Overclock.net › Forums › Industry News › Technology and Science News › [THN]Android Passwords are stored in plain text on Disk
New Posts  All Forums:Forum Nav:

[THN]Android Passwords are stored in plain text on Disk

post #1 of 12
Thread Starter 
Quote:
Android Passwords are stored in plain text on Disk



A Android user complain[ed] that , All passwords are stored in plane text on Disk via a message on discussion board of Android.

He said
"The password for email accounts is stored into the SQLite DB which in turn stores it on the phone's file system in plain text. Encrypting or at least transforming the password would be desirable."


On this Android Support "Andy Stadler" Reply that :
some claims have been made about some of the other email clients not storing the password in cleartext.

Simply obscuring your password (e.g. base64) or encrypting it with a key stored elsewhere will *not* make your password or your data more secure. An attacker will still be able to retrieve it.

A simple test: if you can boot up the device and it will begin receiving email on your configured accounts, then the passwords are not truly secure.
source


Their response that "but other apps have similar problems too" isn't exactly the answer some people were looking for.
post #2 of 12
I didn't store any important passwords on my phone anyway.
My email account password isn't the same as others.
Render Bender
(10 items)
 
On The Move
(11 items)
 
 
CPUGraphicsRAMHard Drive
Intel X5690 Xeon (12 Cores @ 3.46) Nvidia Titan Xp 64GB 1333MHz ECC DDR3 Samsung 850 EVO 1TB x2 - RAID 0 
MonitorCaseAudio
Samsung UN40JU6700 40" 4K Curved Apple Mac Pro 2010 Klipsch 2.1 
CPUGraphicsRAMHard Drive
Intel Core 2 Duo Nvidia GeForce 9400M 8GB 1067 MHz DDR3 Toshiba 500GB 
OSMonitorKeyboardCase
Mavericks 10.9 Dell U3011 Rosewill Mech Reds 2010 Unibody 
MouseMouse PadAudio
Logitech G700 Multi-Touch Kilpsch 2.1 
  hide details  
Reply
Render Bender
(10 items)
 
On The Move
(11 items)
 
 
CPUGraphicsRAMHard Drive
Intel X5690 Xeon (12 Cores @ 3.46) Nvidia Titan Xp 64GB 1333MHz ECC DDR3 Samsung 850 EVO 1TB x2 - RAID 0 
MonitorCaseAudio
Samsung UN40JU6700 40" 4K Curved Apple Mac Pro 2010 Klipsch 2.1 
CPUGraphicsRAMHard Drive
Intel Core 2 Duo Nvidia GeForce 9400M 8GB 1067 MHz DDR3 Toshiba 500GB 
OSMonitorKeyboardCase
Mavericks 10.9 Dell U3011 Rosewill Mech Reds 2010 Unibody 
MouseMouse PadAudio
Logitech G700 Multi-Touch Kilpsch 2.1 
  hide details  
Reply
post #3 of 12
Well, since the phone auto logs in anyway...They have to have access to the device, if not, that's easily patched. But still a stupid hole.
    
CPUMotherboardGraphicsRAM
Intel Core i5 3570k @ 4.5Ghz ASRock Z77 Pro3 Powercolor Radeon HD7950 3GB @ 1150/1350 4x4GB G.Skill Ares 2000Mhz CL9 
Hard DriveHard DriveHard DriveHard Drive
Samsung 840 250GB Western Digital Black 1TB WD1002FAEX Seagate Barracuda 3TB ST3000DM001 Samsung Spinpoint EcoGreen 2TB 
Optical DriveCoolingCoolingCooling
Pioneer DVR-220LBKS Noctua NH-D14 Scythe Gentle Typhoon 1850rpm Corsair AF140 Quiet Edition 
CoolingOSMonitorMonitor
Arcitc Cooling Acclero Twin Turbo II Arch Linux x86-64, amdgpu BenQ G2220HD BenQ G2020HD 
KeyboardPowerCaseMouse
Ducky Shine III Year of the Snake, Cherry Blue Silverstone Strider Plus 600w CoolerMaster CM690 II Black and White SteelSeries Sensei Professional 
Mouse PadAudioOther
Artisan Hien Mid Japan Black Large ASUS Xonar DX NZXT Sentry Mesh 30w Fan Controller 
  hide details  
Reply
    
CPUMotherboardGraphicsRAM
Intel Core i5 3570k @ 4.5Ghz ASRock Z77 Pro3 Powercolor Radeon HD7950 3GB @ 1150/1350 4x4GB G.Skill Ares 2000Mhz CL9 
Hard DriveHard DriveHard DriveHard Drive
Samsung 840 250GB Western Digital Black 1TB WD1002FAEX Seagate Barracuda 3TB ST3000DM001 Samsung Spinpoint EcoGreen 2TB 
Optical DriveCoolingCoolingCooling
Pioneer DVR-220LBKS Noctua NH-D14 Scythe Gentle Typhoon 1850rpm Corsair AF140 Quiet Edition 
CoolingOSMonitorMonitor
Arcitc Cooling Acclero Twin Turbo II Arch Linux x86-64, amdgpu BenQ G2220HD BenQ G2020HD 
KeyboardPowerCaseMouse
Ducky Shine III Year of the Snake, Cherry Blue Silverstone Strider Plus 600w CoolerMaster CM690 II Black and White SteelSeries Sensei Professional 
Mouse PadAudioOther
Artisan Hien Mid Japan Black Large ASUS Xonar DX NZXT Sentry Mesh 30w Fan Controller 
  hide details  
Reply
post #4 of 12
That's why you password protect you phone. Common sense 101.

Funny story. I walked into a verizon store and they have all these net laptops up to try out the 3g on them. I went to gmail on all of them, and they all were logged into different peoples gmails.
Edited by cl04k3d - 7/30/11 at 8:56pm
It's TURBO TIME!
(14 items)
 
  
CPUMotherboardGraphicsRAM
[i5 2500k] [AsRock Z77 Pro 4] [ATI 5770] [16GB G.Skill Ripjaws DDR3-1333][7-7-7-21@1.5v] 
Hard DriveCoolingOSMonitor
[OCZ Agility 3 120GB] [Corsair H-60] [Windows 7 Ultimate x64] [22in Asus 2ms 1920x1080] 
KeyboardPowerCaseMouse
daskeyboard [SeaSonic X750 Gold 750W] [NZXT M59] Razer DeathAdder 
  hide details  
Reply
It's TURBO TIME!
(14 items)
 
  
CPUMotherboardGraphicsRAM
[i5 2500k] [AsRock Z77 Pro 4] [ATI 5770] [16GB G.Skill Ripjaws DDR3-1333][7-7-7-21@1.5v] 
Hard DriveCoolingOSMonitor
[OCZ Agility 3 120GB] [Corsair H-60] [Windows 7 Ultimate x64] [22in Asus 2ms 1920x1080] 
KeyboardPowerCaseMouse
daskeyboard [SeaSonic X750 Gold 750W] [NZXT M59] Razer DeathAdder 
  hide details  
Reply
post #5 of 12
I have an urge to say "haha android is 73h 5uxx0rz" but I'll keep it civil by saying this:

iOS is more secure, and this helps prove it.

But of course, if you don't want to have to worry about not getting viruses or hacked, then you're just "stupid" and "lazy".
Kalki
(25 items)
 
Alienware
(18 items)
 
ASUS A53Z
(13 items)
 
CPUMotherboardGraphicsRAM
AMD FX-8320 @ 4.73GHz Gigabyte 990FXA-UD3 Radeon HD 7950 @ 1200/1800 8GB Samsung 30nm DDR3 @ 2000MHz 11-11-11-28-1T 
Hard DriveHard DriveHard DriveOptical Drive
128GB Crucial M4 1TB Seagate Barracuda 7200.12 2TB Seagate Barracuda ST 7200 RPM who cares 
CoolingCoolingCoolingCooling
XSPC Raystorm XSPC Razor HD 7970 XSPC EX240 Swiftech MCP50X 
CoolingCoolingCoolingCooling
Black Ice GT Stealth 240 2x XSPC Xinruilian 1650rpm 2x Yate Loon Slim 1800rpm Alphacool Light Tower 
OSOSMonitorKeyboard
Windows 7 Gentoo GNU/Linux Dell UltraSharp U2412M CM Storm Trigger MX Brown 
PowerCaseMouse
Corsair AX750 Corsair Carbide 300R Logitech G400 
CPUMotherboardGraphicsRAM
AMD OPTERON BULLDOZER 16-CORE 2GHZ (32GHZ TOTAL) ALIENWARE 3+1 PHASE ITX GAMING BOARD 4GB NVIDIA GEFORCE GT 430 32GB GAMING DDR3 800MHZ CL13 
Hard DriveOptical DriveCoolingOS
2TB 5400RPM GAMING HDD GAMING BLU RAY BURNER ONE GAMING CASE FAN UBUNTU W/ UNITY (I AM 1337 H4X0R) 
MonitorKeyboardPowerCase
HD-READY 24" 1366X768 PENTILE TN PANEL GAMING M... ALIENWARE TACTX UBER 1337 BACKLIT RUBBER MEMBRA... OFF-BRAND 200W GAMING PSU; 65% EFFICIENCY  ALIENWARE GAMING CASE WITH THE COOL GLOWING ALIEN 
MouseMouse PadAudioAudio
ALIENWARE TACTX GAMING MOUSE ALIENWARE MOUSEPAD IT'S DESIGNED FOR GAMING AND... BEATS AUDIO 1337 ALIENWARE TACTX 8-CHANNEL GAMING HEADSET/M... 
OtherOther
16 CORES!!!! 4GB VRAM!!!! FASTER THAN 3960X + 7... ALIENWARE GAMING CARPET 
CPUMotherboardGraphicsRAM
AMD A6-3420M OC 2.2GHz / 3GHz Turbo 1.10625v ASUS A53Z AMD Radeon HD 6520G 6GB DDR3 1333MHz 
Hard DriveOptical DriveCoolingOS
320GB WD Scorpio Black yes. really good Windows 7 Home Premium 64-bit 
OSMonitorKeyboardPower
Fedora GNU/Linux 1366x768 LED-backlit TN panel Decent + numpad ~5hr 6-cell li-ion 
Audio
Altec Lansing 
  hide details  
Reply
Kalki
(25 items)
 
Alienware
(18 items)
 
ASUS A53Z
(13 items)
 
CPUMotherboardGraphicsRAM
AMD FX-8320 @ 4.73GHz Gigabyte 990FXA-UD3 Radeon HD 7950 @ 1200/1800 8GB Samsung 30nm DDR3 @ 2000MHz 11-11-11-28-1T 
Hard DriveHard DriveHard DriveOptical Drive
128GB Crucial M4 1TB Seagate Barracuda 7200.12 2TB Seagate Barracuda ST 7200 RPM who cares 
CoolingCoolingCoolingCooling
XSPC Raystorm XSPC Razor HD 7970 XSPC EX240 Swiftech MCP50X 
CoolingCoolingCoolingCooling
Black Ice GT Stealth 240 2x XSPC Xinruilian 1650rpm 2x Yate Loon Slim 1800rpm Alphacool Light Tower 
OSOSMonitorKeyboard
Windows 7 Gentoo GNU/Linux Dell UltraSharp U2412M CM Storm Trigger MX Brown 
PowerCaseMouse
Corsair AX750 Corsair Carbide 300R Logitech G400 
CPUMotherboardGraphicsRAM
AMD OPTERON BULLDOZER 16-CORE 2GHZ (32GHZ TOTAL) ALIENWARE 3+1 PHASE ITX GAMING BOARD 4GB NVIDIA GEFORCE GT 430 32GB GAMING DDR3 800MHZ CL13 
Hard DriveOptical DriveCoolingOS
2TB 5400RPM GAMING HDD GAMING BLU RAY BURNER ONE GAMING CASE FAN UBUNTU W/ UNITY (I AM 1337 H4X0R) 
MonitorKeyboardPowerCase
HD-READY 24" 1366X768 PENTILE TN PANEL GAMING M... ALIENWARE TACTX UBER 1337 BACKLIT RUBBER MEMBRA... OFF-BRAND 200W GAMING PSU; 65% EFFICIENCY  ALIENWARE GAMING CASE WITH THE COOL GLOWING ALIEN 
MouseMouse PadAudioAudio
ALIENWARE TACTX GAMING MOUSE ALIENWARE MOUSEPAD IT'S DESIGNED FOR GAMING AND... BEATS AUDIO 1337 ALIENWARE TACTX 8-CHANNEL GAMING HEADSET/M... 
OtherOther
16 CORES!!!! 4GB VRAM!!!! FASTER THAN 3960X + 7... ALIENWARE GAMING CARPET 
CPUMotherboardGraphicsRAM
AMD A6-3420M OC 2.2GHz / 3GHz Turbo 1.10625v ASUS A53Z AMD Radeon HD 6520G 6GB DDR3 1333MHz 
Hard DriveOptical DriveCoolingOS
320GB WD Scorpio Black yes. really good Windows 7 Home Premium 64-bit 
OSMonitorKeyboardPower
Fedora GNU/Linux 1366x768 LED-backlit TN panel Decent + numpad ~5hr 6-cell li-ion 
Audio
Altec Lansing 
  hide details  
Reply
post #6 of 12
Quote:
Originally Posted by Usario View Post
I have an urge to say "haha android is 73h 5uxx0rz" but I'll keep it civil by saying this:

iOS is more secure, and this helps prove it.

But of course, if you don't want to have to worry about not getting viruses or hacked, then you're just "stupid" and "lazy".
Most of the issues I've seen with Android are down to complete idiocy, not really down to security as much. (eg. The Gmail example)
    
CPUMotherboardGraphicsRAM
Intel Core i5 3570k @ 4.5Ghz ASRock Z77 Pro3 Powercolor Radeon HD7950 3GB @ 1150/1350 4x4GB G.Skill Ares 2000Mhz CL9 
Hard DriveHard DriveHard DriveHard Drive
Samsung 840 250GB Western Digital Black 1TB WD1002FAEX Seagate Barracuda 3TB ST3000DM001 Samsung Spinpoint EcoGreen 2TB 
Optical DriveCoolingCoolingCooling
Pioneer DVR-220LBKS Noctua NH-D14 Scythe Gentle Typhoon 1850rpm Corsair AF140 Quiet Edition 
CoolingOSMonitorMonitor
Arcitc Cooling Acclero Twin Turbo II Arch Linux x86-64, amdgpu BenQ G2220HD BenQ G2020HD 
KeyboardPowerCaseMouse
Ducky Shine III Year of the Snake, Cherry Blue Silverstone Strider Plus 600w CoolerMaster CM690 II Black and White SteelSeries Sensei Professional 
Mouse PadAudioOther
Artisan Hien Mid Japan Black Large ASUS Xonar DX NZXT Sentry Mesh 30w Fan Controller 
  hide details  
Reply
    
CPUMotherboardGraphicsRAM
Intel Core i5 3570k @ 4.5Ghz ASRock Z77 Pro3 Powercolor Radeon HD7950 3GB @ 1150/1350 4x4GB G.Skill Ares 2000Mhz CL9 
Hard DriveHard DriveHard DriveHard Drive
Samsung 840 250GB Western Digital Black 1TB WD1002FAEX Seagate Barracuda 3TB ST3000DM001 Samsung Spinpoint EcoGreen 2TB 
Optical DriveCoolingCoolingCooling
Pioneer DVR-220LBKS Noctua NH-D14 Scythe Gentle Typhoon 1850rpm Corsair AF140 Quiet Edition 
CoolingOSMonitorMonitor
Arcitc Cooling Acclero Twin Turbo II Arch Linux x86-64, amdgpu BenQ G2220HD BenQ G2020HD 
KeyboardPowerCaseMouse
Ducky Shine III Year of the Snake, Cherry Blue Silverstone Strider Plus 600w CoolerMaster CM690 II Black and White SteelSeries Sensei Professional 
Mouse PadAudioOther
Artisan Hien Mid Japan Black Large ASUS Xonar DX NZXT Sentry Mesh 30w Fan Controller 
  hide details  
Reply
post #7 of 12
Quote:
Originally Posted by Usario View Post
iOS is more secure, and this helps prove it.
Essentially, if you don't have to input a password every time your phone boots, your passwords are not actually secure on your phone, no matter how "encrypted" they are.
Micro Dance
(8 items)
 
  
CPUMotherboardGraphicsRAM
i7-4790k z97i-plus EVGA GTX980 SC 16GB Team Xtreme 2400 
Hard DriveCoolingOSCase
512GB Samsung SSD 830 NH-L12 Windows 10 EVGA Hadron Air 
  hide details  
Reply
Micro Dance
(8 items)
 
  
CPUMotherboardGraphicsRAM
i7-4790k z97i-plus EVGA GTX980 SC 16GB Team Xtreme 2400 
Hard DriveCoolingOSCase
512GB Samsung SSD 830 NH-L12 Windows 10 EVGA Hadron Air 
  hide details  
Reply
post #8 of 12
dont worry kids most of you have nothing important in your emails except maybe registrations for all the games you sit on
post #9 of 12
Quote:
Originally Posted by Xeio View Post
Essentially, if you don't have to input a password every time your phone boots, your passwords are not actually secure on your phone, no matter how "encrypted" they are.
This. I'm pretty sure Google had this in mind and didn't even bother encrypting the passwords.
Trinity
(19 items)
 
  
CPUMotherboardGraphicsRAM
AMD A10-5800K Biostar Hi-Fi A85W APU Integrated Graphics G.Skill 8GB (2 x 4GB) 1600MHz CL9 
Hard DriveHard DriveOptical DriveCooling
Crucial M4 64GB Western Digital WD Blue 500GB Lite-On iHAS124 CD/DVD Burner Cooler Master Hyper 212 EVO (Pull Configuration) 
OSMonitorMonitorKeyboard
Windows 7 Home Premium 64-Bit NEC MultiSync LCD1970VX NEC MultiSync LCD1970VX Filco Majestouch Black w/ Cherry MX Blue (JIS l... 
PowerCaseMouseMouse Pad
Corsair CX430 NZXT Source 220 Logitech Click! Mouse SteelSeries QcK Mini Diablo III Edition 
AudioAudioOther
Sony SRS-T10PC USB Portable Speaker Realtek Onboard Audio Intel Centrino Desktop Wireless 
  hide details  
Reply
Trinity
(19 items)
 
  
CPUMotherboardGraphicsRAM
AMD A10-5800K Biostar Hi-Fi A85W APU Integrated Graphics G.Skill 8GB (2 x 4GB) 1600MHz CL9 
Hard DriveHard DriveOptical DriveCooling
Crucial M4 64GB Western Digital WD Blue 500GB Lite-On iHAS124 CD/DVD Burner Cooler Master Hyper 212 EVO (Pull Configuration) 
OSMonitorMonitorKeyboard
Windows 7 Home Premium 64-Bit NEC MultiSync LCD1970VX NEC MultiSync LCD1970VX Filco Majestouch Black w/ Cherry MX Blue (JIS l... 
PowerCaseMouseMouse Pad
Corsair CX430 NZXT Source 220 Logitech Click! Mouse SteelSeries QcK Mini Diablo III Edition 
AudioAudioOther
Sony SRS-T10PC USB Portable Speaker Realtek Onboard Audio Intel Centrino Desktop Wireless 
  hide details  
Reply
post #10 of 12
This has already been fixed with new versions of android. The quote and information in the article is from a year ago.
Mark V "Cylon"
(16 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 3770k ASUS P8Z77 WS ASUS 280x G.Skill 4x4GB 1866 DDR3 
Hard DriveHard DriveOptical DriveCooling
Samsung 840 Pro Seagate ST6000NM0044 6TB 7200 RPM Enterprise SE... LG WH14NS40 14X Blu-Ray Burner Corsair H100i 
OSMonitorKeyboardPower
Windows10 Pro 3 x Dell U2412m G.SKILL RIPJAWS KM780R RGB Mechanical Keyboard,... EVGA SuperNOVA 1600 P2 
CaseMouseAudioAudio
Cooler Master Storm Trooper Logitech M570 Schiit Modi 2 DAC Schiit Magni 2 Uber Amp 
  hide details  
Reply
Mark V "Cylon"
(16 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 3770k ASUS P8Z77 WS ASUS 280x G.Skill 4x4GB 1866 DDR3 
Hard DriveHard DriveOptical DriveCooling
Samsung 840 Pro Seagate ST6000NM0044 6TB 7200 RPM Enterprise SE... LG WH14NS40 14X Blu-Ray Burner Corsair H100i 
OSMonitorKeyboardPower
Windows10 Pro 3 x Dell U2412m G.SKILL RIPJAWS KM780R RGB Mechanical Keyboard,... EVGA SuperNOVA 1600 P2 
CaseMouseAudioAudio
Cooler Master Storm Trooper Logitech M570 Schiit Modi 2 DAC Schiit Magni 2 Uber Amp 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Technology and Science News
Overclock.net › Forums › Industry News › Technology and Science News › [THN]Android Passwords are stored in plain text on Disk