Plaintext username and password in Android LDS Tools

Discussions around the Android version of the LDS Tools application
jcdjcd2
New Member
Posts: 1
Joined: Wed May 25, 2011 12:50 pm

Plaintext username and password in Android LDS Tools

Postby jcdjcd2 » Wed May 25, 2011 12:55 pm

The username and password cache used to authenticate to the Church servers is in plaintext. This is a rather poor security decision. Please consider updating the app to obfuscate the password appropriately.

The file in question is /data/data/org.lds.ldstools/shared_prefs/org.lds.ldstools_preferences.xml

Return to “Android LDS Tools”

Who is online

Users browsing this forum: No registered users and 1 guest