{"id":58655,"date":"2014-01-17T01:44:13","date_gmt":"2014-01-16T23:44:13","guid":{"rendered":"http:\/\/onsoftware.en.softonic.com\/?p=58655"},"modified":"2025-07-02T00:56:31","modified_gmt":"2025-07-02T07:56:31","slug":"starbucks-app-vulnerable-to-hacking","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/starbucks-app-vulnerable-to-hacking\/","title":{"rendered":"Starbucks app vulnerable to hacking"},"content":{"rendered":"

The Starbucks app for Android<\/a> and iOS<\/a> is vulnerable to hacking, according to security researcher Daniel Wood<\/a>. The app apparently stores user information in unencrypted clear-text, which makes that information extremely easy to decipher if a hacker can get his or her hands on it. “Within session.clslog there are multiple instances of the storage of clear-text credentials that can be recovered and leveraged for unauthorized usage of a users account on the malicious users\u2019 own device or online at https:\/\/www.starbucks.com\/account\/signin<\/a>,” writes Wood.<\/p>\n

Still, the security flaw cannot be exploited unless someone has physical access to a victim’s phone. If a victim’s phone is stolen, the user information like name, address, email, and Starbucks password can easily be obtained. This is why it’s a good idea to enable Android Device Manager and Find My iPhone \u00a0so you can remotely wipe your phone if it is lost or stolen.<\/p>\n

\"Starbucks<\/p>\n

Starbucks has responded and verified that the vulnerability exists but also notes that it is unlikely that a hacker will have physical access to a victim’s phone. The broader security issue is if a person uses the same password for other sites, especially for banking. To protect yourself from data breaches, it’s best to use a password manager to create and store different passwords for each site.<\/p>\n

The recent data breach at Target<\/a> and a string of high-profile hacks at companies like Adobe<\/a> should be enough to pressure Starbucks into rewriting the app so that it doesn’t store user information in clear-text. Starbucks has not yet promised to fix the vulnerability, though it’s difficult to see why they wouldn’t.<\/p>\n

Source: ReadWrite<\/a><\/p>\n

RELATED STORIES<\/p>\n