Here WeGo Offline Maps Password Exposure (Presumably Fixed)

Summary

The Here WeGo Offline Maps Android app puts the user's password in the log, which is unsafe.

Detailed Test

Here's the app I tested:

Here are login credentials appearing in the log.

Notification

I sent this email:

On 1-2-17 I got this reply:

ON 1-3-17 I got this reply, with a $50 gift card! W00t!

On 1-9-17 I got this message:

Can't Retest

I attempted to test the new version, but it won't run on my devices, as of 2-22-17. Perhaps some later version will work again.

Posted 12-26-16 by Sam Bowne
Updated 1-2-17 with developer response
Updated 1-4-17 with developer response
Updated 1-9-17 with developer response
Updated 2-22-17 with attempt to verify fix