updated 09:35 am EST, Fri January 17, 2014
Specific changes unclear so far
Starbucks has released an updated version of its iPhone app, 2.6.2, to deal with complaints about lax security with user data. The company is vague about changes in its notes however, which simply state that the update includes "additional performance enhancements and safeguards." Security researchers have also yet to publish any tests of the new code.
It was revealed yesterday that the previous version, 2.6.1, was storing usernames, passwords, and location data in plain text, even showing the latter in the form of latitude and longitude. While the app is unlikely to be a vector for attacks -- especially since stealing its data requires physical access to an iPhone -- Starbucks has come under fire for not taking basic precautions. Initially the company claimed it already had security measures in place.