Jaeho Lee

The issue concerns the storage of sensitive information during the authentication process in the Orbitz application. Specifically, the `username` and `password` are stored in the log, which may be accessible to attackers via logcat, potentially allowing them to obtain these credentials.

The Infinite Design application sends a `username` and `password` via TCP without any encryption during login, as demonstrated by sniffing of a public Wi-Fi network.

The issue concerns the storage of sensitive information during the authentication process. Specifically, the `username` and `password` are stored in the log, which may be accessible to attackers via logcat, potentially allowing them to obtain these credentials.

The issue concerns the storage of sensitive information during the authentication process. Specifically, the `username` and `password` are stored in the log, potentially making them accessible to attackers via logcat.

The issue concerns the storage of sensitive information during the authentication process. Specifically, the `username` and `password` are stored in the log, potentially making them accessible to attackers via logcat.

The application stores token information, equivalent to the username and password, in the log during authentication. This information may be accessible to attackers via logcat, potentially allowing them to obtain sensitive user credentials.