Pokemon Go is a huge security risk
adamreeve.tumblr.com
Pokemon Go is a huge security risk
1–10 of 269 posts
Re: Pokemon Go is a huge security risk
#2So the solution is to create a throw away gmail account, I guess?
Or not bother playing at all.
Re: Pokemon Go is a huge security risk
#3Better/more neutral title: Pokemon Go asks for full Google permissions
Re: Pokemon Go is a huge security risk
#4I fond of e-sport. So it’s interesting for me to test new game. Pokemon go stole the scene at a grate pace. But this game is a really risky for cybersecurity. Maybe we don’t need such program.
Re: Pokemon Go is a huge security risk
#5Better/more neutral title: Pokemon Go asks for full Google permissions
It doesn't ask though:
"Normally you’d see a little message saying what data the app is going to be able to access - something like “This app will be able to view your email address and name”. For some reason that’s not shown in this case"
Re: Pokemon Go is a huge security risk
#6I don't see any access granted to Pokemon Go (it's not even listed) in the "Apps Connected to your Account" page: https://security.google.com/settings/security/permissions
I am running on a Nexus 6 and signed in with my Google Account when I first launched the app.
Try revoking access and see what happens. Worst case, it might ask you to sign in again.
Re: Pokemon Go is a huge security risk
#7So, Pokemon Go is not listed under my account... Could it be the mallware version?
Re: Pokemon Go is a huge security risk
#8Any idea how long the signup page is down? I made my account yesterday and, when forced between using my google auth and making some pokemon.com account, it was a no brainer to not use my google account. It took me a few tries but since this is a game and not something in the realm of life-and-death, I found it wasn't horrible to actually wait. And try again.
The entire issue is predicated on using your google account credentials which isn't really mandatory. Maybe I'm overly cautious but I don't use my google account to auth anywhere. If that's the only option, and it's not a google product.. then it looks like I'm not using that service.
Re: Pokemon Go is a huge security risk
#9And just like that I will never sign in with Google anywhere ever again. I just assumed that an app couldn't grant itself full permissions without notifying me, but now I can see why that might not be the case since they are free to present whatever UI they want in app.
In my dream world Google would revoke Niantic's API access forever in order to make an example out of them. Maybe, eventually, if they can prove that they didn't hoover up all the information they had access to they can be unbanned after a year.
Unlikely though considering they used to be a part of Google.
Re: Pokemon Go is a huge security risk
#10Any idea how long the signup page is down? I made my account yesterday and, when forced between using my google auth and making some pokemon.com account, it was a no brainer to not use my google account. It took me a few tries but since this is a game and not something in the realm of life-and-death, I found it wasn't horrible to actually wait. And try again. The entire issue is predicated on using your google accoun…
It's been down since at least last Thursday. The way I hear it it's been much longer.