AOL’s iPhone App AIM does not encrypt your password.
July 30th, 2009
iPhone users watch out, any app or program can steal the password saved in the AIM application very easily due to AIM storing the password in an unencrypted open plist file.
The file is in AIM.app’s “Documents” directory, name Accounts.account, and if an app has read access, then it can steal your username, password, and just about all your stored information.
What is worse is this is it does not stop at the AIM app, IM+, another IM service provider also stores the password in plain site in another unsecured plist file.
This really must stop, iPhone programmers, stop being lazy and secure your files.