A disabled security setting meant to protect authentication across Android versions of key apps paved the way for attackers ...