Database Info

[WARNING-Update:Solved] Xfinity Mobile (Comcast) exposes password in system log

This post is regarding the Xfinity Mobile app: https://market.android.com/details?id=net.comcast.ottclient
My system log shows <userName>[email protected]</userName> and <password>MYPASSWORD</password> on a line that starts with "D/HTTPManager". I read the log using aLogcat (app available in the market). Open aLogcat, press menu and filter for "password". After I clear my log (using aLogcat) that line reappears even when I haven't used the Xfinity app. I don't use my comcast credentials in any other app.
To try and resolve this I cleared data and cache for the Xfinity app, then cleared the system log in aLogcat, and restarted the phone for good measure. I opened the Xfinity app, logged in without checking "remember me" and unfortunately my username and password immediately reappeared in the system log.
I posted this issue here: http://forums.comcast.net/t5/Mobile-Apps-and-Web/Password-revealed-in-android-system-log/td-p/872295. A Comcast employee responded to say they will investigate this issue and fix it within a few weeks. In the mean time, you may want to uninstall the Xfinity Mobile app and change your Comcast password, or at least do not share your system log with anyone (in bug reports for example) if you have Xfinity Mobile installed.
This may not be the only app that exposes sensitive information in the system log, but this is the only password I have found exposed.
I have a Motorola Droid running stock Android 2.2.
UPDATE - As squiddy20 pointed out, Comcast has updated their app to 2.0.2. They include instructions to clear the app data as part of the upgrade, but that may be unrelated to this issue. In any case, I cleared the app data and installed the update, and my credentials no longer show up in the log. As far as I can tell, they have completely resolved this issue. If the problem persists for anyone else, be sure to post that here and on the Comcast forum.

Wow Comcast.
Thanks for the heads up

I checked this out for myself and the only way I could get it to show up was by logging out and then back in. I then did a reboot, let it sit for well over 5 minutes after it was fully booted, and then tried it and still no entry under "password". I dont get any of the sporadic, random popups you seem to have gotten. Oddly though, I have it set to not login automatically, yet after the reboot, it took me right to my email messages without me actually typing in my login info. That in itself is room for concern, let alone the possibility that login info is contained in the logcat in plain text.
Samsung Moment 2.1 running TiX 1.6 rom.

Interesting I to have the same issue squiddy20. Very concerning not a good thing Comcast

I was not able to see my password
I use an EVO with 2.3 and checked the same on my logs after logging in .. and only saw my username the password was nowhere to be found. I guess it would only happen when you first try to login.

squiddy20 said:
I checked this out for myself and the only way I could get it to show up was by logging out and then back in. I then did a reboot, let it sit for well over 5 minutes after it was fully booted, and then tried it and still no entry under "password". I dont get any of the sporadic, random popups you seem to have gotten. Oddly though, I have it set to not login automatically, yet after the reboot, it took me right to my email messages without me actually typing in my login info. That in itself is room for concern, let alone the possibility that login info is contained in the logcat in plain text.
Samsung Moment 2.1 running TiX 1.6 rom.
Click to expand...
Click to collapse
Now that I have unchecked "remember me" my credentials only show up in my log when I log out and back in. Not sporadic any more.
Check your Xfinity Mobile -> Settings -> Log Out setting. If it is set to "Never", then you wouldn't have to log in again after a reboot. If it is set to "On Exit" then you should have to log in again after exiting the app or after a reboot... but that may be buggy.

Thanks for the tip, but I honestly don't access my email through the app very much. To me, less things logged into and running in the background, means more memory for other things and slightly more battery life.
Also slightly less security problems!

Well, they've updated the app and I assume they've fixed the logcat problem (haven't checked for myself yet). They do have a note: "This Update will require you to log in to the application" plus the usual updates, improvements, and fixes.
Edit: just ran 2 checks with aLogcat and can confirm that the username and password info does not show up when searching for keyword "password". On a slight side note, I've noticed that hitting the home button on my Samsung Moment exits the app, but doesn't sign out. While hitting the back button from the main screen exits the app AND signs out. Settings also seem to be staying the same, even after reboots. Mine would reset occasionally, turning notifications on and other things.

I have had some concerns as well. I have lost most of my channels in the TV listings area. It goes from 2-29 and then 75-99 but that is it. I have uninstalled and reinstalled the app several times, cleared data in applications, etc. As I reinstall the app, it is going right into my system without asking for a password which I find a bit alarming.
I assume that the program has reverted to a selection that is not the full digital programming which shows up when you first do an initial install. I cannot find a way to get back to that area to reset my configuration and add all my channels back. I have emailed Comcast and those idiots responded that they do not have an app that works with Android yet, only iPads and iPhones. Quite comical.
Any help would be greatly appreciated.

I have tried all of the methods mentioned above and when I log in using username and password, and filter alogcat only my username appears in the log. Also tried brief and long settings in alogcat preferences.
Edit: This is using the 2.0.2 version.

Hi Squiddy ,
Pressing the backbutton will exit the app and pressing the home screen actually puts the app in the background so that at later point of time we can launch the app from the page where we left .
I dont think this is an Issue.

Hi Dawgman25,
There is a settings for the program area where you can change the zipcode of yours and select the proper digital option.
After logging in tap on the settings on the lower right corner.
There will be an option program area under TV Listings.
There you can enter your zipcode and give the correct Headend (Digital) option
I think the forums.comcast.net will respond quicker and properly .
you can also directly send mail to [email protected] to get lightning response !!
I tried this and he responded immediately

[Q] App to 'wake' android player

Hi all,
First post here, so I hope I've got this in the right section!
I've recently purchased a Samsung Galaxy Player (Froyo) and have got it set up to synchronise with the mail exchange server at work using the "WiFi Web Login" tool by SysLynx.
Simply, the process works like this:
1. I get within range of the wifi connection
2. wifi connection is made automatically
3. To get access to email and calendar I then need to login through a webpage with username and password
4. "WiFi Web Login" is programmed to automatically run a script that fills in the web page details automatically so that I don't have to type it in every time I get to work
5. Email and calendar start synchronising and everything is hunky dory!
But...
I've noticed that "WiFi web login" does not seem to operate when my SGP goes into sleep mode (ie. screen goes blank and I need to swipe it to switch it back on).
So this means that if I add a calendar event on my PC at work it won't get synchronised to my SGP until the next time I manually wake it up. Therefore, if I receive a meeting invite in the morning for later in the day and I don't turn on the SGP at any time prior to the meeting then I won't get notified while I'm away from my PC.
Is there an app available that can 'wake up' your SGP for a period of 15sec once an hour (for example) so that it can perform the sync and then go back to 'sleep'?? That way the SGP will never be more than 1hr out of sync with my PC.
I understand that there will be the risk of inadvertent pressing on the screen during the 15sec window, but I figure that's pretty unlikely as it will be kept inside a leather case.
Any help is much appreciated!!
Andrew.

.
Thread moved to Q&A due to it being a question. Would advise you to read forum rules and post in correct section.
Failure to comply with forum rules will result in an infraction and/or ban depending on severity of rule break.

go to setting- wifi- press menu button- advanced- switch wifi sleep policy to never

I didn't realise that there was an 'advanced' settings page. Thanks for pointing that out jaypah89, much appreciated. Now to see if it addresses my issue...

You could download the "power manager" from my signature and stop your devices cpu from going into sleep mode. This could fix the issue if it was not the wifi sleep policy.

HELP! Clicked a spam link, updated something...

This morning I received a facebook message from a friend which contained a link that was obviously spam. I went to swipe away the Facebook Messenger notification but fat-fingered it and opened the notification instead of clearing it. It automatically opened the link, which opened the Play Store and I got the message "Account Data Updated".
As soon as this happened I turned off mobile data and wifi for fear of transmitting anything anywhere it shouldn't go, but I don't know what damage it could have actually done. My phone is an Evo LTE.
Can anyone help me figure out what it did?
Here's the link the message pointed to:
*DO NOT CLICK*
http://www.hill70.ca/wp-content/themes/midnight-blue-plus/boomboomnow.php?oulr
*DO NOT CLICK*
HELP!

Switch on your phone and open Play Store. If everything happens to be normal, then it's alright.
**Men have become the tools of their tools**

Thanks. Still a little nervous to turn data back on...
What account data could even be modified using a PHP script? I wouldn't even see Google allowing such a thing, but go figure.

Smash the phone in the wall, log into Google Account and change your password
I'm not responsible for any damage.

It is spam, if you are worried then log on via pc....Thread closed.

[Material][4.0.3+][Captive Portal Helper] Wifi Auto Login

Have you ever been to a place where you have to go enter your credentials to log into via a wifi captive portal?
Those things are present everywhere now from Guest Wifi networks at hotels to corporate Wifi networks. I was annoyed at having to enter my credentials again and again every day so I made this app to automate that task. You just have to record your login steps only ONCE and WiFi Auto Login replays them when ever required without any manual interaction from you. This app works fine for Android versions from Ice Cream Sandwich to Marshmallow. Let me know if you guys find any issues in using my app.
Without further Ado, Here is the app .
XDA:DevDB Information
Wifi Auto Login, App for all devices (see above for details)
Contributors
anantharam
Version Information
Status: Beta
Current Beta Version: 1.0
Beta Release Date: 2016-03-12
Created 2016-03-12
Last Updated 2016-03-12

Any tutorial?

dr.patron99 said:
Any tutorial?
Click to expand...
Click to collapse
When you come up against any captive portal, my app will automatically pop up and ask for your credentials to log into that portal, let me know if you find that non-intuitive I will look into adding a info screen on first install of the app.

anantharam said:
When you come up against any captive portal, my app will automatically pop up and ask for your credentials to log into that portal, let me know if you find that non-intuitive I will look into adding a info screen on first install of the app.
Click to expand...
Click to collapse
Just to check that out, I have tried to logged out 3 times, but nothing happens. In fact I have set Automate authentication ON but no help.
To my knowledge, I had to submit credential in order to logged back IN.

dr.patron99 said:
Just to check that out, I have tried to logged out 3 times, but nothing happens. In fact I have set Automate authentication ON but no help.
To my knowledge, I had to submit credential in order to logged back IN.
Click to expand...
Click to collapse
When the Wifi Sign In is requested, it might open up a browser automatically, make sure you are entering your credentials inside my app and not in the browser. And make sure you tick on "Store Password" and also "Automate this for this site everytime" when you enter the credentials.
And finally, if you do not mind, can you tell me the credentials requested by your captive portal?
Weather username, email and password or does it require anything more custom?

dr.patron99 said:
Just to check that out, I have tried to logged out 3 times, but nothing happens. In fact I have set Automate authentication ON but no help.
To my knowledge, I had to submit credential in order to logged back IN.
Click to expand...
Click to collapse
anantharam said:
When the Wifi Sign In is requested, it might open up a browser automatically, make sure you are entering your credentials inside my app and not in the browser. And make sure you tick on "Store Password" and also "Automate this for this site everytime" when you enter the credentials.
And finally, if you do not mind, can you tell me the credentials requested by your captive portal?
Weather username, email and password or does it require anything more custom?
Click to expand...
Click to collapse
Hey any updates?
Let me know if it worked and if it is automatically logging in for you now correctly.
I am looking for feedback if it worked, or I might have to tweak my algo a bit to search for more custom values in credentials..

anantharam said:
Hey any updates?
Let me know if it worked and if it is automatically logging in for you now correctly.
I am looking for feedback if it worked, or I might have to tweak my algo a bit to search for more custom values in credentials..
Click to expand...
Click to collapse
Nope, not exactly how you're describing.
After several attempts only once it showed a pop up to login but that to for browser only there wasn't anything inside your app.
I am guessing may be my method could be wrong in order to do it correctly. Also I have tried uninstalling and reinstalling it., But every time it shows some test.portal site? Is it by default?
IMO some more tweaking may require and Authetication duration is quite long, It should be once and Boom! But it takes 2-3 attempts just to get login page, and that happened only twice which links to browser for login and not into your app.

dr.patron99 said:
Nope, not exactly how you're describing.
After several attempts only once it showed a pop up to login but that to for browser only there wasn't anything inside your app.
I am guessing may be my method could be wrong in order to do it correctly. Also I have tried uninstalling and reinstalling it., But every time it shows some test.portal site? Is it by default?
IMO some more tweaking may require and Authetication duration is quite long, It should be once and Boom! But it takes 2-3 attempts just to get login page, and that happened only twice which links to browser for login and not into your app.
Click to expand...
Click to collapse
If you do not mind, can you tell me the credentials requested by your captive portal?
Weather username, email and password or anything else?
And here is a short tutorial till I can incorporate a tutorial into my app :
1) You can just ignore the test.portal or you can press the checkbox next to it and press the delete button at the bottom to delete it. That will not affect anything else, I will remove it in the next iteration of the app.
2) Notice the very big button called "checking.." at the bottom of the app after you open it? Please wait for a few seconds and if it detects that you are connected to a Wifi network but not connected to internet, it will turn to "Authenticate". Once that button is enabled, you just click that button and it should take you to another screen in my app with blue background saying "I see you are having troubles logging into this WiFi Automatically. I can help you automate it." and ask for your username and password or email and password or whatever it is that your portal requires. (Note that this entire step is optional since when you turn off your wifi and turn it on and internet is not connected my app should automatically pop up and ask for your username and password but for some reason this doesn't seem to be happening in your case).
3) And make sure you tick on "Store Password" and also "Automate this for this site everytime" when you enter the credentials.
4) Make sure the big button next to "Background authentication is" has ON and that's it, my app will fire up everytime you are connected to Wifi but not connected to internet and it will automatically enter that credentials you entered to my app.

anantharam said:
If you do not mind, can you tell me the credentials requested by your captive portal?
Weather username, email and password or anything else?
And here is a short tutorial till I can incorporate a tutorial into my app :
1) You can just ignore the test.portal or you can press the checkbox next to it and press the delete button at the bottom to delete it. That will not affect anything else, I will remove it in the next iteration of the app.
2) Notice the very big button called "checking.." at the bottom of the app after you open it? Please wait for a few seconds and if it detects that you are connected to a Wifi network but not connected to internet, it will turn to "Authenticate". Once that button is enabled, you just click that button and it should take you to another screen in my app with blue background saying "I see you are having troubles logging into this WiFi Automatically. I can help you automate it." and ask for your username and password or email and password or whatever it is that your portal requires. (Note that this entire step is optional since when you turn off your wifi and turn it on and internet is not connected my app should automatically pop up and ask for your username and password but for some reason this doesn't seem to be happening in your case).
3) And make sure you tick on "Store Password" and also "Automate this for this site everytime" when you enter the credentials.
4) Make sure the big button next to "Background authentication is" has ON and that's it, my app will fire up everytime you are connected to Wifi but not connected to internet and it will automatically enter that credentials you entered to my app.
Click to expand...
Click to collapse
Sorry for delay in response actually.,
1,3,4 Steps I have done correctly
2 Step is where all problem lies, as you assumed I am not receiving any pop ups as you've mentioned here. After hitting Authenticate, it started to search something but after a while it comes back to Authenticate option again. After few attempts it lead me to link to browser where I suppose not to enter the credentials. Since you told me not to enter those into browser I've tried looking for an option inside your app. But no luck.

dr.patron99 said:
Sorry for delay in response actually.,
1,3,4 Steps I have done correctly
2 Step is where all problem lies, as you assumed I am not receiving any pop ups as you've mentioned here. After hitting Authenticate, it started to search something but after a while it comes back to Authenticate option again. After few attempts it lead me to link to browser where I suppose not to enter the credentials. Since you told me not to enter those into browser I've tried looking for an option inside your app. But no luck.
Click to expand...
Click to collapse
Weird, when you press the Authenticate button it shouldn't search anything at all, it should immediately move you to the credentials screen.
Can you please try one more thing to see if that works?
Manually turn off and after a few seconds turn on your wifi when you are logged out of the captive portal. That should trigger the WifiReader to re-read the info again.

anantharam said:
Weird, when you press the Authenticate button it shouldn't search anything at all, it should immediately move you to the credentials screen.
Can you please try one more thing to see if that works?
Manually turn off and after a few seconds turn on your wifi when you are logged out of the captive portal. That should trigger the WifiReader to re-read the info again.
Click to expand...
Click to collapse
I'm sorry to say, But that way also not working. In fact I've tried several different ways to get into it. So far only once it shows to enter credentials and that to with Browser link to open. There's nowhere i could be able to look for an option to enter credentials.
Something is missing for sure. :fingers-crossed:

dr.patron99 said:
I'm sorry to say, But that way also not working. In fact I've tried several different ways to get into it. So far only once it shows to enter credentials and that to with Browser link to open. There's nowhere i could be able to look for an option to enter credentials.
Something is missing for sure. :fingers-crossed:
Click to expand...
Click to collapse
Sorry to hear that, but anyways thank you very much for your feedback.
I really appreciate that.
I will try to add an option to send debug logs to me before production release to handle these kind of situations.

This app works fine. Thanks for making my life simpler. There are more than 15 access points for the guest wifi, when I go to a different floor or to a washroom, wifi gets disconnected. Thanks for making this app, it saved a lot of time and frustration. It is very easy on the battery and does its job in milliseconds.
Just put your name and contact in the app, I had to search entire XDA to find this post to say "Thanks!"

There are a couple of different Public WiFi that use Captive Portal and request a form fill to let users in.
However none of them seems to work.
Willing to test and provide useful info to help in developing...

@anantharam, are you still working on this? I just tried it out on my Pixel 2 running Android 9 and it shows that it's online when the networks are still asking for sign-in and the sign-in notification is still showing.
My city recently installed free wifi downtown, which is awesome, but I have to keep jumping through these pages to use it. Your app would be a godsend!

@MMcCubbing Thanks for your interest in this.
Unfortunately the app is currently taken down from the play store for some licencing reasons, I am trying to work with Google to try to bring back the app.
As for your particular question, if my app shows it is online, then it means my app is able to talk to the internet. At that point if you go to your browser and try to go to google.com do you get any error or are you getting connected correctly?
My app is mainly intended for usecases where you are not connected to the internet without giving a user name and password in a captive portal.

Ghost in the Machine

Hi guys!
Tried the search but came up with nothing so here goes...
I must admit I'm not very tech savvy but I can follow instructions no worries
I joined mainly because my Samsung Galaxy S8+ (un-rooted) started to behave very strangely early this year.
(and I want to trick it up after warranty expires in August ?)
Short story is that my Samsung account got hacked (or it at least seems like it) and the perp was then able to control my phone remotely. It was incredible watching my phone do as it pleased and all I could do was sit back and watch. Funny thing is that I've never actually toggled the RC switch (find my phone)...
My local carrier (Telstra Bigpond - Australia) account as well as my Google account got taken over shortly after. This would have given whoever it was access to my 3 cloud accounts which add you can appreciate would contain some sensitive material.
Whoever is responsible could well be a member on here so "Hi, there!! "
I pulled my sim and sd card and switched the phone off so I could decide what to do next.
I got a password manager app, changed all passwords (lucky my partner had a spare iPhone 5S sitting around up I could get online) and factory reset the phone.
All seemed to be going well until a few days ago...
I got "timed out" on my Samsung account (is that even possible?!) and while I was putting the password in (on the Samsung website - silly mistake!) just as I hit next I noticed a few dots in a square pattern that did a spinning type of graphic over the password entry box.
Continuing onto the next screen where the two step verification was, which was to send a text to my phone to receive a code and bang! Before I even received the text a six digit code appears in the fill box on the screen (same spinning dots in a square pattern) right before my eyes and then I receive the text afterwards! The numbers matched!!
I’ve also been asked to enter my Google credentials on more than one occasion lately from being “signed out”...
I don't know what to do!
I've tried all of the popular virus type apps and a few file managers to no avail. More like I've been hacked than a virus?
I've removed apps and shut down almost all of them as well as toggling between mobile data and WiFi and restored the phone twice back to earlier backups from over 6 months ago.
I've only ever downloaded from the Play Store apart from just the once getting your better version of the Play Store XDA (LABS) app.
What might be noteworthy is when I was using Google's help function it said that I had a "modified Android" and to contact manufacturer. I can guarantee the phone has never been cracked open.
I can provide screen shots from DevCheck (FLAR2) but I really don't know what I'm looking at. I also don't have any unknown apps etc...
I really don't know what to do next...
Any advice please??
Sorry about the long post.
All the best,
Crackles

Took phone to Samsung and they wiped the device and installed current (Android Pie 9 w. Feb 01 security update) so was looking forward to having a play with the new os until I went to add my Samsung account details...
Entered the password then the 2-step security kicked in to send a text to my number.
The earlier 4 circling dots dropped the 6 digit code into the fill box before I even received the sms! Device (on it's own jumped straight to the remote control button in the Find my Device security section) then attempted to change the password!
Only thing that prevented that from being carried out was I had biometrics activated and stopped the action using my fingerprint.
Seriously no one has any idea on what to do?!
I also had installed a replacement sim card.
I also can't uninstall updates on certain apps like Google Play Services etc, and some apps either have a dead link (press it and nothing happens) or Play Store can't find the app when I hit the downloaded from Play Store thingy at the bottom of the app description page. Hope that makes sense.

As you said, they wiped the phone, which means they most likely flashed the whole firmware, so there's no way for any malware to remain installed. But for what it's worth, you can try to re-flash the firmware yourself using Oding to make sure the whole flash is clean.
If your phone really was infected with any kind of malware, it must have been a 3-rd party app you have (repeatedly) installed. Some apps like Google Play Services cannot be uninstalled because they are vital for system's (or rather apps installed from Play Store) propper functioning.
Also, even if you had infected your device, it would not be able to take control of your device to the extent you described because of app sandboxing, which cannot be broken unless the app constitutes itself as a system app (because every part of the system has to be cryptographically signed, this would break the boot and brick your device) or the user (you) would have to allow the app the necessary permissions to carry out these tasks.

Hey Kernel thanks for the reply ?
Yes I know what I'm saying sounds crazy and even the missus said I was nuts till I showed her.
I can't screen record any more either...
I'm noticing odd little things like when I pull the notifications screen down for a second or so the NFC, Bluetooth and nearby icons are lit up but then revert back to a if they were off. I've switched all of these items off in the settings so are they being sneaky?
So far nothing really bad has happened apart from not being able to put my credentials into the PayPal app. That's using both Last Pass auto-fill and manually entering the email and password. I've un-installed and re-installed many times and it's the same. I'm not going to add any banking apps just yet.
Facebook also got installed in the background about 4 times within a few minutes. Seemed odd to me. I think I've got a screenshot of that.
Malwarebytes found an issue with I'm guessing a theme I got from the Samsung Galaxy Store so I removed it, chose another and it seems OK.
There's still a few odd things happening like certain settings reverting back to something different from what I'd set.
I'll keep tinkering and post anything that stands out.
Is there an app or something that can check every file on my phone and tell if something isn't quite right?
I don't have a pc at the moment but when I do I'll look into Odin.
Thanks again for taking the time I know I sound like a lunatic and tbh I really wish I was haha!! :laugh:
Hmm interesting...
When I tried to upload the screenshot it stopped and said "bad request"...
Sent from my SM-G955F using XDA Labs

Could all this weird bs be happening if the home WiFi has been hijacked?
Sorry for dumb questions.
Sent from my SM-G955F using XDA Labs

Whatsapp does the same thing, autocompletes the code, before de sms is coming. This is not a malware. But, don't use password manager... Those can be hacked.

Really my password manager can be hacked?!
I'm using Last Pass.
So moving on I started to poke around the WiFi router and found the PnP enabled and my device was sharing with another device. I did not authorise this. I've since reset the router, changed the pin and access code, disabled the WPS and also factory reset the device that was "sharing" with mine... The owner of said device no longer lives with me. I'm just glad I confiscated the phone from him before he left.
When I'm researching possibilities of what could be going on with my phone the pages won't load. It's like my searches are being monitored and the data is being stopped. I tested this with my partner's phone (on mobile data) and the exact Web pages loaded right up on her's without a hitch! I tried again on mine and they just stopped. Pages would load straight away on mine if searching for something completely different like rc cars or bmx related content. Stuff to do with my phone just won't work ffs!
Like when I tried my first post on here. It simply would not post it up! I ended up having to copy/paste the draft and emailing it to another account that I made up on the spot on her phone. Hence the two usernames in this thread.
I got the 3C TOOLBOX app and in the app management section, Task Manager under service many of them are "custom entries" and I cannot un-tick, modify or reset back to the original version of any of these apps. Google Play Services was the worst. Pretty much every thing it was capable of doing had a "custom action" and I could not do anything with it.
Am I doing something wrong or do I have a serious invasion of my phone..?
Thinking about smashing this thing to bits and getting an S10+ ??
Also the Bluetooth, NFC & Nearby buttons almost any me of the day/night are on for a split second when I drag the motivation panel down. These are all set to "OFF" in settings...
What
The
F--k?!?!?!
Sent from my SM-G955F using XDA Labs