Passwords unencrypted?! - HD2 Android Q&A, Help & Troubleshooting and Genera

Hi. i've just found today a file named "accounts.db" stored in /data/system. if i open this file i can see all accounts (names with password) i use on my mobile, like Email or HTC Acc. And they are all (excepted google's account) unencrypted. And even if i delete all my email-accounts, the entry in this file is still present.
so if you lost your mobile, be sure that guy can read your passwords for your email accounts.
My question is: Is it possible to encrypt this file or keep my passwords on an android mobilephone safe...? i know google and its a very suspect OS, but this is.. lousy.

redplate said:
Hi. i've just found today a file named "accounts.db" stored in /data/system. if i open this file i can see all accounts (names with password) i use on my mobile, like Email or HTC Acc. And they are all (excepted google's account) unencrypted.
so if you lost your mobile, be sure that guy can read your passwords for your email accounts.
My question is: Is it possible to encrypt this file or keep my passwords on a android mobilephone safe...? i know google and its an very suspect OS, but this is.. lousy.
Click to expand...
Click to collapse
http://www.androidcentral.com/android-passwords-rooted-clear-text
Only advice I can say is invest in a decent wrist strap, something like what comes with a Wii remote controller
GG Google!

thanks, good to hear its already known. And LOL, i will keep that in mind.. i need to buy a wii-controller now :O

Related

Question about Email forwarding

So I work for a Company and we use email pretty regularly to communicate.
I am a store manager and the company is really **** about letting us set up to recieve emails to our phones. We use Microsoft outlook and it is an intranet bassed email service (I cant email my store or other stores from an outside email, it has to be from a store location). I have tried to creat a rule to have them forwarded but they dont forward.
I figured this is were some of the greatest and able bodies are, anybody have a solution? I'm just trying to get the stores email forwarded to my gmail account so I dont miss stuff on my days off. Anybody have any ideas??
Hope this is the correct forum for this
Well if your using outlook at your store, why don't you create a new account in your pocket outlook with your account info. You can find all of it in your settings, then set it to recieve at certain times only.
OR
There is an option to forward an email to an account once recieved. I'm using Outlook '07 so my setup may be a bit different but most outlook versions should have the same options. If you still can't find the rule setup for it just let me know.
mrmikemcguire said:
So I work for a Company and we use email pretty regularly to communicate.
I am a store manager and the company is really **** about letting us set up to recieve emails to our phones. We use Microsoft outlook and it is an intranet bassed email service (I cant email my store or other stores from an outside email, it has to be from a store location). I have tried to creat a rule to have them forwarded but they dont forward.
I figured this is were some of the greatest and able bodies are, anybody have a solution? I'm just trying to get the stores email forwarded to my gmail account so I dont miss stuff on my days off. Anybody have any ideas??
Hope this is the correct forum for this
Click to expand...
Click to collapse
Well, there are a few things that come to mind.....
I am a District Manager for a restaurant chain so my first response is to say enjoy our time off
Second, I will probably sound like a jerk but there are reasons that companies limit email access to the physical location of a business, it is much more secure.
Knowing all of that, I personally forward all of my work mail to gmail and use the IMAP access so I do not have to remember if I have checked it or not. I generally get between 30-60 emails a day.
Your email may not be able to be forwarded due to how it is set up. I worked at a place where we did that and the email server we used would not allow an email from the units to be sent to any other domain other than our internal one.
My last thought it that if you are unable to find the email server settings on your own and set your email program on your phone up then you probably should not be messing with it. They are pretty easy to find but you do open your work network up to potential infection of malware or a virus. I know I would get pissed if one of my managers did something like that and caused us to have issues. Beware that they can and do track which IP addresses connect to the email server though.
-asb
Thanks guys,
I appreciate the help. I have put a rule in outlook to forward them to my gmail but it doesnt work.
Believe me, i understand the reason for limiting the location to the stores for email access. I do know that its definately possible because a couple area managers and my DM have it to their phone. I'm honestly not trying to deceitful, and I do enjoy my time off, but I have issues where i dont get important emails so i just wanted to forward them..
I didnt think about setting it up in the phone, i'm going to look into that. Where would i find the settings at in outlook? I know that I using it through my INTRANET and i use outlook through web access, so there isnt a "tools" tab that i can go into to get settings.
I'm going to play around with it.
Thanks again
Well.. some thoughts about the access...
If you you use web access then you know the server address already.
I would start off using the url as the pop3 access.
I'm replying from my phone but I will put up a mini guide later.
-asb
mrmikemcguire said:
Thanks guys,
I appreciate the help. I have put a rule in outlook to forward them to my gmail but it doesnt work.
Believe me, i understand the reason for limiting the location to the stores for email access. I do know that its definately possible because a couple area managers and my DM have it to their phone. I'm honestly not trying to deceitful, and I do enjoy my time off, but I have issues where i dont get important emails so i just wanted to forward them..
I didnt think about setting it up in the phone, i'm going to look into that. Where would i find the settings at in outlook? I know that I using it through my INTRANET and i use outlook through web access, so there isnt a "tools" tab that i can go into to get settings.
I'm going to play around with it.
Thanks again
Click to expand...
Click to collapse
Can you create and send a new email to the Gmail account you are trying to forward these messages to? If you cannot then you must first find out if your network is blocking Gmail or if it is a routing issue. If you can successfully send an email to the Gmail account then the problem is merely in the settings of outlook (insert any email client here).
Almost always the outlook application must remain running for the rules to be honored. Creating and managing rules can be tricky. Make sure there are no stop processing rules entries prior to the forward all email rule you created. Also make sure there is not a stop rule in the forwarding rule or any after it will fail as well.
Ok, you said that you use outlook web access to check your email in your location. I would take a look at the url in the address bar. That will most likely be your access point that you will use later.
If you are on an intranet though you might be out of luck.
For example, one company I worked for had things set up like this:
Intranet with everyone having an ip address of 10.10.10.***.
We had an internal DNS server to resolve our intranet based web site and our email server.
Our email server was 10.10.10.101
Our internal web server was 10.10.10.102
Now, for outside access, we had an external IP that was something like 12.225.125.188.
If you only access your email from on the intranet (not INTERNET) then you need to find out the external IP address. You might be able to get it from a higher up but most likely you will be shot down.
Now, for simplicity sake, how about either letting the people at your location check email and call you if something major is going on email wise or just call them a few times each day?
Without the magic numbers (external IP) you won't be able to get access no matter what you try. There is also the remote possibility that the higher ups with access on their phones are using blackberries and the service associated with that or a VPN solution to get on the work intranet.
With out physically looking at the numbers and the set up it would be hard to figure out all of the details so my post is just full of WAG (wild ass guesses).
Just to finish it up, think about this...
Deliberately trying to circumvent your networks protections even accessing email against your companies policies can put you in not only work related trouble but also legal trouble.
-asb
Appreciate the help. I figured if the process wasnt to intracate I would set it up. Appears that it's more trouble than what it's worth.

Deleting Google Mail email from Trash

Hi,
How can I delete an Google Mail email from the "Trash" label? I can put them in "Trash" using a long press however there is no option to delete when doing a long press on the mail once in "Trash".
The only way I can delete this is to log onto googlemail web interface and delete the mail from the "Bin" (I'm a UK user).
Cheers.
Anybody???
LavaChild0809 said:
Anybody???
Click to expand...
Click to collapse
From the webpage go to your settings and then to "LAB"... try using this "Advanced IMAP Controls".
--M
Thanks for the reply but no joy
Still, on the G1 I can long press in most labels and press delete which sends to Trash however long pressing on an item in the trash does not give any option to delete.
This behaviour is the same with and without that LAB package enabled.
Is there any other solution?
Cheers.
Anybody know if this is possible? It's a real pain having to delete emails from the Trash via the web interface, which is what I'm doing at the moment.
I'm considering that it might be as my GoogleMail account is a UK one and hence the folder is named "Bin" on the web interface. Is this confusion of names what is causing the G1 to not give me the option to delete emails from "Trash"? (Doubt this though, as it *does* put items into "Trash" when I delete on the phone and these can be seen in the "Bin" folder on the web interface).
Has anybody successfully deleted a GoogleMail email from the Trash/Bin using GMail app? If so, how?
Thanks.
Doesn't give me the option to delete things in the trash either.
I guess the only way to do it is from the web interface.
I'm pretty sure it cannot be done through the phone UI.
What is your goal?
I've been using gmail for a number of years now and I've never had a need to manually delete anything from the trash...
jzerocsk said:
I'm pretty sure it cannot be done through the phone UI.
What is your goal?
I've been using gmail for a number of years now and I've never had a need to manually delete anything from the trash...
Click to expand...
Click to collapse
Minor OCD I think - When I delete something I want it *gone*... Not a biggie I guess.

company directory

The manila contacts is having company directory listing option.
But, it is greyed out
Do anyone know how to enable it?
This is an option that allows you to get contact information directly from your corporate Exchange server. You need an over-the-air Exchange sync account set up if you want to use this feature (not that you need it without such an account in the first place).
vangrieg said:
This is an option that allows you to get contact information directly from your corporate Exchange server. You need an over-the-air Exchange sync account set up if you want to use this feature (not that you need it without such an account in the first place).
Click to expand...
Click to collapse
Oh
Thanks.
I have to continue with the windows contacts then.
The Company Directory feature worked fine on my TD2 but on my HD2 it's greyed out, and I never used Exchange on either of them.
The Company Directory feature simply groups your contacts by Company Name - you don't need Exchange for that.
me 2
I'm having the same problem, although I CAN access the company directory if I turn off Sense and go to the stock Windows phone interface. Then when I go back to sense, it's grayed out. Does anyone know anything about this?
davsug said:
I'm having the same problem, although I CAN access the company directory if I turn off Sense and go to the stock Windows phone interface. Then when I go back to sense, it's grayed out. Does anyone know anything about this?
Click to expand...
Click to collapse
bump...anyone else seeing this problem when connected to an Exchange server and using Sense?

[Q] Which application allows to sync files with cloud?

Hello,
Dropbox and other synchronisation services are actually not running in background and don't think folders. You have to manually download/upload files. Anybody knows application which will automatically synchronise local Android folder with cloud?
artisticcheese said:
Hello,
Dropbox and other synchronisation services are actually not running in background and don't think folders. You have to manually download/upload files. Anybody knows application which will automatically synchronise local Android folder with cloud?
Click to expand...
Click to collapse
http://forum.xda-developers.com/showthread.php?t=886445
Smestorage is another app.
However none works perfect yet...
But i am sure one day
I wouldn't mind writing such a beast, however I see one problem that users could complain about.
I have a hosted site with probably enough data storage (or I can add more). Thing is, I HAVE TO create the database and the tables within it. That means I have Admin authority which means I can see everything.
Now, I am not the person that would do such a thing and would even sign some type of non-disclosure document. But, are people going to upload their pictures, files, documents etc. knowing that I have access?
Rootstonian said:
I wouldn't mind writing such a beast, however I see one problem that users could complain about.
I have a hosted site with probably enough data storage (or I can add more). Thing is, I HAVE TO create the database and the tables within it. That means I have Admin authority which means I can see everything.
Now, I am not the person that would do such a thing and would even sign some type of non-disclosure document. But, are people going to upload their pictures, files, documents etc. knowing that I have access?
Click to expand...
Click to collapse
I think people would prefer an interface to existing clouds rather than to have you host your own.
Yeah, agreed. However, any site of this type you go to, SOMEONE has access to your data...that's just the nature of the beast. And a reason I don't use ANY online service of that type.
Hell, Dropbox could be run by one person for all I know.

[GUIDE] Using KeePass and Dropbox to manage passwords

I had a situation where a friend's PASSWORD (singular) was hacked. He lost control of his email accounts, facebook, and several other things (luckily not his bank accounts). I wanted to share with you all, in case it is helpful for someone out there, how I manage my passwords in a secure way.
I use KeePass and Dropbox to manage my passwords.
I chose to do it this was because 1) Its free 2) I get multi-platform support 3) I control the encryption without having any other outside company holding the 'key' to my encryption [I'm not that paranoid, but it is an additional benefit worth noting].
I have a KeePass database (my 'password vault' as I call it) with a very strong password. I then have that database file on Dropbox (and in fact, I have the entire KeePass application in Dropbox as well as a Portable app so I can have my configuration settings, etc. synced as well.) This covers syncing my passwords in a secure and encrypted way to my PCs.
Then, I use KeePassDroid on my Android devices. I use DropSync (which acts like the 2-way syncing of the desktop Dropbox app) to sync the 'password vault' to my device. Whenever I update a password and save the password database, it then gets synced to my other PCs and my Android devices. The database is there but encrypted so I just have to enter my strong password each time I need one and then I get access to all of my passwords. On some of my devices that I don't use as regularly for things where I'll need passwords, I just use the Dropbox app to open the password database on an as-needed basis.
One of the nice features of KeePass, which I'm pretty sure some of the others have as well, is the ability to generate a random password for me. I can specify how 'complex' I want it to be, etc and it makes it for me. This way I don't ever have to remember my password and it makes it nearly impossible to guess what the password actually is.
You can also accomplish basically the same setup using Google Drive or Copy.com.
There are other companies out there, like LastPass, mSecure, etc, which offer great products as well (some of which cost money though). This is simply the route I chose to go. Like I said - a little more complex to get set up, but I'm very happy with the setup now that I've done the initial legwork.
The point of all of this is though - KEEP YOURSELF SAFE! Have STRONG passwords and NEVER, NEVER, NEVER use the SAME password for multiple things!
I use the same setup and it works perfectly. Using keys, Oauth and Keepass where possible/appropriate sure simplifies and secures the daily life.
A bit in the wrong forum (it doesn't really have anything to do with this device) though.
Can use keepass2android and skip the dropsync step.
kodochax said:
Can use keepass2android and skip the dropsync step.
Click to expand...
Click to collapse
Exactly. This is what I've been using for a long time, works perfectly and has built-in Dropbox support.
Stopped reading after the first Dropbox... Nice gift for the US government!
Astagar said:
Stopped reading after the first Dropbox... Nice gift for the US government!
Click to expand...
Click to collapse
1. I think they will find you out anyway, using Android, iPhone or any hardware, 2. It's pretty well encrypted just use a good key ?
Good guide. I wish guides like these weren't buried in device specific forums though. this is a general technique that any user can use and deserves more visibility.

Categories

Resources