Hi Gregor, The behavior you're seeing is working as intended. Clearing credentials on sim swap was of questionable benefit, and it was causing problems for people who traveled internationally or had multiple sims.
See http://code.google.com/p/android/issues/detail?id=17574 (and all the other duplicate bugs associated with that bug). -- Nick On Tue, Aug 14, 2012 at 6:59 AM, Gregor Khan <[email protected]> wrote: > I just want to put into discussion what I consider it a security issue in > ICS... > I would like to have your opinion on it... > > I have an device running Android ICS 4.0.4.. > > If I exchange the SIM card the google account does login automatically, > without requesting the acccount password like it was in Android 2.3.6.... > > As it is handled in AccountManagerService.java, it could be traced it was > changed by google... > > Is this a bug or feature? > > IMHO it is a security issue. > > Looking forward for your comments.... (Please provide official document if > available to the public) > > Thank you very much. > > Kind regards > > Gregor > > -- > You received this message because you are subscribed to the Google Groups > "Android Security Discussions" group. > To view this discussion on the web visit > https://groups.google.com/d/msg/android-security-discuss/-/0mxlLpEwGdwJ. > To post to this group, send email to > [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/android-security-discuss?hl=en. > -- Nick Kralevich | Android Security | [email protected] | 650.214.4037 -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/android-security-discuss?hl=en.
