topic Re: Fix Security after reinstall iOS App in Arlo

Fix Security after reinstall iOS App

Mb3210 — Wed, 07 Feb 2018 01:36:17 GMT

I was having issues with Geolocation across multiple phones. So I thought maybe deleting the app and reinstalling might help.

I was very surprised to find out that after reinstalling the app I DID NOT NEED TO SIGN IN. My prior settings, log in, password, Touch ID, were all intact.

Not willing to wipe my device to see how deep this goes.

To me that is crazy.

Re: Fix Security after reinstall iOS App

Mb3210 — Wed, 07 Feb 2018 01:38:43 GMT

Oh yeah, also logging out, then deleting the app. Then reinstalling. Login credentials STILL auto populate. Goes right to ENABLE Touch ID.

Seems relatively insecure to me.

Re: Fix Security after reinstall iOS App

JamesC — Thu, 08 Feb 2018 18:21:11 GMT

Mb3210,

I've escalated this topic to engineering for review. Could you provide what model iOS device you are using along with the iOS version?

JamesC

Re: Fix Security after reinstall iOS App

Mb3210 — Thu, 08 Feb 2018 18:29:09 GMT

I have iPhone 8 Plus running 11.3 beta 2. My other phone is a 6s running 11.2.5. Happens on both phones. The log in is persistent after logging out, deleting, and reinstalling app.

Re: Fix Security after reinstall iOS App

Mb3210 — Fri, 09 Feb 2018 16:05:51 GMT

Another security issue I am noticing.

I have Touch ID active on both the 8 and 6s. When I open the app it has my username AND password already completed. Sometimes it prompts for Touch ID. Sometimes it does not. When it doesn’t ask for Touch ID the password is already there so basically no security. I will attempt to screen record.