Slashdot Mirror
Android Password Data Stored In Plain Text
jampola writes "The Hacker News is reporting that Android password data is being stored as plain text in its SQlite database. Hackers News says that 'The password for email accounts is stored into the SQLite DB which in turn stores it on the phone's file system in plain text. Encrypting or at least transforming the password would be desirable.' I'm sure most would agree encrypted password data in at least SHA or MD5 would be kind of a good idea!"
Sounds like you're a bit of a sore Apple user, or just an anti-Android person (why are people like this? I don't understand it) who is a bit threatened, or perhaps you just like to appear smarter than people by trying to point out that Slashdot is just as biased as any other place (which it is.) But trying to pretend that the competent technical folk on the site that have very correctly pointed out that this is a non-issue being propagated by people that don't actually understand what they're talking about, which is what I'm assuming you also are, as you didn't even continue to read the post you're replying to beyond the eleventh word.
They can't - it's stored in /data which is off limits to any app, unless you've rooted the phone.
Which as many Android enthusiasts point out is terribly easy to do. While it does not affect every user it affects huge subset of users.
On the iPhone, even if you've jailbroken it there's no such weakness thanks to the Keychain. Jailbreaking allows side loading, it does not break the entire security model and expose things as basic as email passwords.
No such weakness? What weakness are you talking about? GPP did not imply that rooting the phone causes /data to cease being off-limits to apps.
What weakness are you talking about? GPP did not imply that rooting the phone causes /data to cease being off-limits to apps.
From the GPP:
it's stored in /data which is off limits to any app, unless you've rooted the phone.
If that's inaccurate start by correcting the person I responded to, not me.
"There is more worth loving than we have strength to love." - Brian Jay Stanley