Hi Nick, > Clearing credentials on > sim swap was of questionable benefit, and it was causing problems for people > who traveled internationally or had multiple sims. This would be useful in the enterprise. Perhaps Google could offer it and make it configurable. For example, through the application of a policy.
Jeff On Tue, Aug 14, 2012 at 10:44 AM, Nick Kralevich <[email protected]> wrote: > > Hi Gregor, > > The behavior you're seeing is working as intended. Clearing credentials on > sim swap was of questionable benefit, and it was causing problems for people > who traveled internationally or had multiple sims. > > See http://code.google.com/p/android/issues/detail?id=17574 (and all the > other duplicate bugs associated with that bug). > > -- Nick > > > On Tue, Aug 14, 2012 at 6:59 AM, Gregor Khan <[email protected]> wrote: >> >> I just want to put into discussion what I consider it a security issue in >> ICS... >> I would like to have your opinion on it... >> >> I have an device running Android ICS 4.0.4.. >> >> If I exchange the SIM card the google account does login automatically, >> without requesting the acccount password like it was in Android 2.3.6.... >> >> As it is handled in AccountManagerService.java, it could be traced it was >> changed by google... >> >> Is this a bug or feature? >> >> IMHO it is a security issue. >> >> Looking forward for your comments.... (Please provide official document if >> available to the public) >> >> Thank you very much. >> >> Kind regards >> >> Gregor >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Android Security Discussions" group. >> To view this discussion on the web visit >> https://groups.google.com/d/msg/android-security-discuss/-/0mxlLpEwGdwJ. >> To post to this group, send email to >> [email protected]. >> To unsubscribe from this group, send email to >> [email protected]. >> For more options, visit this group at >> http://groups.google.com/group/android-security-discuss?hl=en. > > > > > -- > Nick Kralevich | Android Security | [email protected] | 650.214.4037 > > -- > You received this message because you are subscribed to the Google Groups > "Android Security Discussions" group. > To post to this group, send email to > [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/android-security-discuss?hl=en. -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/android-security-discuss?hl=en.
