Jump to content

Pokémon Go may have full access to your Google account


RV_

Recommended Posts

This may be an issue for some of the folks here that like Geo Caching games and the like.

 

Excerpt:

 

"The app doesn't always gain explicit permission when iPhone and iPad users sign up to the game with their Google account.

 

If you signed up for Pokémon Go with your Google account, you might not know it but the game now has "full account access."

 

That can be a major security risk. Adam Reeve, who first documented the issue on his Tumblr blog, said it appears to be a problem isolated to iPhones and iPads. It's not thought to affect Android devices.

 

In our testing on two iPhones, the Pokémon Go app didn't explicitly ask permission for full account access when logging in with a Google username and password. By this point, it should have told us what data the app needs. Instead, it simply skipped straight to the app's terms of service, which makes no reference to the full account access.

 

Under the hood, you've given the app and its creators access to your Gmail account and inboxes, search history, personal information, Google Photos, everything in Google Drive, search and location history, and more.

 

Not only can the app read your data, inbox, calendar events, and search history, it can also modify it. That's usually reserved for trusted apps, like browsers and mail clients -- such as Google Chrome -- and not games or most other apps.

 

Here's what you can do

If you did sign up with your Google account, here's how to revoke access:

1.Log in to your Google account and open up the "Apps connected to your account" page.
2.Scroll down to "Pokemon Go," then hit "Remove Access."
3.Confirm by hitting "OK."

 

The original article has a lot more info and screen shots to clarify here: http://www.zdnet.com/article/pokemon-go-is-a-major-security-risk-for-your-entire-google-account/?ftag=TREc64629f&bhid=19724681974700635514865380622813

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...