Hello guys,
I'am writing some small security report about Android devices in general related to accessing information from RAM.
Use case:
User opens 3rd-party app, enters some password in password field. Source code of this application shows that this password information available in RAM while application is up and running. For example in class AllMyAppPasswords in public String myPassword. Now is the question about possible way to access this password info (correct me if I am wrong):
1. The way to access this pwd is to dump the memory.
2. For memory dump I need to have device to be rooted.
3. In order to root the device I need to unlock bootloader.
4. To achieve unlock bootloader and root operations it is requires that device needs to be rebooted at least once.
4. After device is rebooted the information about password is gone from RAM
Conclusion: it is not possible to get password residing in RAM memory from app if device is non-rooted. Is it correct?
I'am writing some small security report about Android devices in general related to accessing information from RAM.
Use case:
User opens 3rd-party app, enters some password in password field. Source code of this application shows that this password information available in RAM while application is up and running. For example in class AllMyAppPasswords in public String myPassword. Now is the question about possible way to access this password info (correct me if I am wrong):
1. The way to access this pwd is to dump the memory.
2. For memory dump I need to have device to be rooted.
3. In order to root the device I need to unlock bootloader.
4. To achieve unlock bootloader and root operations it is requires that device needs to be rebooted at least once.
4. After device is rebooted the information about password is gone from RAM
Conclusion: it is not possible to get password residing in RAM memory from app if device is non-rooted. Is it correct?