Google Wallet Cracked – Vulnerability Exposes PIN On Rooted Devices [video]

This isn't a vulnerability. If you root your device and disable the lockscreen, then it's pretty obvious that anyone who physically possesses your device can access anything on the device. The way Android is designed, you don't even need a secure element, as apps don't have access to other apps' private data. That is, unless you root and disable the lockscreen, which goes against the Android design.

In other news, criminals can read your email if you leave your laptop unlocked and unattended in public.

> "Disable USB Debugging – When enabled, the data on mobile devices can be accessed without first passing a lock screen challenge unless Full Disk Encryption is also enabled."

That's an outright lie. Since the press release mentions "Full Disk Encryption", they can only be talking about Android 3.0+, which doesn't allow MTP or adb access until the device is unlocked, regardless of whether disk encryption is being used.