Root users: Samsung S-Memo is insecurely storing your Google Account credentials
posted by Michael H. / Nov 12, 2012, 8:52 PM
Apparently, one of the devs over at XDA has found out that S-Memo stores your Google Account credentials in plain text. Under normal circumstances, this shouldn't be an issue, but if you have rooted your device, that information is viewable. It was found on a Galaxy S III, and it seems that the trouble is in having your /data partition readable by any app in the /system partition.
If you have a rooted device, all you need is a SQLite reader, and you'll be able to see the Google Account data which is stored in plain text in a SQLite file. As of yet, this is just a be-aware bit of info, but it is possible that more apps are storing data this way, and it may be something root users need to be wary of in the future.
source: XDA developers
Posts: 204; Member since: May 12, 2009
Let me see if I have this correct.... A secure system which users choose to make insecure by rooting, which removes certain safety mechanisms, renders the software vulnerable to attack? I'm shocked! The fix is simple, don't root your phone!
posted on Nov 12, 2012, 9:43 PM 4
Posts: 148; Member since: Nov 05, 2012
rooting has it's advantages..if your phone actually needs to be rooted.i mean like i have an htc explorer which is a pretty low-end phone.it still has cm10 [jellybean] because of unlocking the bootloader and rooting it.my galaxy s3 surely doesn't need it cause it has already has the official JB update.and you get to use apps like titanium backup which are pretty helpful.but rooting should only be done by people who are willing to take the risk.unlike alot of people on xda who flash a rom from another phone on their phone. :|
posted on Nov 12, 2012, 9:55 PM 5
Isn't that the truth. Be careful, you will get down-voted for suggesting something that those of us who are regulars on XDA know to be true: There are plenty of morons who use iOS, but there are also a bunch who use Android, as evidenced by all of the "HELP! Bricked my Sensation when all I did was flash One X AOKP. Why did it brick it?" garbage you see on XDA.
posted on Nov 12, 2012, 10:05 PM 3
Posts: 1111; Member since: Mar 16, 2012
There's some stuff beyond that, like advertisement disabling, tethering with access control, proxy servers, some Nova Launcher settings, etc. But yeah, I totally agree. Don't know what you're doing? GTFO. :P
posted on Nov 13, 2012, 4:37 AM 1
If you don't root the Note, you are stuck with a skateboard with TouchWiz. That is not optimal. You need root to install ParanoidAndroid.
posted on Nov 12, 2012, 10:02 PM 1
Posts: 1256; Member since: Nov 12, 2012
i dont really understand why people need to root their device!! i mean android is free and costumization is available but ewhy still root? i understand the jailbreaking of iPhone, but i dont get why they root android phones?! not satisfied? why?
posted on Nov 12, 2012, 10:31 PM 2
Damn I just wanna say the same thing... Android users are so wild that they really need to kept in the zoo... All of my device has no root nor jailbreak, all empty and original lol
posted on Nov 12, 2012, 10:38 PM 0
Posts: 148; Member since: Nov 05, 2012
to install aftermarket roms dude.to make the most of their mobiles.ofcourse rooting is for advanced users who know what they are doing.its pretty much the same thing just a little more complicated.and risky.
posted on Nov 12, 2012, 10:46 PM 3
Posts: 645; Member since: Oct 23, 2011
It's simple, the OEM and carriers add their own junk apps and built it things to differentiate their Android device from the other Android device makers. Thus you end up with all sorts of stupid things like SGS3 not playing nice as Mass Storage device with Windows OS and things like skins you can't deactivate because the OEM thinks that you need "their" Android experience. Google is readying the Google Initiative, which will have OEM have two separate loads for the OS, on is skinned and the other is Vanilla Android and to me this sounds great, as most OEM tend to screw up android and have things that make the phone run kind of crappy. Google is always adding things to the core android experience, therefore OEM's should just focus on getting their hardware to work together in sync and not be some haphazard hardware that basically gets shown up by the software. This is why people tend to root their phones, they bought the device and don't want the other crap that to them is entirely useless, it's a customizable OS but with OEM custom crap on it which cannot be disabled unless you root, there is no other option yet.
posted on Nov 12, 2012, 11:37 PM 1
Posts: 17; Member since: Oct 29, 2012
Main reason might be is because it's their phone and they can if they want to. You never hear people who root their phones whine about updates since they do it themselves. I root brand new phones as soon as I get it home. I didn't need to root my new galaxy note 2, but I did cause I wanted to. The Devs at xda do amazing work. Once you get into rooting and flashing you'll always want to do it. It's like a hobby that pays off by improving your phone/tablet.
posted on Nov 13, 2012, 1:14 AM 1
Posts: 105; Member since: Sep 26, 2012
I just bought my Galaxy note 2 today and I love it the way it is.
posted on Nov 12, 2012, 11:21 PM 1
Send a warning to post author
Send a warning to Selected user.
The user has 0 warnings currently.
Next warning will result in ban!
Ban user and delete all posts
Message to PhoneArena moderator (optional):