Plaintext username and password in Android LDS Tools

Discussions around the Android version of the Member Tools application
Post Reply
jcdjcd2
New Member
Posts: 1
Joined: Wed May 25, 2011 1:50 pm

Plaintext username and password in Android LDS Tools

#1

Post by jcdjcd2 »

The username and password cache used to authenticate to the Church servers is in plaintext. This is a rather poor security decision. Please consider updating the app to obfuscate the password appropriately.

The file in question is /data/data/org.lds.ldstools/shared_prefs/org.lds.ldstools_preferences.xml
Top
Post Reply

Return to “Android Member Tools App”