Android handsets ‘leak’ personal data
Many applications installed on Android phones interact with Google services by asking for an authentication token …
Sometimes, found the researchers, these tokens are sent in plain text over wireless networks. This makes the tokens easy to spot…
Armed with the token, criminals would be able to pose as a particular user and get at their personal information.
Even worse, found the researchers, tokens are not bound to particular phones or time of use so they can be used to impersonate a handset almost anywhere.
Now what might an unscrupulous person do with this? Might one be able to observe a person using his Android phone, capture the token, then use it to find-out more about the person?
