Latest Google Wallet hack picks your pocket

Google Wallet users might be wise to start getting a little nervous.

Yesterday, researchers outlined a complicated way to crack the Google Wallet PIN used to make purchases with the smartphone-based payment system. Now there's a new hack that could let a stranger gain access to the funds of Wallet users.

Described yesterday by blogging site The Smartphone Champ, the hack doesn't require extra software, root access, or any particular skills in general.

Instead, all someone apparently has to do it clear the data for the Google Wallet app in the smartphone's application settings menu. The app is then reset and will prompt the person to enter a new PIN the next time it launches. Since the Google Wallet information is linked to the device and not to the actual account, a person can then use the Google prepaid card already tied to the device to gain full access to the owner's funds, explained The Smartphone Champ.

This latest Google Wallet hack follows an earlier hack reported by security blogging site Zvelo.

That one, however, required root access to the device, something that requires a certain amount of time, effort, and skill (or luck) to acquire. But the new hack can be performed by anyone within a matter of minutes.

Android blogging site Android and Me tested the hack and found that it worked on a Galaxy Nexus phone with the latest official version of Google Wallet.

 

People who lose their phones can be especially vulnerable to a quick hack like this. So Android and Me further suggests that Google Wallet users install a security tracking app such as Lookout so they can locate the phone if it ever gets lost.

 

Posted by Lance Witney, http://news.cnet.com/8301-1009_3-57374589-83/latest-google-wallet-hack-picks-your-pocket/?tag=txt;title