News for hackers. Stuff that matters.
Re:Android saves wifi passwords in plaintext to the cloud by mikhailt on Wednesday July 17, 2013 @08:50AM (#6057322)
Convenience isn't an excuse to not encrypt security data, it does not matter if it is a limited to a few areas where it could be exploited. If Google (any companies, including Apple) can not be trusted to protect such information, they should not be offering it in the first place.

If it can be exploited, it should be protected as much as it can be.

We all saw what happened with Google's StreetView cars capturing the local Wi-Fi traffic. The same thing could be used by somebody hacking into Google's servers, downloading the Wi-Fi passwords and any possible maps data if possible and workaround getting into people's Wi-Fi networks. If it is not likely but it is not impossible.

Re:Android saves wifi passwords in plaintext to the cloud by Kurts on Wednesday July 17, 2013 @09:06AM (#6057403)
It's more than "unlikely", it's ridiculous. It's the longest way around and possibly the stupidest route to get onto someone's Wifi network.
Re:Android saves wifi passwords in plaintext to the cloud by kryptiskt on Wednesday July 17, 2013 @11:23AM (#6058166)
It's a stupid way to get into a specific network, but it's a pretty convenient way to get access to everybody's networks. Sure, it would be hard to hack Google, but the prize for doing so would be pretty nice. And if the systems are impregnable, there are always ways in that relies on the human factor. Humans can be bribed and/or threatened.

Or if you're law enforcement, the knowledge of the existence of the resource is enough.

Re:Android saves wifi passwords in plaintext to the cloud by pbsdp on Wednesday July 17, 2013 @10:21AM (#6057764)
Really? Google has the knowledge of where the network is, who has access to it, and what the password is. Remember also that WiFi networks are a shared resource and often provide access to internal corporate data.

From a governmental law enforcement perspective, that's an incredibly valuable trove of data. Instant network backdoors, likely with no physical entry required.

Even if you're not using the data to sniff networks, you can use it to build detailed relationship graphs between people and places.