I just plugged my pocket into my work computer (macOS) USB to charge, and a Pocket drive with all of my recordings popped right up on the desktop. Unencrypted. MP3s of all conversations could be accessible to anyone who gains physical access to the device.
This seems like a huge flaw in the design. I assume it will be addressed soon in a firmware update? I can’t reasonably use it with this model in place!
Hey @chucksense you can disable usb access through the settings in your app when the device is connected!
Oh phew, thank you.
I don’t see that option, where do I find it? And for it to be enabled by default seems wacky.
You will have “Enable Pocket Web Sync” option right under software version in the latest version of the app
I don’t see that options either. I have the latest non-beta version (0.5.5, play store isn’t reporting any updates available), do I have to opt in to the beta stream to get that?
Here is what I see. No option for Enable Pocket Web Sync. But as a general suggestion, the fact that this makes your device completely open access ought to be communicated too.
Theoretically - data access and encryption are two separate issues.
Data should be encrypted whether I have web access enabled or not, i.e. encrypted on device regardless.
Then, if I want web access, I want it encrypted and enter a PW or PIN to access etc.
Yes, excellent call out, thank you.
@mhirrrr @bharat @chay I thought I lost my device this weekend and was surprised to learn from this thread that the device is not encrypted and that anyone who finds it can just plug it into a computer and access all my past recordings. Are there plans to add device encryption to address the possibility of device loss?
Hi @Smearp, no need to worry. USB-C data access is only enabled when the device is connected to the Pocket app using your account. If the device is disconnected and get turn off, USB access is automatically disabled, so the recordings won’t be accessible over USB.
