This post is regarding the Xfinity Mobile app: https://market.android.com/details?id=net.comcast.ottclient
My system log shows <userName>[email protected]</userName> and <password>MYPASSWORD</password> on a line that starts with "D/HTTPManager". I read the log using aLogcat (app available in the market). Open aLogcat, press menu and filter for "password". After I clear my log (using aLogcat) that line reappears even when I haven't used the Xfinity app. I don't use my comcast credentials in any other app.
To try and resolve this I cleared data and cache for the Xfinity app, then cleared the system log in aLogcat, and restarted the phone for good measure. I opened the Xfinity app, logged in without checking "remember me" and unfortunately my username and password immediately reappeared in the system log.
I posted this issue here: http://forums.comcast.net/t5/Mobile-Apps-and-Web/Password-revealed-in-android-system-log/td-p/872295. A Comcast employee responded to say they will investigate this issue and fix it within a few weeks. In the mean time, you may want to uninstall the Xfinity Mobile app and change your Comcast password, or at least do not share your system log with anyone (in bug reports for example) if you have Xfinity Mobile installed.
This may not be the only app that exposes sensitive information in the system log, but this is the only password I have found exposed.
I have a Motorola Droid running stock Android 2.2.
UPDATE - As squiddy20 pointed out, Comcast has updated their app to 2.0.2. They include instructions to clear the app data as part of the upgrade, but that may be unrelated to this issue. In any case, I cleared the app data and installed the update, and my credentials no longer show up in the log. As far as I can tell, they have completely resolved this issue. If the problem persists for anyone else, be sure to post that here and on the Comcast forum.
Wow Comcast.
Thanks for the heads up
I checked this out for myself and the only way I could get it to show up was by logging out and then back in. I then did a reboot, let it sit for well over 5 minutes after it was fully booted, and then tried it and still no entry under "password". I dont get any of the sporadic, random popups you seem to have gotten. Oddly though, I have it set to not login automatically, yet after the reboot, it took me right to my email messages without me actually typing in my login info. That in itself is room for concern, let alone the possibility that login info is contained in the logcat in plain text.
Samsung Moment 2.1 running TiX 1.6 rom.
Interesting I to have the same issue squiddy20. Very concerning not a good thing Comcast
I was not able to see my password
I use an EVO with 2.3 and checked the same on my logs after logging in .. and only saw my username the password was nowhere to be found. I guess it would only happen when you first try to login.
squiddy20 said:
I checked this out for myself and the only way I could get it to show up was by logging out and then back in. I then did a reboot, let it sit for well over 5 minutes after it was fully booted, and then tried it and still no entry under "password". I dont get any of the sporadic, random popups you seem to have gotten. Oddly though, I have it set to not login automatically, yet after the reboot, it took me right to my email messages without me actually typing in my login info. That in itself is room for concern, let alone the possibility that login info is contained in the logcat in plain text.
Samsung Moment 2.1 running TiX 1.6 rom.
Click to expand...
Click to collapse
Now that I have unchecked "remember me" my credentials only show up in my log when I log out and back in. Not sporadic any more.
Check your Xfinity Mobile -> Settings -> Log Out setting. If it is set to "Never", then you wouldn't have to log in again after a reboot. If it is set to "On Exit" then you should have to log in again after exiting the app or after a reboot... but that may be buggy.
Thanks for the tip, but I honestly don't access my email through the app very much. To me, less things logged into and running in the background, means more memory for other things and slightly more battery life.
Also slightly less security problems!
Well, they've updated the app and I assume they've fixed the logcat problem (haven't checked for myself yet). They do have a note: "This Update will require you to log in to the application" plus the usual updates, improvements, and fixes.
Edit: just ran 2 checks with aLogcat and can confirm that the username and password info does not show up when searching for keyword "password". On a slight side note, I've noticed that hitting the home button on my Samsung Moment exits the app, but doesn't sign out. While hitting the back button from the main screen exits the app AND signs out. Settings also seem to be staying the same, even after reboots. Mine would reset occasionally, turning notifications on and other things.
I have had some concerns as well. I have lost most of my channels in the TV listings area. It goes from 2-29 and then 75-99 but that is it. I have uninstalled and reinstalled the app several times, cleared data in applications, etc. As I reinstall the app, it is going right into my system without asking for a password which I find a bit alarming.
I assume that the program has reverted to a selection that is not the full digital programming which shows up when you first do an initial install. I cannot find a way to get back to that area to reset my configuration and add all my channels back. I have emailed Comcast and those idiots responded that they do not have an app that works with Android yet, only iPads and iPhones. Quite comical.
Any help would be greatly appreciated.
I have tried all of the methods mentioned above and when I log in using username and password, and filter alogcat only my username appears in the log. Also tried brief and long settings in alogcat preferences.
Edit: This is using the 2.0.2 version.
Hi Squiddy ,
Pressing the backbutton will exit the app and pressing the home screen actually puts the app in the background so that at later point of time we can launch the app from the page where we left .
I dont think this is an Issue.
Hi Dawgman25,
There is a settings for the program area where you can change the zipcode of yours and select the proper digital option.
After logging in tap on the settings on the lower right corner.
There will be an option program area under TV Listings.
There you can enter your zipcode and give the correct Headend (Digital) option
I think the forums.comcast.net will respond quicker and properly .
you can also directly send mail to [email protected] to get lightning response !!
I tried this and he responded immediately
Hey,
I noticed that messaging apps (for example whatsapp) crashes whenever I open a conversation that has attachments in it. Or if in the last 20/30 lines is no attachment (picture for.example) but I try to open the contact windows where it shows the name, status and media it crashes while loading the media. I tried clearing the cache of whatsapp and the system media app. Tried clearing cache and dalvik. Tried scanning the media with some apps. I deleted the newest pics i received because i thought maybe they were corrupted. Nothing helped. This occured after updating to 30O.
PS: I'm not going to wipe/reset my phone because I don't have the time to restore everything after such a reset.
Sent from my OnePlus One
Unfortunately for you the next step would be a factory reset. But if you're not willing to do that I guess you'll have to live with it. Or completely wipe the whatsapp data and start fresh with the app.
Transmitted via Bacon
I already thought that something went wrong when I updated to 30O so I just flashed the full ROM over my 25R with 30O OTA and now everything seems to work fine. Thank you for your efforts
Sent from my OnePlus One
"Unfortunately, Messaging has stopped."
I also had this problem. Kept getting this message when re-reading received messages, and, couldn't attach multimedia files. Found the answer from kspohn at an oneplus one forum. Thanks kspohn. It worked.
AT&T People without mms working here is the solution.
Call AT&T support. Go to wireless tech support when going through all the press # for (department name) mumbo jumbo.
Tell them you got a new phone and you need to activate mms on it by giving them IMEI number located on the packaging of your Oneplus One box particularly by the bar code sticker. This is like a SS for your specific phone
They will then ask you to power cycle the phone (turn it off for 10 sec) so call them originally with another phone.
They will then send a test mms to make sure it works. This only works for the global version of the phone so....... yea
Some At&T employees are aware of this phone... guy bro AT&T guy said it looked uber sweetles.
ok 1st allow me to say that i looked briefly through some other threads and have done some searching on google and still have a major problem. i cannot send nor receive any mms format messages at all. (whether simple data messages or pics. nether will download or send) i made note of the fact that there is a port that sends and receives these message types however i have no idea how to check if that port may have been closed at some point, i have my phone rooted however am not sure if something that i may have messed with could be a result of this. when the phone was new i had no issues....lol any help would be appreciated thanks
ok upon checking settings i found that the apn settings are either wrong or not there (as in says things like "blank") tried using an app named "apn manager" used a tutorial i found here on the forums for how to install and use (using titanium pro) and i cant get it work =/ again thanks for any help
Ok so ever since my phone was updated back in October 2018 the default phone app (A.K.A. Samsung Call) on my Samsung Galaxy S7 has been gimped...
Symptoms:
- Whenever I receive incoming call the app launches and receives the call normally.
- Cannot make any calls, the actual app with the "Phone" icon can be clicked on but doesn't launch, which includes the dialer.
- I cannot launch calls by using the Contacts App.
- I can actually successfully launch an outgoing call by going through my text Message app(which is still the default Samsung app) and by selecting a person's number through a message they sent I am able to use the drop down menu to launch a call.
Fix Attempts:
- Attempted uninstalling & reinstalling only the Samsung Call app
- Attempted to clear the cache and data for the Samsung Call app (for all 3 of them because 3 of them show up in my app list whenever Show System Apps option is checked)
- Attempted Factory Reset of the phone, both through the Settings/General Management/Reset menu and through the Android Bootloader/Bios
- Attempted accessing the Call app inside of safe mode, no dice.
I'm at a loss as to what to try next, besides nuking the OS on the device and reinstalling it from ground zero. (Also as side note is this a well-known issue? Because I can't find any mention of it anywhere yet when I go to the Galaxy App store and look up the review of the app it seems I'm not the only affected user following that Oct 30. Update)
Only other thing I can think of on top of what you've done is uninstall the app, then try an apk from apkmirror or another mirror site.
If it's say a problem with system corruption an Odin flash might rewrite what's broken. If you flash with Home_CSC,AP,CP,BL it keeps your data. If you use normal CSC it wipes.
I'm trying to resolve an issue with the Android Lost app, and unfortunately the developer's forum page is closed. It does no good to contact him via email, as I always receive a canned response due to the many emails he receives. I'm hoping someone here may be able to help me troubleshoot.
I have uninstalled and reinstalled, cleared cache and data, but every time I reinstall Android Lost v3.26 on my wife's Google Pixel 3a running Android 12, I get the same following issues:
First, it opens and says Personal Notes, PIN code required. It will only take the old PIN.
How is it remembering the old PIN if I have completely uninstalled, deleted its data, rebooted the phone, etc? (Yes, I removed the Administrator permissions)
After entering the correct PIN, I get a popup, "Use Your Location", which I click OK.
It then instantly pops up the next window:
"Some Permissions are missing. For this app to work as expected you must accept the permissions. Let us go through them one by one."
I click OK. (It does NOT go through any permissions for me to select.)
Once again, instantly, another window pops up:
"Not all permissions were accepted. Most likely you have clicked deny and never ask again. To allow permissions you must go to your phone's settings menu and set it manually."
I click OK.
So I go to my phone's settings, and allow all permissions for the Android Lost app, YET, when I run the troubleshooter from the app, I get the results shown on the attached pic, Test12-Missiing Permissions.png.
I have also attached the log file generated by the Android Lost app.
Mike
Have you tried to reset your app launcher? I've had this problem and by clearing data in my launcher it reset my screen and all the apps pop back up.
Just tried by clearing the data and cache for the Pixel Launcher, but it made no difference.
One of the options for troubleshooting is to start from scratch and register your email again by clicking the button, Re-register at Google. Yet, when I click it, it says "Please Wait...", then 3 seconds later it says "No Google account found on phone - This app was NOT registered."
I can confirm, my wife's Google email is on this phone, so I'm not sure why it is saying that.