3 ms·
TL;DR: By deleting the Wallet application data from Android prefs you can assign a new PIN and access the Wallet (e.g. on a stolen phone). This looks like a ty
by ge0rg 15y ago
TL;DR: By deleting the Wallet application data from Android prefs you can assign a new PIN and access the Wallet (e.g. on a stolen phone).
This looks like a typical authentication-done-wrong problem on Google's side here... Not sure if it really qualifies for the name "hack" though.
- joenathan 15y agoThis only works if you don't have a lock screen gesture or lock screen pin, and if you don't have one of those then you must not be concerned about others having access to your data.
- barrkel 15y agoDefense should be defense in depth. Just because I once left my front door open overnight doesn't mean I don't value all my possessions.
- joenathan 15y agoNot setting your lock screen security is not like leaving your front door open once, it's like not having a front door at all.
- barrkel 15y agoGesture screen lock security is no security at all - smudges mean the screen can almost always be unlocked at will. More likely is an encrypted phone with PIN or password entry on startup (that's what I use). But that still leaves the phone open to use when it's powered up, in standby. There's a reason why password change dialogs in OSes ask for your previous password before letting you change it. Just relying on a single layer is foolhardy. For things as critical as money, you need multiple hurdles.