Clipboard storing/recording data (including password) - Galaxy S III General (US Carriers)

All,
I have discovered an issue with the S3 Rom storing information (including copied passwords) from the clipboard. If you look in the /data/clipboard folder, you will see a bunch of folders. Each each of those folders is a file which stores data you have copied to the clipboard. Note: I use lastpass as my password safe and I was shocked when I saw passwords in clear text. The only way I have found to remove this information is to remove the contents of the data/clipboard folder (keep the folder there).
I would highly suggest everyone review this on their phone immediately and ensure none of your passwords are being stored there. I have already reported this issue to lastpass and hope that they can address it on their side (if at all possible).

History eraser will delete clipboard
Sent from my SPH-L710 using xda premium

jbadboy2007 said:
History eraser will delete clipboard
Sent from my SPH-L710 using xda premium
Click to expand...
Click to collapse
This for the info, but to me this doesn't solve the problem. The history should never be retained. My HTC Incredible never did this.

Related

[Q] email app of samsung

hi all,
I can't seem to be able to use this app properly, especially for my hotmail... and we can't remove accounts, can we? HAHA.
it's like my hotmail reads 143/258, but i can't see the 143 new emails!
i keep getting stuck at end of july. I tried deleting some emails to see if it is a space limitation problem, but to no avail...
any idea anyone? or anyone has a better windows live hotmail app?
Bump.. And I can't view my junk folder from this app.
Sent from my GT-I9000 using XDA App
to enable junk or other folders, hit settings and chedck what folders you want from the folders tab
Sorry but I don't seem To see that folder settings anywhere? I only see account settings.
Sent from my GT-I9000 using XDA App

Folder / bookmarks

I am coming from an iPhone. I loved that you could organize the bookmarks in different folders. Is their a way to do that on the evo. And I would like to know is their a way to password protect a folder on main screen. And or put multiple folders in folders ?
Sent from my PC36100 using XDA App

Gmail and MS office attachments

My gmail has stopped opening attachments generated by office suite. When I click the attachment it kind like tries to open it but then comes back to the email.
Anyone else having this issue?
Sent from my PG06100 using XDA App
Did you remove quickoffice app? It's a stock app that some consider bloatware but opens MS office docs (Some roms remove it or move it to /data/app)
No, I still have it. Pdf and pictures work, just the office docs.
Sent from my PG06100 using XDA App
pdf and pictures open in different apps than office docs. It's friendly a quick office issue. Find it in settings/applications and clear data
Sent from my PG06100 using XDA App
Thanks, I tried but still nothing. It flashes for a second and then goes back to the email.
One way around it I figured was opening gmail in my browser and downloading the attachment that way. Not the most efficient but gets it done.
Thanks again.
Sent from my PG06100 using XDA App
aisseleacim03 said:
Thanks, I tried but still nothing. It flashes for a second and then goes back to the email.
One way around it I figured was opening gmail in my browser and downloading the attachment that way. Not the most efficient but gets it done.
Thanks again.
Sent from my PG06100 using XDA App
Click to expand...
Click to collapse
Silly question, but have you tried restarting the phone since you first saw this problem manifest itself?
Nu
Just to be sure, I just cleared the data and rebooted my phone. Still the same issue, flashes a blank screen for a second and then back to the email view.
Sent from my PG06100 using XDA App
What if you use something like "download all files" or "download crutch" to grab it from the email and save it, then open it up with your desired program? Yeah it is an extra step but it might work. Never tried it myself.
Are these apps in the market? I will give it a shot.
Sent from my PG06100 using XDA App
I have noticed this issue as well but it was only for .rtf files, I am not sure what files you are trying to open but the Gmail app does not seem to like those. I typically open up .xls/x in HTML format.

Android Password Vulnerability

So I was bored today and started digging around and happen to find something that is particularly disturbing IMO. Most settings for apps and system are stored in databases of course. Not going to name which particular files contain this but the passwords for pretty much all my accounts and various things are stored in plain text. With that said one could easily create script to drop on someone phone and pull all of their user names and passwords. This is a huge security flaw that could expose everyone's account information easily. Does anyone know if there is way we can get this information encrypted?
Sent from my MB860 using XDA Premium App
playin4sheezy said:
So I was bored today and started digging around and happen to find something that is particularly disturbing IMO. Most settings for apps and system are stored in databases of course. Not going to name which particular files contain this but the passwords for pretty much all my accounts and various things are stored in plain text. With that said one could easily create script to drop on someone phone and pull all of their user names and passwords. This is a huge security flaw that could expose everyone's account information easily. Does anyone know if there is way we can get this information encrypted?
Sent from my MB860 using XDA Premium App
Click to expand...
Click to collapse
1) If you're out and about set a password
2) With the password set, turn off usb debuging
I'm confused. Please elaborate
Sent from my MB860 using XDA Premium App
Bravo: i think what he's trying to say is that if someone somehow made an app that also for some strange reason had access to that file... anyone installing that app would basically be voluntarily handing out their account details.
Wouldnt this be more of a MotoBlur issue? Since MotoBlur is the one that handles all that Facebook, Twitter, Myspace, Picasa, Photobucket, Email Accounts. I mean it is build into the phones custom UI.
Ok I must confirmed that also aosp email app does the same thing. I froze blur email and loaded gingerbread email and out shows the login info for my gmail and work exchange account
Sent from my MB860 using XDA Premium App
well to be honest you need root to get this files, and yes use sqlite in market version and you can see ALL apps and password , you can even edit it so maybe i will worry when you can have access to this without root. this isnt new, even you can check wpa_suplicant and check wifi password if you dont remember

Multiuser: anyone knows how to change game data from one user to another one?

Hi all
After updated to 4.2 I created new user for my wife.
"Installed" same games but they are 'new' for new user.
I want to copy data games files from my user to her user.
Anyone knows how to do it?
Need to be root?
Thanks
Sent from my Nexus 7 using xda app-developers app
Assuming they are free games, as paid ones will need to be purchased twice. You can use titanium backup to back them up on your account and then restore them into her account. You do need to be root for titanium though.
Sent from my Nexus 7 using Tapatalk 2
dr.m0x said:
Assuming they are free games, as paid ones will need to be purchased twice. You can use titanium backup to back them up on your account and then restore them into her account. You do need to be root for titanium though.
Sent from my Nexus 7 using Tapatalk 2
Click to expand...
Click to collapse
Sorry - misinformation.
Paid apps do not need to be purchased twice, or restored into her user ID. That would be a really bad idea anyway - you would have two copies of the app.
With root use file explorer to find your save file under /sdcard/o/...something. Copy that file to an identical file structure under /sdcard/1, or whatever number your second user uses.
Apps done the correct way for multi-user never download a second copy. The Play store just sets a link to them in the main user.
Assuming app is available to both:
adb backup/restore might work for unrooted. Me, I'd Titanium Backup if it was important.
On a slight tangent, is there a shared data area that I could put shared files and videos that each user account would be able to view? If so do I need root access? Thanks.
bertracoon said:
On a slight tangent, is there a shared data area that I could put shared files and videos that each user account would be able to view? If so do I need root access? Thanks.
Click to expand...
Click to collapse
Don't forget a shared data area would mean the contents, like high scores, are shared between the users.
Most of the time, different users will want their own customizable data.
Technically, you need to purchase the app twice for two different account under playstore, that's the whole purpose of multiuser right?
Sent from my Nexus 7 using xda premium
Leechoonhwee said:
Technically, you need to purchase the app twice for two different account under playstore, that's the whole purpose of multiuser right?
Sent from my Nexus 7 using xda premium
Click to expand...
Click to collapse
Multi-user is not a developer enrichment scheme.
Your tablet has one owner, and apps are sold to that owner on an account basis - not by user or device ID.
The owner is able to make them available to any other users of that tablet without repurchase.
I suppose you would want an eye sensor, to make sure the person using the app is the one that paid for it?
No need to pay twice.just install twice.
Seems I need root.
I used some file explorer, find this:
/storage/emulated
/storage/sdcard0
/sdcard
All seems point to the same folders.
No sdcard1.
More than this, can't find data game. I have to explain that I have free games (from play store) and paid games (humble pack). If I search imaginarium game with Astro, no resulta found -.-'
Pd: No root at this moment, original 4.2 room
Sent from my Nexus 7 using xda app-developers app
Sorry - misinformation.
Paid apps do not need to be purchased twice, or restored into her user ID. That would be a really bad idea anyway - you would have two copies of the app.
Click to expand...
Click to collapse
Can you clarify this, apps are linked to the gmail account they were purchased with no? I haven't tried multiuser yet but I thought I read from others you have to add the primary gmail account to any secondary account to access the bought apps. Is this not correct? And if it is correct, can one add it only to google play and not have a secondary account access the associated email?
sark666 said:
Can you clarify this, apps are linked to the gmail account they were purchased with no? I haven't tried multiuser yet but I thought I read from others you have to add the primary gmail account to any secondary account to access the bought apps. Is this not correct? And if it is correct, can one add it only to google play and not have a secondary account access the associated email?
Click to expand...
Click to collapse
Set up a secondary user. Secondary user needs a Google account. Create a new one if appropriate.
Open Google Play on the secondary user. Click Options, then Add Account. Add your primary account (the one that owns your apps).
You will be given a choice of items to synch - uncheck them all. All you want is app access.
Display your apps (they are now visible to you). Install the ones you want the secondary user to have. They will NOT download - this user just gets a link.
When done, you can delete the main account from this user - or just leave it
I am going to start cutting and pasting this description - I keep having to retype it...
rmm200 said:
Don't forget a shared data area would mean the contents, like high scores, are shared between the users.
Most of the time, different users will want their own customizable data.
Click to expand...
Click to collapse
I appreciate that, I was just wondering whether there was a shared folder everyone could access as well as completely private areas for each user. Sounds as though there is absolutely no difference between multi user and having two completely separate tablets.
Well... Biggest difference is that only one copy of the app is shared by all the users.
Sent from my Nexus 7 using xda app-developers app
When done, you can delete the main account from this user - or just leave it
Click to expand...
Click to collapse
Thanks, but one more thing. If I leave it in google play do they have access to the associated gmail? I would prefer to just leave it for future apps and add a password for google wallet so they can't purchase things. Hmm, I guess though they can uninstall things that I wouldn't want uninstalled. I"m thinking of a kid mucking about where he shouldn't.
sark666 said:
Thanks, but one more thing. If I leave it in google play do they have access to the associated gmail? I would prefer to just leave it for future apps and add a password for google wallet so they can't purchase things. Hmm, I guess though they can uninstall things that I wouldn't want uninstalled. I"m thinking of a kid mucking about where he shouldn't.
Click to expand...
Click to collapse
You could try an 'app lock' app. i've tried 'app lock' on the play store which allows you to pin protect stuff like settings and install/uninstall and other apps - although couldn't lock gmail or certain system apps. But it should work for the play store. Maybe there are similar apps that allow you protect gmail.
rmm200 said:
They will NOT download - this user just gets a link.
Click to expand...
Click to collapse
Is it possible to move apps and its data from one user to another? To to so can I just uninstall app from first user? After that will this app and its data still be available for new user?
rmm200 said:
Set up a secondary user. Secondary user needs a Google account. Create a new one if appropriate.
Open Google Play on the secondary user. Click Options, then Add Account. Add your primary account (the one that owns your apps).
You will be given a choice of items to synch - uncheck them all. All you want is app access.
Display your apps (they are now visible to you). Install the ones you want the secondary user to have. They will NOT download - this user just gets a link.
When done, you can delete the main account from this user - or just leave it
I am going to start cutting and pasting this description - I keep having to retype it...
Click to expand...
Click to collapse
I tried to follow these instructions but a) I didn't get the sync message b) Play store doesn't display my bought apps in one place so it's not easy to find them and c) I have the feeling that it really double installs (I was hoping for a link).

Categories

Resources