I've asked this on the Google android-platform group but it looks very quiet so I'll ask here (I'm not sure its an issue that is TFP specific).
In /data/system there is a file accounts.db and a table within it is the table accounts with 3 records one of these relates to AsusPCSync and is of no interest .
For the other two records I have
name | type | password
<email add>|com.android.email | plain text pwd
<email add> | com.google | 64 char string (rough count)
Does anyone know if my email password should be in plain text when the com.google is encrypted?
Will a change to an alternative email client change anything - I would expect that all apps will use the same android API ?
Just sayin thanks for finding this. And actually I am a bit surprised that it's so quiet also here. I find that a bit disturbing!
So anyone an opinion?
I've established that this issue was reported in September 2010 here http://www.androidcentral.com/android-passwords-rooted-clear-text. I think it was picked up from the Google Code forum discussion here http://code.google.com/p/android/issues/detail?id=10809. Assuming that the moderator is knowledgeable then post 128 "Starting with Honeycomb, device encryption is now supported and is the most appropriate solution for this issue. Closing this now." brings the ASUS Android build into question. So if you are using a rooted device and the default mail client then anyone borrowing your device can gain access to your email password. I can't comment about any apps being able to transmit the password via an internet connection.
The solution is simple.
Install the free K9 email client
Open up the "Asus" email app and delete any email accounts
Check in /data/system/accounts.db that accounts is now clean of the email password
FYI, this issue exists on stock ICS 4.x on my Galaxy Nexus, so the issue isn't just with Asus.
Related
Hey guys,
omni here with what should be a relatively easy question/fix...
There may be a post on this already, but I searched around for a good 10 minutes, and at least I know I'm in the right section (not spamming dev)
I have Yahoo! Mail liked through my MotoBlur Accounts so that it will show emails in my Universal Inbox (standard Messaging app). It works intermittently, and what is really strange is that when it ISN'T working (when it has the orange error/caution symbol over the syncing icon), the stored password under Accounts is randomly modified to a 20-ish character string (my password is much fewer characters). I can go back and change the password while its in the mood not to work, but it never seems to sync. Then I forget about it and it randomly connects later. As you can imagine, this gets quite annoying... I'm running GreyBlur 1.0 and SteelBlue 1.15 (compatible; the problem was happening long before layering this theme). I do move around campus alot, which switches to new wifi networks or to 3.5G.
So to sum up the question: how can I stop MotoBlur's Accounts/Yahoo! Mail from changing my password and losing connectivity (not sure which comes first/causes the other)?
Great thanks to this community's wonderful attitude and android wizardy!
-bump- (oh noes, its happened again!)
Bumpitty bump
Sent from my MB860 using XDA Premium App
Issue Summary
In order to improve security, Yahoo recently disabled non-secure (non-SSL) connections to their IMAP e-mail servers. As a result, customers with devices running the Android operating system may encounter errors when attempting to setup or access their Yahoo e-mail account via the device's native e-mail client.
Customers attempting to setup a Yahoo e-mail account for the first time will receive an authentication failed or similar error when using the automatic setup method (only e-mail address & password are entered).
Customers who previously setup a Yahoo e-mail account may receive an error or be unable to retrieve new e-mail messages.
Critical Must Know/Must Do
New users (or existing user attempting to add a new Yahoo/AT&T account): use the Manual Set up option to enter the required server settings.
Existing users: If their Yahoo/AT&T account stops syncing, direct them to Edit the account settings and enable SSL.
Server/Protocol - IMAP
IMAP/Incoming Server - imap.mail.yahoo.com
Security Type - SSL (or "secure connection" option)
Incoming Port - 993
Outgoing Server - smtp.mail.yahoo.com
Security Type - SSL (or "secure connection" option)
Outgoing Port - 465
To find out how to edit the settings go here:
https://www.wireless.att.com/answer-center/solutionDisplay.jsp?solutionId=KB116471
After following these instructions, hit the thanks button to show some love.
Thanks a hundred times over!
Hi everyone,
I thought of making a thread for all Email issues with ICS on any phone. As there are lots of people out there posting a single comment on certain threads, I thought it would be nice to have a collective post where someone can look at fixing some or share knowledge. Mods if you think this area isn't appropriate please move this thread.
Email Issues with ICS
Issue 1: Google App Server Emails (Personal Domain Emails powered by Gmail) using Stock Email App on Galaxy S2 which is very similar to Android Stock Email App. Its apparent that this doesn’t work in Stock ICS on Galaxy Nexus S.
Symptom: After finishing the process of adding accounts, the Inbox keeps loading but not loads.
Reason: Google or Android has changed a key protocol within the implementation of Active sync (exchange) in ICS where redirecting of m.google.com or m.hotmail.com doesn’t work anymore.
Fix: Apparently fixed in 4.0.4 but no claims yet.
Issue 2: Stock Email App on Galaxy S2 drains battery.
Symptom: Battery only lasts 7-8 hours.
Reason: Google Sync isn’t supported by Android on any other app except Gmail app on Android Platform. Your server also requires a maximum calendar lookback and maximum email
lookback,
Fix: Clear the data from the app and cache, delete all accounts and re add them again. or change the exchange policies.
Issue 3: Corporate Emails won’t sync with Stock Email app (Galaxy S2 or Nexus)
Symptom: Connection Error, Couldn’t download all emails. wont send outgoing mail etc
Reason: Policy not supported, PIN authentication doesn’t exist in ICS, One of the features that's lacking from ICS, is S/MIME.
Fix: Change the Exchange server settings or wait for Android and or Samsung to fix the app and Active sync implementation in ICS. Encrypt your sd card (internal and or external)
Bottom Line: Google doesn’t support all the exchange policies and protocols hence suit yourself. As there are more than 4 dozen policies, they only support the most commonly used. Samsung has rubbished the already buggy Stock Email App from AOSP by adding their own rubbish.
So, we are left with a few choices here:
Change back to Gingerbread where everything use to work.
Change your exchange server policies (Corporate accounts)
Wait until Android fixes redirecting protocol for m.google.com or m.hotmail.com services
Wait until Samsung fixes stock email app
Wait until Google fixes stock email app (wont help samsung guys)
Wait until Android implements correct protocols and policies in ICS and Samsung follows up.
Really pathetic to see this happening and where google passes buck to others for their apps, I thought the whole idea of Open Source was to share and learn. Unlike Linux where its usually fixed quickly and across the board.
I realize that this has been an 'issue' for a while now, but I would like to know if there are any new ways secure and use stock email client with Exchange ActiveSync and not have credentials stored in clear text on the device. The same goes for IMAP and POP accounts using the app.
Yes, this is really only an issue on rooted devices, Google's official answer is to enable Device Encryption and that there are other email clients out there that handle credentials better. I personally switched to Touchdown, but would rather use the stock client.
I am trying to come up with a MDM solution for my company and really don't want to have to block devices if I don't have to. But as it stands my only options are have the user buy a 3rd party email client, force encryption and/or block rooted / jailbroken devices or use Citrix and OWA. I've spent a couple days researching this and haven't come up with anything promising that puts a smile on my face.
Any other Exchange Admins out there? How have you dealt with this?
For those who were not aware of your network username, password and domain being stored in clear text. Using Sql Lite open the Email app, Open EmailProvider.db and select HostAuth. Within you will find your connection info staring back at you, clear as day.
Android Issue Log:
https://code.google.com/p/android/issues/detail?id=10809
Google's Response:
https://code.google.com/p/android/issues/detail?id=10809#c128
I have 2 android tablets side by side with identical default email settings, and my new tablet isn't retrieving email.
I'm using the default email client that comes with Android. My email has worked fine on My Asus Tf300T for the pas 18 months. It's currently running 4.2.1.
My new Asus Tf701t is not working properly. It came out of the box with 4.2.2 loaded. I have my settings correct in regards to Pop and SMTP. I can even send email fine. But it's not retrieving emails period. I'ver verified that I'm connecting. When I type a incorrect pop3 server, I appropriately get a error indicating that it's unable to connect. When I type the correct pop3 server, it connects. It even acts like it loading emails up, but nothing is coming down into my email box. I've read around and seen others having this issue as well, but have yet to find a fix.
Is this a BUG with 4.2.2? I find it really hard to believe that a updates Android version would be released with something as common as email not working.
I suppose for now I'll load up a 3rd party email program until this is resolved, or until I find a resolution locally.
I'm open to any thoughts or ideas on potential fixes.
Thanks All,
Brannon
Hi,
I am having problems with the ISP I use for my webmail so I have decided to run my family mail domain on my local mailserver on my Mac Mini as the family mail system.
I can sort out this easily enough and am ready to switch at any moment but...
I have an HTC One Mini (UK Vodafone stock roms). It is running:
Android 4.3
HTC Sense 5.5
Software number 2.12.161.2
HTC SDK API level 5.65
Kernel Version 3.4.10-g5208099
[email protected] #1
SMP PREEMPT
Build Number 2.12.161.2 CL282558 Release-keys
Browser version webkit/534.30
NON-Rooted
I have downloaded all my webmail from the ISP via POP3 into my One Mini using the standard mail app (it is no longer on the isp mail server). When I attempt to change the inbound and outbound mail settings on my HTC One Mini I get a message stating:
Warning Changing the Server will delete the current account
The user mail address will be the same but I would be pointing to a new server with new logon credentials.
I need to preserve my mail messages (sender addresses) as I change the in/out pop servers so that when i change the POP3 account details I can maintain my mail data.
Can anyone explain what I need to do to enable the change safely. I cannot afford to lose these mails nor can I stay with the ISP forever?
Does someone have an export tool?
I can find nothing on the web on this subject so I am turning to this community because there are some wizards out there...
I need to change the inbound, outbound, user name and pw details for the account settings. Is there some way I can poke these values into the internals of the application? Can anyone offer me a script to help to do this? Would this bypass the account content deletion?
All help appreciated,
Many thanks