Plaintext username and password in Android LDS Tools

1 poststarted by jcdjcd2 1,479 viewsoriginal topic

New Member
#1
The username and password cache used to authenticate to the Church servers is in plaintext. This is a rather poor security decision. Please consider updating the app to obfuscate the password appropriately.

The file in question is /data/data/org.lds.ldstools/shared_prefs/org.lds.ldstools_preferences.xml