it, and I'm sure we can expect an update that will fix the vulnerability soon.






Spotlight

The context-aware security lifecycle and the cloud

Posted on 25 November 2014.  |  Ofer Wolf, CEO at Sentrix, explains the role of the context-aware security lifecycle and illustrates how the cloud is shaping the modern security architecture.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Wed, Nov 26th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //