WARNING: A Possible webOS virus?

[AstroTerp]

Hi Everyone!

I just had a very weird experience with my Touchpad, and I thought it important to share with everyone.

I was browsing apps in the app catalog and accidentally clicked to purchase a paid app while I was scrolling. I had recently entered my webOS account credentials so it skipped straight to payment processing. However, instead of using my credit card on file in my webOS account it told me that I needed to have a credit card on file in order to purchase apps. I went to the app catalog preferences to see that sure enough there was no credit card listed there. I was 100% positive that I had entered my credit card and have even purchased apps with it in the past. Even more alarming though was that the email address for sending receipts was not my own. Not only was it not my own email address, but it was an address I did not know and had never even seen before!

I was almost duped and was in the middle of correcting the information before I became suspicious, so I had already removed the foreign email address by then. I do remember that it was a female sounding name something.something@gmail.com.

I tried erasing all apps, and a secure full erase, but the anomaly did not go away. Finally I used the Doctor and that finally fixed it. Has anyone else had this happen to them?

Be careful out there!

[HardBeatZ]

Originally Posted by AstroTerp

Hi Everyone!

I just had a very weird experience with my Touchpad, and I thought it important to share with everyone.

I was browsing apps in the app catalog and accidentally clicked to purchase a paid app while I was scrolling. I had recently entered my webOS account credentials so it skipped straight to payment processing. However, instead of using my credit card on file in my webOS account it told me that I needed to have a credit card on file in order to purchase apps. I went to the app catalog preferences to see that sure enough there was no credit card listed there. I was 100% positive that I had entered my credit card and have even purchased apps with it in the past. Even more alarming though was that the email address for sending receipts was not my own. Not only was it not my own email address, but it was an address I did not know and had never even seen before!

I was almost duped and was in the middle of correcting the information before I became suspicious, so I had already removed the foreign email address by then. I do remember that it was a female sounding name something.something@gmail.com.

I tried erasing all apps, and a secure full erase, but the anomaly did not go away. Finally I used the Doctor and that finally fixed it. Has anyone else had this happen to them?

Be careful out there!

Can you send me a private message with your webOS account email address and your current device serial number. I would like to check some records on our end.

Also do you remember what last application it was that prompted this next series of steps to occur?

[GMMan]

Did you install any homebrew apps? Apps from the Catalog should not be able to mess with your Palm Profile. Also, could your Palm account have been compromised (on the web, not the TP)?

[AstroTerp]

Originally Posted by GMMan

Did you install any homebrew apps? Apps from the Catalog should not be able to mess with your Palm Profile. Also, could your Palm account have been compromised (on the web, not the TP)?

Of course I've installed homebrew apps. They are some of the best parts of webOS. I don't think my Palm account was compromised on the web, otherwise using webOS Doctor would not have fixed it.

[fxspec06]

was your touchpad NIB or did you buy it used.. ?

sounds like you may have been using the pad on someone else's webos account..........

[AstroTerp]

The Touchpad was NIB when I received it. The app catalog account was setup fine originally. I have the emailed app receipts to prove that.

[SmartKidsOnTheRun]

Thanks for sharing. If it happens again, grab a screen shot (power-button + home-button) and post it.

Are you going to try and reload the previous apps you had?

[cyberprashant]

sounds like a glitch maybe on palm's side - maybe the account database infrmation on palm's servers somehow got corrupt and your profile was associated with someone else's account. wierd

[AstroTerp]

I am reloading my homebrew and patches 1 by 1, and checking after each time. So far everything seems to be fine. Maybe it was an HP glitch. I just don't understand why it took a full Doctor to fix it. Shouldn't the "secure full erase" have done the same thing?

[rwhitby]

Originally Posted by cyberprashant

sounds like a glitch maybe on palm's side - maybe the account database infrmation on palm's servers somehow got corrupt and your profile was associated with someone else's account. wierd

That would also be my first assumption.

-- Rod

[patapoof]

don't worry about a thing ...I have good news for you about your lost credit card info ...I found it up on facebook...

[AstroTerp]

It just happened again.

I am attaching a picture as requested. I assure you that my email address is NOT spam@email.com.

The last thing I installed was the homebrew patch "find in page."

Another piece of possibly relevant information that someone reminded me of, is that I am running 2 Touchpads on the same webOS account. Could this be confusing the app payment system?

[amrcc]

I have installed Find in Page and just checked mine and am ok. I have 5 TPs on one account.

We are going to need to see your list of patches and probably some Impostah data....

Update:
Not that a patch could even sneak something in like that, but I checked over the source for all the versions of that patch and there is nothing remotely suspicious in there...

[spud101]

Originally Posted by AstroTerp

It just happened again.
Another piece of possibly relevant information that someone reminded me of, is that I am running 2 Touchpads on the same webOS account. Could this be confusing the app payment system?

That may be the cause. I don't think HP supports multiple identical devices on one profile account. Probably they detected this and changed the profile on one (or all?) of your devices. Just guessing here.

[amrcc]

Also make sure and get HardBeatz the info he was asking for. It won't hurt to have as many eyes on your "issue" as possible (both HP and us). The sooner we/you figure out what happen the sooner the speculation will stop...

[rwhitby]

Originally Posted by spud101

That may be the cause. I don't think HP supports multiple identical devices on one profile account. Probably they detected this and changed the profile on one (or all?) of your devices. Just guessing here.

Multiple touchpads on the same profile are most definitely supported. I do it all the time.

-- Rod

[AstroTerp]

Ok. I officially feel like an idiot!

Sine the app catalog was updated the hulu fix no longer blocked it from opening. I assumed that this meant that there was no longer a conflict between the two. However, while the hulu fix no longer breaks access to the app catalog, it appears that it still breaks app payments.

DOH!!!

[patapoof]

Originally Posted by rwhitby

Multiple touchpads on the same profile are most definitely supported. I do it all the time.

-- Rod

as you have spoken of multiple devices on the same account, I have my Pre3 and Touchpad both on the same account but the Veer had to be on another account, is that true, or did I do something incorrectly?

[rwhitby]

Originally Posted by patapoof

as you have spoken of multiple devices on the same account, I have my Pre3 and Touchpad both on the same account but the Veer had to be on another account, is that true, or did I do something incorrectly?

I spoke of multiple touchpads, not multiple phones.

One phone, many touchpads is the rule.

-- Rod

[RICKV]

I don't have the Hulu fix and have had a quirk in my webOS profile a while back where my security question ended up being in German!!!

But resetting the question to something else did the trick. May not be related at all to what we are seeing here but felt it could be interesting to post... Just in case