On Wed, Apr 8, 2009 at 1:26 AM, Andreas Kostyrka <[email protected]> wrote:
>
> Am Wed, 8 Apr 2009 06:38:07 +0100
> schrieb mike quinn <[email protected]>:
>
>> I think their concern was if the CC number is stored on the phone and
>> then the phone is lost/stolen.  Simple and valid concern.
>
> That concern applies also (albeit the abuse potential is somewhat
> smaller) if Google Checkout stores the data in their account, their
> phone is authenticated to your Google account, and one wonders if these
> credentials are stored on the phone too. (Basically, does the phone
> keep the password somewhere, or does it keep some intermediate shared
> secret that was derived from the password with help of the servers?)
>
> Andreas

As I understand it, Android saves your Google password for ever (at
least until you change the SIM), so if your phone was lost or stolen,
nothing (except the screen lock) prevents someone from buying apps on
your behalf. You have 24 hour refund window but you can not use it
without the phone. This, in practice, is probably not as bad as it
sounds. Once you report the loss of the phone to the carrier they
suspend the phone thereby terminating the internet access at which
point it becomes a useless brick unless you change the SIM. Meanwhile,
it is unclear how you will get refund for the transactions that
happened on your behalf. You will either have to talk to Checkout
customer support or contact the merchant directly for the refund. Once
you get another Android phone and login with the same
username/password, you will be able to recover all previous purchases
though.

Inder
ps. The situation remains the same whether you entered the creditcard
on the phone or the Web.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Android Discuss" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/android-discuss?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to