PSA: XFINITY App Exposes Your Comcast Username & Password In System Log

Before you panic, you should know that this isn’t a huge deal, and Comcast is aware of the situation and has promised a fix "within a week or two." There, feel better? Good, because if you use the XFINITY app, any other app that has permission to read logs can read your Comcast username and password (aLogCat, for example).

The details, courtesy of aBSuRDiST, who discovered the issue:

My system log shows <userName>MYUSERNAME@comcast.net</userName> and <password>MYPASSWORD</password> on a line that starts with "D/HTTPManager". I read the log using aLogcat (app available in the market). Open aLogcat, press menu and filter

...

Official Android Police t-shirts are now on sale, with over 25 designs to call yours. Discount coupons also available.

Done With This Post? You Might Also Like These:

• [Quick Hands-On] Comcast Xfinity App Now Live In The Android Market
• Twitter Changes Login System, Catches HTC Off Guard (Despite An 8 Month Heads-Up)
• Comcast: Streaming Of Live And On-Demand Content Coming To Android Tablets Later This Year
• Webkey For Android: Take Full Control Of Your Android Device Using A Web Interface From Your Computer
• SysAdmin Series, Article #3: Nagios Monitoring

PSA: XFINITY App Exposes Your Comcast Username & Password In System Log was written by the awesome team at Android Police.

Android Developer Phone android phone list Android Forum android news Source: tmobile android phones 2010 Related News android permission

Source: http://feedproxy.google.com/~r/AndroidPolice/~3/UmfwEmDxLb8/