If someone writes an app and intends to steal google passwords, and puts it on the app store, and people download it, can they get all those people's google passwords?
For example I see several gmail notifier apps. When asking to install it, the phone notifies me that it has access to my gmail password. So what's to stop a thief from creating an app and stealing passwords this way?
Yes I posted this in the general android forums but got no responses, so rather than bumping it there I thought I'd try here.
Related
Hey all, I have stock,non-rooted,locked, OTA'd rezound.
I've tried everything in the general forums for this problem, so now I'll come here and ask to see if anyone has any other possible solutions.
I've done multiple factory resets today, and tried several different methods of re-adding my google account (which is a google apps for your domain account) so it's not @gmail.com but @mydomain.com
Everything works great, sync, gmail app, gtalk, youtube.. you name it. Great. Even the market place, for downloading 'free' apps.
As soon as I try and download an app I have to pay for I get a little window that pops up that says "Google sign-in You entered the wrong password or your account has changed. Please re-enter your password. Username [email protected]" and then just fails to accept my actual password. (i've tried changing my password a few times too!)
Here's everything I've tried:
1. Clearing the Market App Data and Cache.
2. FactoryReset: try and use the old market app before it gets updated.
3. Youtube account issue: disabled the youtube service on my google app domain, and factory reset- and tried again... no dice.
4. Tried putting on a real @gmail.com domain, and that works just fine. try and switch to @mydomain and it fails again.
I've done a factory-reset before every different style of attempt. I'm guessing something else is going on :-\
When I logon to the market through the web, I can purchase apps and they install without a problem! So it's something to do with the market app.
Anyway, just looking for any other ideas I may have overlooked. You're a pretty thorough community so I think I can trust you all would have something for me to try!
Before my factory-reset, everything worked fine with my google apps domain account.
TL;DR: My google apps domain account I normally use won't let me purchase apps on the marketplace anymore, it says the password has changed but all other google services work just fine!
I remember reading something way back when I first got the phone in late November about people having issues with the Market app. I never had an issue so I didn't pay much attention to it but you should be able to find a thread about it from back then.
Something about using a different apk? Or maybe deleting the app and redownloading it?
Sorry I don't have the actual answer but I thought I could at least point you in the right direction until someone else does.
EDIT: This may not be the same issue but one of the solutions that suggests to clear cache may help you. Can't hurt to try it out.
posted by danutzz: Open app drawer > tap menu button > click remove app > click all > find market and click > click clear cache and clear data...
http://forum.xda-developers.com/showpost.php?p=19485456&postcount=6
Are you using Google Two-Step login verification?
Did you accidentally leave yourself logged in to another computer, like at work, where somebody else might have gained access to your account?
Sent from HTC Rezound using Tapatalk.
Great questions:
No I've turned 2-step verification off.... what if I turn it on, and try and get a different password out of it? I'll give it a go.
Account is definitely not compromised. good to go here.
Break Through Achieved...
My Google Wallet account has been suspended, because when I changed my password I used the google domains administrator panel, and not my google account 'change password'. this made google think the administrator changed the password because the account was compromised.
google wallet has a lengthy but acceptable process for regaining access to your account.
I'll go update all the general forums with this if it works... thanks for all your patience.
Also, google.com/wallet shows a good explination of why all other apps work fine, and not purchases...
Google Wallet Account Reinstatement
Your Google Wallet account is currently suspended. The account was suspended as a precautionary measure to protect your payment information because Google detected that an administrator at your organization initiated a password reset for your email address. However, this suspension only affects your access to Google Wallet, and you should still have access to your other Google Apps services such as Gmail, Calendar, and Sites.
If you would like to reinstate Google Wallet on your Google Apps account, please contact us. You will be required to verify your identity to reinstate your Wallet account.
You may also wish to sign up for a new Google Wallet account using a personal e-mail address, rather than your Google Apps account. Creating a new Wallet account using a personal email address will reduce future suspensions of your Google Wallet account for password changes. If you don't have an alternative email address, you can create a new email address with Gmail for free.
Click to expand...
Click to collapse
I'm having the same problem (using google apps account, admin reset password, no purchasing market apps etc etc)
When I log in to google wallet, I see the message you posted above, with a link to click to contact google. However, this link just redirects endlessly to the same message.
Can you remember how you managed to get in contact with google to have the suspension lifted?
Thanks
Sul
Here's the link to the account reinstatement application form:
https://support.google.com/wallet/bin/request.py?&contact_type=ga_reset
I had the same issue a few weeks ago. I just emailed Google wallet help support telling them the problem and by the next day I got a reply saying something like "we can now confirm that your Google wallet is now working and able to make purchases" Sure enough they fixed it and haven't had a problem since.
MarvinPontiac said:
I had the same issue a few weeks ago. I just emailed Google wallet help support telling them the problem and by the next day I got a reply saying something like "we can now confirm that your Google wallet is now working and able to make purchases" Sure enough they fixed it and haven't had a problem since.
Click to expand...
Click to collapse
Where did you even email them? It's like an endless loop on their help center where you can't get to an actual contact form, just has to match one of their issues. I swear while I like a lot of google services, their support leaves very little to be desired.
Hi, no response in Q&A so thought I'd ask here too... hoping there's some kind of solution for this...
Basically, I have an old gmail address that I want to get rid of(or stop using at least) and make a new one, because it's full of so much crap. However, I have many purchased apps from the Play Store, and was wondering if there is any way of linking that data to a new gmail address? Or does the Google Market even have anything to do with the gmail address you use? Any help is appreciated.
Hi so today i logged on my pc.
And google notifies me of suspicious activity on my youtube account.
I never had this happen before and don't know what to do.
Im using a custom rom and gapps with the youtube app as a system app.
Google said they prevented the log in and in the email states that it was used with an application.
I reversed looked up the ip and got some name and addresses but idk if this helps.
what should i do to prevent this?
First make sure it's not a false alarm. It can mean a few different things. Then you should reset ( change ) your Google account password. After that you can either deactivate the account, and make a new one. Which can be a PIA if you have many things connected to your Google account, as many of us do. Or just keep a close watch on the account activity.
Hi,
I think lots of people here hold back a little bit on how much data they expose to google. I have a specific question. When apps access address book, what address book are they accessing? The phone address book? What if it's a tablet, which has no address book, is it access your google contacts?
YOUR ACCOUNTS
FIND ACCOUNTS ON THE DEVICE
Allows the app to get the list of accounts known by the tablet. This may include any accounts created by applications you have installed. Allows the app to get the list of accounts known by the phone. This may include any accounts created by applications you have installed.
Click to expand...
Click to collapse
I have an account used specifically for playstore and my tablet and phone. I also access my personal gmail through my tablet or phone, using a different account. Does that mean that Angry Birds knows about both the account used by playstore AND my personal gmail account?
Is there a better way to protect my personal gmail account?
Thanks!
coachclass said:
Hi,
I think lots of people here hold back a little bit on how much data they expose to google. I have a specific question. When apps access address book, what address book are they accessing? The phone address book? What if it's a tablet, which has no address book, is it access your google contacts?
I have an account used specifically for playstore and my tablet and phone. I also access my personal gmail through my tablet or phone, using a different account. Does that mean that Angry Birds knows about both the account used by playstore AND my personal gmail account?
Is there a better way to protect my personal gmail account?
Thanks!
Click to expand...
Click to collapse
Is your device rooted?
If yes, you may use LBE Security, the current translated Version from here http://forum.xda-developers.com/showthread.php?t=1422479 (mandatory for JB!).
With this app you can restrict all permissions for every app on you phone.
Hello and thanks for taking time to read my thread. I'm posting because under my Google account in system settings, I see many sync options which are redundant, exact duplicates, or completely vague. I'm hoping someone knows some more about any of these and why there are duplicates.
I've tried searching Google and XDA, but there just seems to be no info on this. Only thing I found was another thread from a year ago asking about some different options under Google account sync settings, but the thread never reached an answer.
The individual settings I have are below and I've noted the ones which I don't understand. Any help or tips in the right direction for getting clarity on this will be greatly appreciated!
App Data
[*]Calendar
Chrome — I assume this syncs recent/open tabs and history from Chrome running on my PCs, but...
ChromeSync — then how does this differ from "Chrome"?
Contacts
Credentials State — ????
Game Data
[*]Game Data — Why are there two of these? And does anyone know what data it actually syncs? Scores, achievements? Will Play Games still integrate the same way with the few games I play if I turn these off?
Gmail
[*]Google Fit data
Google Opinion Rewards —This was already off, but I still get notifications for new surveys. So what is this even for?
Google Play Music
Google Play services —
Google Play services —
Google Play services — Holy hell, why must there be three of these completely nondescriptive entries?? My best guess is that these are some catchalls that Google threw in because either A) they are lazy or B) they wanted to lump some things together so you couldn't disable certain things you might find intrusive or unnecessary without breaking something else you actually do want which is bundled into these entries.
Google+
Google+ Photos
Google+ Uploads — What uploads are there other than photos?
Keep
Location Reporting and Location history — How does this differ from the location history setting in the "Google Settings" app? I can turn either one off and the other stays on, so they seem to be independent settings.
Offline credentials sync — I can't seem to figure out what offline credentials are used for in Android or whether I actually utilize them. Is there any way to know?
People details — Another confusing one. I would assume this had to do with contacts if there wasn't a separate entry for that. Anyone have a clue what this is?
Push subscriptions — AFAIK, I don't have any subscriptions via my Google account, but I assume this will break some important notifications of some sort. Anyone know?
Reminders
Hate to bump my own thread, but maybe someone online at this time might know something.
Bump
I'm curious as well
It's probably because you guys have the 'Reveal Hidden Sync' feature in Greenify enabled like I have.
It's not a bad thing really, probably Google's way of syncing account data. Multiple Play Service sync for different data, Credential for payment methods stored in your account (nothing unsafe if you have 2F enabled), Push subscriptions because there are many apps that use GCM push etc. It's really nothing to worry about.
Anachronizer said:
It's probably because you guys have the 'Reveal Hidden Sync' feature in Greenify enabled like I have.
It's not a bad thing really, probably Google's way of syncing account data. Multiple Play Service sync for different data, Credential for payment methods stored in your account (nothing unsafe if you have 2F enabled), Push subscriptions because there are many apps that use GCM push etc. It's really nothing to worry about.
Click to expand...
Click to collapse
Haha. Yeah, thanks. I had figured that out some time after posting this thread, but never updated here since it looked like no one else cared anyway
I suppose the differentiation between the duplicates is really only relevant in the code or the syncing process itself and not so relevant to the user. I do still have "People details" and the Opinion Rewards (which doesn't seem to affect the app receiving new surveys) when the Greenify option is turned off, so I still really wonder what those are for.