x PhoneArena is looking for new authors! To view all available positions, click here.
  • Home
  • News
  • Root users: Samsung S-Memo is insecurely storing your Google Account credentials

Root users: Samsung S-Memo is insecurely storing your Google Account credentials

Root users: Samsung S-Memo is insecurely storing your Google Account credentials
This is a warning for some Samsung Galaxy users out there who have rooted your device: Samsung's S-Memo is not securely storing your Google Account credentials, and because your device is rooted, that data could be at risk.

Apparently, one of the devs over at XDA has found out that S-Memo stores your Google Account credentials in plain text. Under normal circumstances, this shouldn't be an issue, but if you have rooted your device, that information is viewable. It was found on a Galaxy S III, and it seems that the trouble is in having your /data partition readable by any app in the /system partition.

If you have a rooted device, all you need is a SQLite reader, and you'll be able to see the Google Account data which is stored in plain text in a SQLite file. As of yet, this is just a be-aware bit of info, but it is possible that more apps are storing data this way, and it may be something root users need to be wary of in the future. 

25 Comments
  • Options
    Close




posted on 12 Nov 2012, 20:56 3

1. Ninetysix (Posts: 1070; Member since: 08 Oct 2012)


Android is the best!

posted on 12 Nov 2012, 21:02

2. Nadr1212 (Posts: 741; Member since: 22 Sep 2012)


Uh oh!

posted on 12 Nov 2012, 21:43 4

3. cj100570 (Posts: 198; Member since: 12 May 2009)


Let me see if I have this correct.... A secure system which users choose to make insecure by rooting, which removes certain safety mechanisms, renders the software vulnerable to attack? I'm shocked! The fix is simple, don't root your phone!

posted on 12 Nov 2012, 21:55 5

4. spideyhead256 (Posts: 148; Member since: 05 Nov 2012)


rooting has it's advantages..if your phone actually needs to be rooted.i mean like i have an htc explorer which is a pretty low-end phone.it still has cm10 [jellybean] because of unlocking the bootloader and rooting it.my galaxy s3 surely doesn't need it cause it has already has the official JB update.and you get to use apps like titanium backup which are pretty helpful.but rooting should only be done by people who are willing to take the risk.unlike alot of people on xda who flash a rom from another phone on their phone. :|

posted on 12 Nov 2012, 22:05 3

6. Hemlocke (unregistered)


Isn't that the truth. Be careful, you will get down-voted for suggesting something that those of us who are regulars on XDA know to be true: There are plenty of morons who use iOS, but there are also a bunch who use Android, as evidenced by all of the "HELP! Bricked my Sensation when all I did was flash One X AOKP. Why did it brick it?" garbage you see on XDA.

posted on 12 Nov 2012, 22:20 2

7. spideyhead256 (Posts: 148; Member since: 05 Nov 2012)


+1 man.on the s3 forum i've seen alot of people who ask questions like 'can i flash this rom to my galaxy ace' :|

posted on 12 Nov 2012, 22:49 1

11. Hemlocke (unregistered)


Those dudes kill me. You want to slap them and scream "RTFO! (Read the freaking OP)"

posted on 12 Nov 2012, 22:59 1

12. spideyhead256 (Posts: 148; Member since: 05 Nov 2012)


know that feeling man. -_- and some people behave like beggars like 'when will this rom come plzzzzz release sooon' and 'are you dead or something' absolutely ridiculous and disrespectful.

posted on 13 Nov 2012, 04:37 1

23. Non_Sequitur (Posts: 1111; Member since: 16 Mar 2012)


There's some stuff beyond that, like advertisement disabling, tethering with access control, proxy servers, some Nova Launcher settings, etc.
But yeah, I totally agree. Don't know what you're doing? GTFO. :P

posted on 12 Nov 2012, 22:02 1

5. Hemlocke (unregistered)


If you don't root the Note, you are stuck with a skateboard with TouchWiz. That is not optimal. You need root to install ParanoidAndroid.

posted on 12 Nov 2012, 23:37 1

15. 1ceTr0n (Posts: 439; Member since: 20 May 2012)


And some of us are just fine with TouchWiz as is.

posted on 13 Nov 2012, 04:38

24. Non_Sequitur (Posts: 1111; Member since: 16 Mar 2012)


The OG Note, yeah. That thing was hardly operational.
Second Note, nope. Zero lag.

posted on 12 Nov 2012, 22:31 2

8. MC1123 (Posts: 1220; Member since: 12 Nov 2012)


i dont really understand why people need to root their device!! i mean android is free and costumization is available but ewhy still root?

i understand the jailbreaking of iPhone, but i dont get why they root android phones?! not satisfied? why?

posted on 12 Nov 2012, 22:38

9. wendygarett (unregistered)


Damn I just wanna say the same thing... Android users are so wild that they really need to kept in the zoo...

All of my device has no root nor jailbreak, all empty and original lol

posted on 12 Nov 2012, 23:53

18. RapidCat (Posts: 351; Member since: 12 Jun 2012)


where is the fun?

posted on 13 Nov 2012, 00:22 1

20. Commentator (Posts: 2178; Member since: 16 Aug 2011)


I'm not sure what kind of website you're thinking of. We just make boxes here.

(Hoping someone out there gets that reference.)

posted on 12 Nov 2012, 22:46 3

10. spideyhead256 (Posts: 148; Member since: 05 Nov 2012)


to install aftermarket roms dude.to make the most of their mobiles.ofcourse rooting is for advanced users who know what they are doing.its pretty much the same thing just a little more complicated.and risky.

posted on 12 Nov 2012, 23:37 1

16. MorePhonesThanNeeded (Posts: 616; Member since: 23 Oct 2011)


It's simple, the OEM and carriers add their own junk apps and built it things to differentiate their Android device from the other Android device makers. Thus you end up with all sorts of stupid things like SGS3 not playing nice as Mass Storage device with Windows OS and things like skins you can't deactivate because the OEM thinks that you need "their" Android experience.

Google is readying the Google Initiative, which will have OEM have two separate loads for the OS, on is skinned and the other is Vanilla Android and to me this sounds great, as most OEM tend to screw up android and have things that make the phone run kind of crappy. Google is always adding things to the core android experience, therefore OEM's should just focus on getting their hardware to work together in sync and not be some haphazard hardware that basically gets shown up by the software.

This is why people tend to root their phones, they bought the device and don't want the other crap that to them is entirely useless, it's a customizable OS but with OEM custom crap on it which cannot be disabled unless you root, there is no other option yet.

posted on 13 Nov 2012, 00:59

21. spideyhead256 (Posts: 148; Member since: 05 Nov 2012)


some features are useful with oem software.most aren't [and some are just idiotic placebos like beats]

posted on 12 Nov 2012, 23:45

17. SleepingOz (Posts: 2466; Member since: 22 Oct 2011)


Try CM or AOKP and you'll understand why some people root their droids..

posted on 13 Nov 2012, 00:08

19. xfire99 (Posts: 365; Member since: 14 Mar 2012)


If u understand jailbreaking, then u should understanding rooting too and if not, dont bother mention it.

posted on 13 Nov 2012, 01:14 1

22. fins71 (Posts: 17; Member since: 29 Oct 2012)


Main reason might be is because it's their phone and they can if they want to. You never hear people who root their phones whine about updates since they do it themselves. I root brand new phones as soon as I get it home. I didn't need to root my new galaxy note 2, but I did cause I wanted to. The Devs at xda do amazing work. Once you get into rooting and flashing you'll always want to do it. It's like a hobby that pays off by improving your phone/tablet.

posted on 12 Nov 2012, 23:21 1

13. ElektronicGeek91 (Posts: 105; Member since: 26 Sep 2012)


I just bought my Galaxy note 2 today and I love it the way it is.

posted on 12 Nov 2012, 23:28 1

14. nobelset (Posts: 265; Member since: 17 Oct 2012)


I rooted it, got custom roms and stuff, but the original's good.

posted on 13 Nov 2012, 09:01

25. fervid (Posts: 172; Member since: 22 Nov 2011)


A person isn't going to exploit their own phone they are going to have it stolen then that person root it to get to the data. You need to worry about this no matter what people.

Want to comment? Please login or register.

Latest stories