Printed from http://www.electronista.com

Starbucks iPhone app stores unencrypted user data, report reveals

updated 11:51 am EST, Thu January 16, 2014

Coffee vendor claims it has put 'security measures in place'

The official Starbucks iPhone app doesn't encrypt usernames, passwords, or location data, a security researcher has revealed. Daniel Wood says he published the information only after receiving no response from Starbucks. To see the personal data, a person needs to have physical access to an iPhone -- but the content is stored in plain text, and even lists location data in latitude and longitude.

Confronted with the issue by Computerworld, Starbucks says that it has "security measures in place now related to that." Wood tells The Verge, however, that those measures are irrelevant, since it's the app itself that needs to be secured.

The damage potential of the vulnerability is relatively limited, but could let someone stalk a victim, or buy things at Starbucks as long as the "auto-replenish" option is on for a person's funds. If they use the same password in other locations, it could be a way of hacking into those accounts.





By Electronista Staff
Post tools:

TAGS :

toggle

Comments

  1. OldMacGeek

    Fresh-Faced Recruit

    Joined: 08-04-10

    ". . . needs to have physical access to the phone . . ."

    OK, someone has access to my phone, and they've managed to crack my fingerprint or PIN code and they now have access to all of my information. Ya know - the Starbucks stores I frequent or my user ID and password for my Starbucks app is kind of the least of my worries . . .

    Get over yourself, Mr. Security Guy.

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

toggle

Most Popular

Sponsor

Recent Reviews

Dell AD211 Bluetooth speaker

For all of the high-priced, over-engineered Bluetooth speakers in the electronics market, there is still room for mass-market solution ...

VisionTek 128GB USB Pocket SSD

USB flash drives dealt the death blow to both the floppy and Zip drives. While still faster than either of the old removable media, sp ...

Kodak PixPro SL10 Smart Lens Camera

Smartphone imagery still widely varies. Large Megapixel counts don't make for a good image, and the optics in some devices are lacking ...

Sponsor

toggle

Most Commented

 
toggle

Popular News