ViaForensics: 10 pct of iOS, Android apps store clear text passwords

ViaForensis app data (Aug 2011)

Almost everyone with a smartphone knows there’s some risk to carrying around apps that handle passwords, email, photos, personal info, and access to financial information on a device that you can easily leave unattended on a desk or sitting on a counter in a coffee shop. But just how many apps put users at risk? According to Chicago-based digital forensics company ViaForensics, a lot: their new Mobile App Security study finds that a full 10 percent of Android and iOS apps tested store passwords as clear text, completely unprotected if anyone should get ahold of a device. Furthermore, some 76 percent of apps tested store usernames in plain text—and while usernames might not seem terribly important to secure, sometimes they’re just the info a criminal or stalker needs to get to more-important info.

“Based on the results of this study, there is a serious potential threat for identity or financial theft if a lost smartphone should fall into the wrong hands,” ViaForensics wrote. “For instance, if a cybercriminal is able to steal one password, coupled with all of the usernames recovered, would pose a serious threat for someone who uses the same password on many accounts.”

ViaForensics rated apps on a three-stage Pass-Warn-Fail system. A “Pass” rating meant that the company couldn’t find sensitive data it was looking for, or if the data was successfully encrypted. ViaForensics gate an app a “Warn” rating if they were able to uncover data but didn’t believe the exposed information put the user at significant risk, while a “Fail” rating meant ViaForensics was able to pull information like passwords and accounts numbers.

Of the 100 apps tested, 39 received a failing grade. Some 44 apps rated a warning, and only 17 got a “pass” rating.

Broken down by category, some 32 financial applications faired relatively well, with 14 passing and 10 receiving a warning: that means eight failed, including Mint for iPhone and Android, along with Wikiinvest and Square for the iPhone. Social networking apps, however, failed miserably, with none receiving a passing mark and a stunning 14 out of 19 failing. Retail apps also faired badly: of 14 apps tested, none passed, 12 for a warning, and 2 failed.

Overall, ViaForensics noted Apple made significant headway with iOS security with iOS 4.0, but notes that iOS users can’t afford to sit back and ignore potential risks from apps.

ViaForensics’ ratings for individual apps are available via their appWatchdog site.


Despite serious security flaws, D-Link will (again) not patch some routers

D-Link revealed that it won't patch six router models despite warnings raised by a security researcher. The manufacturer, for the second time in a span of about a year, cited end-of-life policies for its decision to not act.

Ryzen shine! AMD’s next CPUs could beat Intel at gaming in 2019

AMD's upcoming Zen 2-based Ryzen 3000 CPUs could offer as much as a 13-percent increase in instruction per clock. With clock speed or core count increases, that could gave them a huge performance boost.
Social Media

Over selfies and an onslaught of ads? Here's how delete your Instagram account

Despite its outstanding popularity and photo-sharing dominance, Instagram isn't for everyone. Thankfully, deleting your account is as easy as logging into the site and clicking a few buttons. Here's what you need to do.

Goodbye, Essential? Android creator’s startup cuts nearly a third of its staff

Essential has cut as much as 30 percent of its workforce, suggesting that it may be in more trouble than previously thought. The news comes a few months after the company reportedly canceled a follow-up to the Essential Phone.

Master your new LG phone with these V40 ThinQ tips and tricks

With five cameras and awesome specs, the LG V40 ThinQ is one of the most innovative phones of 2018. While the V40 can get a great shot in any scenario, it's capable of so much more. Here are a few of our favorite tips and tricks.

The Xbox app lets you access your console while away from home. Here's how

Microsoft's Xbox app can't do it all, but it does allow you to access your profile information and launch media content directly from your mobile device. Check out our quick guide on how to connect your smartphone to an Xbox One.
Product Review

It's got game. But the Razer Phone 2 is still crippled by its camera

The Razer Phone 2 will impress with its gaming prowess and 120Hz screen. But if you care at all about taking pictures on your phone, skip it. While Razer has improved the camera, it’s still short of the competition.

Find out how to keep tabs on your phone with these helpful tracking tips

Need to keep tabs on the location of your cell phone or smartphone? Consult this guide for tips and tricks on how to track a phone, whether you're currently rocking Android, iOS, or something more old-school.

Google’s new floating keyboard is so helpful, it’ll put you on cloud nine

Bezel-less smartphones look great, but typing isn't always so good, as grip can be more of a challenge. That's where Google's Gboard keyboard comes into play. It now has a floating keyboard feature to help out.

Insane 5G Xiaomi Mi Mix 3 boasts a retro slide-up camera

Xiaomi will announce the Mi Mix 3 smartphone on October 25, and according to the company's spokesperson, it will be capable of connecting at 5G speeds and feature 10GB of RAM -- two world firsts.

Declutter your life with our favorite wireless chargers for Android and iPhones

We checked out the best wireless phone chargers to make tangles and uncooperative ports a thing of the past. Whether you have an iPhone or Android, find out which wireless charging pads are worth buying, and how their features compare.

Save up to $900 with the best smartphone deals for October 2018

Need a better phone but don't want to spend a fortune? It's never a bad time to score a new smartphone and save some cash. We rounded up the best smartphone deals available that can save you as much as $900.

Huawei confirms it won't be selling the Mate 20 series in the U.S.

Huawei has released the Mate 20, Mate 20 Pro, and Mate 20 X. With all-new Kirin processors, advanced A.I. brains, and an amazing triple camera, here's absolutely everything you need to know about the new Mate 20 series.

eBay’s new Instant Selling program turns old smartphones into new money

With eBay's new Instant Selling program, selling your smartphone just got easier. Immediately after listing your device, you'll receive a voucher that can be used toward the purchase of a new phone through the site.