Starbucks: We Stored Your Passwords in Plaintext

The Starbucks mobile app saves your passwords and other user information in unsecured plaintext, Starbucks executives confirmed Thursday

User information, including passwords, email addresses, usernames and geolocation data, was unencrypted — making it readily accessible to anyone who plugs the handset into a PC, according to a report detailing the vulnerability.

The Starbucks app, which is available to iOS, Android and Blackberry users, is the most popular mobile payment app in the US

According to the report, passwords are stored this way to make it easier for users to make purchases. — Customers only need to enter their password and username once, when first using the app, and can make all subsequent purchases without entering any log in information. Read more...