Rooting Leaves Passwords Vulnerable?

[LBPHeretic]

I regularly visit many Android news websites and I came across this article today: Security bulletin for rooted users: Android passwords stored as clear text | Android Central .

It sort of has me a bit worried about rooting now because my passwords technically would be out in the open. I created this thread to get the reactions of people who have already rooted their handsets.

 

[Kelmar]

I just saw this over in the Inc section.

Personally, I'm not worried about it. It IS a legitimate concern/issue IMO. Just be very careful to 1) not lose your phone to a hacker and 2) be careful about what root apps you install.

 

[JD_from_da_80s]

What are the chances of a hacker finding your phone (Then again everybody in this forum are now hackers )

And if y'all haven't already, get Mobile Defender so if you do lose your phone you can wipe it remotely. I think it beta is closed now, don't know if there are other services like it either but I'm sure there is.

 

[andygu3]

What are the chances of a hacker finding your phone (Then again everybody in this forum are now hackers )

And if y'all haven't already, get Mobile Defender so if you do lose your phone you can wipe it remotely. I think it beta is closed now, don't know if there are other services like it either but I'm sure there is.

Lookout does the same

 

[LBPHeretic]

2) be careful about what root apps you install.

So, what should I be on the look out for then? I guess what I mean is, what would be a telltale sign of a suspicious root app? My guess is that a person who was looking to harvest passwords probably would not advertise that was their ulterior motive when discussing the app in a description or something. I just want my information to be safe and I am not trying to be an alarmist here.

I almost wish I had never read that article because now I am really questioning whether I want to root my Sprint HTC Hero at all. The community here has taught me so much and I was so excited about the possibilities and now I am sort of glad that I waited a little longer. I am not asking people to convince me into rooting my handset. I just want to take the proper precautions if I do end up taking the plunge, despite the knowledge I now have about these vulnerable passwords.

 

[Kelmar]

Stick to the basics, shoot me, root explorer, wifi tether... Just because it's a root app doesn't mean you should instantly DL it. Also, ALWAYS read what the app wants to access.

When in doubt, ask us!

 

[LBPHeretic]

Also, ALWAYS read what the app wants to access.

I appreciate your insight, Kelmar. Thank you.

Yeah, I would not just download a root app randomly and not at least examine what access privileges it was looking for. Speaking of access privileges, what exactly would seem suspicious in terms of what the app is asking to access? Would it be something like access rights to email or contacts? Sorry, I am not trying to sound dumb here as I have actually worked with computers since I was very young and it is actually my profession so I am not new to the terminology or anything. I was just wondering what type of access privileges should set off an alert in my mind if I saw it?