Google Play PIN code can be easily disabled

"> 5by Emily Aquin
tagged Google Play, pin, security

We’ve already reported the possibility that your Google Wallet account could be compromised with a brute-force attack. Now, Google Play has a similar issue that has come to light. If you have been using the PIN code verification feature in Google Play to protect your phone, read on.

There is a setting for the Google Play Market that enables a PIN code prompt when you are about to purchase something. The idea is to protect you in the event that someone steals your phone, and wants to buy a ton of apps on your dime.

The problem is that the PIN is stored on the device itself, not in the cloud. So, if a thief were to clear the data for the Google Play Market in the “Manage application” settings of your phone (the same way we explained to update Google Play from the Android market), the PIN would be gone, and the thief could buy anything they wanted in the Google Play Market using your credit card. If you realize your phone is gone, you can change your Google password so that Google Play will prompt the user to reenter the password. However, if you don’t realize your phone is gone right away, the thief might already be using your account to purchase things.

Hopefully Google will issue an update for this soon, but in the meantime, you can use a lock screen on your phone to keep unwanted people from messing with your stuff.#gallery-1 {margin: auto;}#gallery-1 .gallery-item {float: left;margin-top: 10px;text-align: center;width: 33%;}#gallery-1 img {border: 2px solid #cfcfcf;}#gallery-1 .gallery-caption {margin-left: 0;}

source: Mgamerz
via: Briefmobile

 

 

 

» See more articles by Emily Aquin

Categorized as Android Applications, Android Hacks, Android News, Google News

Comments http://twitter.com/AppHighlights Cerb

Usually a thief shouldn’t come that far since every owner of a Smartphone who cares about it’s security should have setup an unlock password.

Blah

It’s for protecting your kids from making purchases, you idiots. Not from someone who finds your phone.

Andreas Ronacher

Your article is correct. But it is feature you can read this on Google Help for Google play if you search for. The sense behind is that this pin is a control to buy no app by tipping any button. If you speak about stolen mobilphone you have to put a password or a pin to your mobile phone not within Google Play.

Emily A

I agree with all the comments. However, the point is that Google should keep the PIN number in their cloud, not on the device itself where it can be wiped. Your child could also use this method to wipe the PIN code and buy any apps they want to. I recommend that smartphone users have a lock screen security feature at the end of the article.

Gameboid

@ Blah

It’s clearly setup for all unauthorized users…not just pesky kids. It is a legitimate security issue that most of us will not take lightly, so thank you, Emily, for the heads up!

Related Posts

Not enough data!

Get the latest Android news updates sent directly to your inbox!

Recent CommentsRe: Instagram Founder Says Android App is Coming “Really Soon”Never heard of it before this news item - just goes to show how ignorant I can be! […] TechGuy-TechRe: Daylight Saving Time Change – Check Your AndroidMy Android only has "Use 24-hour format" and "Select date format". And the time is off. Fuck everything.  […] AsdfRe: Rock Some Ice Cream Sandwich Action On Your Computer With the Roboto FontA link to the download might have been useful. […] Scott ButlerRe: Samsung Galaxy Mini 2: Pre-order now in the UKwhere is made? china? […] GrandtRe: @ Blah It's clearly setup for all unauthorized users...not just pesky kids. It is a legitimate security issue that most of us will not take lightly, so thank you, Emily, for the heads up! […] Gameboid Android Forumsgoogle talkAndroid Home Screen PrototypeBackgammon Games for Android?Have you Rooted your Phone?Android Market Now "Google Play"OG - The Ice Cream Sandwich UpdateAnimated scenesSmoky artSakuraLonely tree

© 2012 TalkAndroid.com  |  Advertise  |  Contact Us  |  Privacy Policy  |  Neoseeker  |  Overclockers Club