Thursday, July 28, 2011

Protection of passwords on Android

One expert warns that Google's system violates the law to save some keys in plain text .- The company responds that the data access is protected by the system

Check email from your mobile phone is becoming more common. And normal, as in other devices, save your password so not having to keep writing. A simple operation and yet transcendent, because that keeps key post everything from greetings to friends to professional tasks or data purchases. Are you sure? While the question is increasingly appellant, the answer is complicated. The latest controversy about the stars in Android .

Google's operating system stores some key mobile email in plain text, normal, similar to writing a notebook, creating safety concerns and, in some countries, law. This is the case of Spain, whose rules require that passwords be stored in an "incomprehensible." According to Samuel Parra, an expert on data protection in the network and partner ePrivacidad , keys should be encrypted to comply with the law. Google responds that the system is secure because only the "administrator" of the phone can get that data, and that "in any case," access "Android is protected."

The company details are stored only in plain text passwords for mail services that use POP3, IMAP, SMTP, and Exchange ActiveSync, because they require each connection that indicated the password in this format. They are older protocols (modern ones have solved the introduction of the key to a more secure), but common. Google also stresses that it is an issue that affects all kinds of mobile devices-not exclusively, and operating systems, not just Android, although the latter can encrypt or transform the keys.

The Spanish Agency for Data Protection has opened a "preliminary analysis" of information on this topic, check it for signs of violation of Spanish law. The agency declines, for now, rating the performance of Google, hoping to collect all data on it.

No comments:

Post a Comment