Sunday 17 December 2017

You won't believe what password Lenovo used for file-sharing app


Emma Clark

Lenovo's ShareIt app set a default password that makes the worst passwords of the year list on a fairly consistent basis.

Every year, the worst passwords of the year are named and shamed, and everyone wonders who could possibly use one of them. It turns out that Lenovo thought that one of those passwords was secure enough to use for its ShareIt app.

The program allows file sharing between PCs and phones/tablets has a default password when it sets up a Wi-Fi hotspot so that it can transfer files. And that password was “12345678.” This basically meant that anyone could connect to the hotspot just by taking a relatively straightforward guess as to what the password might be.

That password made it to third on the list of the worst passwords of 2015. It was only beaten to the top two spots because it’s slightly longer than “123456” and not quite as blatant as “password.”

Core Security, which spotted the password, also found that files being shared were transferred via HTTP without encryption. This could potentially allow an attacker to view the data being transferred.

The good news is that a patch has been rolled out that changes both of these issues. If you use ShareIt, make sure you update to the latest version.

Online Editors

Promoted Links

Business Newsletter

Read the leading stories from the world of Business.

Promoted Links

Also in Business