News for hackers. Stuff that matters.

A comment on Android account passwords are stored on disk in plain text. Parent comment

Re:Android account passwords are stored on disk in plain text by chopsueyar on Friday July 22, 2011 @08:51PM (#2795769)
Is that a Catch-22?
[ Parent | on HN ]
Re:Android account passwords are stored on disk in plain text by darklajid on Saturday July 23, 2011 @07:15AM (#2796714)
No, because

- the password you store on the phone (in cleartext) is not the real account password, it's a string for this device only and you can revoke access at any time

- Someone should not be able to use your phone (via call/text message) as unlock device, unless you lost it

- In that case you should lock the SIM for for a multitude of reasons anyway - and you'll get a new SIM that you can use to recover your account

I think the first one is the most important though: You just don't have to store your real password.

[ Parent | on HN ]