Live data from Hacker News

Pokemon Go is a huge security risk

adamreeve.tumblr.com

161–170 of 269 posts

Re: Pokemon Go is a huge security risk

#161

Earlier quoted context omitted.

Kids (under 13 in USA, under 16 in Netherlands) aren't allowed to have gmail accounts AFAIK https://support.google.com/accounts/answer/1350409?hl=en

That's due to a Clinton era law Children's Online Privacy Protection Act of 1998 (COPPA). It forbids companies form collecting personal info from children under 13 without their parents permission.

What's funny is that nobody seems to provide a workflow to actually create accounts for kids. I want to set up a supervised google account for my son for hangouts et al... and I have no idea how. I guess that's not a thing.

Re: Pokemon Go is a huge security risk

#162
post #6

I don't see any access granted to Pokemon Go (it's not even listed) in the "Apps Connected to your Account" page: https://security.google.com/settings/security/permissions I am running on a Nexus 6 and signed in with my Google Account when I first launched the app. Try revoking access and see what happens. Worst case, it might ask you to sign in again.

ditto. Recent android phone. This worries me almost as much as the full access issue, cause I definitely signed it to my google account via the app yesterday.

Re: Pokemon Go is a huge security risk

#163
post #121

Earlier quoted context omitted.

Those are just things it has access to on your phone. That's not the permissions you give it on your Google account, which might include sending email as you. Those you can find here https://security.google.com/settings/security/permissions?pl...

It doesn't appear in that list for me, curious if this is only affecting iPhone users and/or Android 5 and below.

According to https://techcrunch.com/2016/07/11/pokemon-go-shouldnt-have-f... it also happens sporadically on Android 5 and 6, and iPhones.

Re: Pokemon Go is a huge security risk

#166

Here I thought the article was going to be on how Pokemon Go encourages people to wonder into dangerous or restricted areas while paying attention to their phone. The odds of someone getting attacked in a rough area would seem to go up with such an app given how critical situational awareness is. I don't know enough about how the app works to assess that, though. One app that got me thinking about these things was Go…

What city is this? Just curious. I don't know any such city in the United States

Just look up top 10 cities or metro areas for violent crime. Memphis Metro Area, in and around Memphis TN, is one of them on most years. We have lots of good areas and things going on with the worst stuff mainly in impoverished, minority areas. Lots of street gangs that maintain efficiency and image with armed robbery, murder to solve disputes, and/or initiation by murder of innocent, harmless people. Impoverished, white areas are fairly safe with their crooks mainly doing property crime or con jobs. Rarely violent. Most impoverished areas I've been have a mix, though. Middle-class and upper-class areas are also fairly safe outside property crime regardless of mix. Last I checked, city was going mostly Black with lots of Latinos coming in and Whites moving out due to crime. Actually, exits from all races for that. Often outside of Memphis but having jobs inside it. Economy & education keep going downhill predictably. Many companies refuse to deliver to certain areas or leave the city since theft overtakes profits quickly. Many make it, though, with beefed up security. Local grocer has 8 security guards for one store. Police themselves guard best, Chinese, food place. Haha.

That's backdrop. Relevant here, North and South Memphis are largely the worst in terms of violence. You do not want to be in certain neighborhoods regardless of color. Even cops avoid them. Others are a risk more if you're white or look like you have property to take. Local media & cops suppress the worst of it to maintain tourism revenue (eg Elvis, BBQ) although the murders naturally get reported. Examples of censorship were kicking out The First 48 show and rape kit scandal. That Google Maps takes you right near those areas is probably why lots of people think the whole city is hood and trashed rather than just those parts. They never see the good parts unless specifically visiting them family, friends, jobs, or tourism.

So, yeah, it's a real issue. I double-check Google Maps if I'm going anywhere Downtown, Midtown, North, or South as it doesn't differentiate risky vs non-risky areas. I regularly have to force it to make safer routes. Straight-up avoid certain areas of the city unless I'm packing heat & with backup. Otherwise, still all kinds of good things to get involved in over there with most folks being alright. We just in a rough area and economy. :)

Note: As another example, BLM protestors sieged our Interstate (I-40) last night for hours then dispersed into Downtown. Local news cautioned everyone to stay away from that area for safety as it's normally dangerous but now unpredictable. Bad route at the least. Google routes still offering me a speedy trip through there, though. Unreal.

Re: Pokemon Go is a huge security risk

#167

Here I thought the article was going to be on how Pokemon Go encourages people to wonder into dangerous or restricted areas while paying attention to their phone. The odds of someone getting attacked in a rough area would seem to go up with such an app given how critical situational awareness is. I don't know enough about how the app works to assess that, though. One app that got me thinking about these things was Go…

Already happened: http://abcnews.go.com/US/armed-robbers-pokemon-app-target-vi...

Damn. That was one of the risks we identified with prior GPS apps. Hate it's happened but appreciate the link.

Re: Pokemon Go is a huge security risk

#168

Here I thought the article was going to be on how Pokemon Go encourages people to wonder into dangerous or restricted areas while paying attention to their phone. The odds of someone getting attacked in a rough area would seem to go up with such an app given how critical situational awareness is. I don't know enough about how the app works to assess that, though. One app that got me thinking about these things was Go…

There was a lot of controversy previously about mapping applications having "Avoid" areas. They were basically neighborhoods with high crime rates which also happened to be neighborhoods with high minority populations. Small business owners/home owners didn't like being grouped as "avoid" when they didn't have any real control over it. Or something like that. [0] http://www.npr.org/2012/01/25/145337346/this-app-was-m…

It's funny you say that as I just confirmed and cited it in another comment:

https://news.ycombinator.com/item?id=12073592

A prior comment related to Amazon Prime's apparent discrimination. I pointed out that Prime was avoiding crime not minorities. Local drivers, which Amazon outsources to, confirmed it for me personally in an unofficial sense where they agreed & personally wouldn't deliver to those areas.

https://news.ycombinator.com/item?id=11545009

So, it's a recurring theme but the crime angle is usually downplayed by left-leaning media. I agree with Microsoft's approach but I urge companies focus on crime statistics. There are many areas that are white and have tons of violent crime. Many areas are black with little violent crime. It needs to be about avoiding violent areas rather than minority areas specifically.

Re: Pokemon Go is a huge security risk

#169

It's worth noting that Niantic Labs (the folks who licensed Pokemon from Nintendo and made Pokemon Go) are actually owned by Google [0]. This is Google giving itself permission to do Google things. Dollars to doughnuts they tried to use some internal-only API because things kept falling over at pokemon.com. Is this a massive UX failure? Certainly. Is giving Google permission to access Google stuff a "Huge security ri…

Google's own apps often don't request this much permission. Basic security principles.

Re: Pokemon Go is a huge security risk

#170

Caveat: I've seen a number of players state or imply that playing this game has been the first decent exercise they've had in years. Lack of exercise is a far greater threat to your well-being than having your Google account hacked, so if that's what it takes, go ahead and play the game anyway.

> Lack of exercise is a far greater threat to your well-being than having your Google account hacked... This is by no means universally true. Plenty of people get enough exercise outside of the app, and plenty of people have Google accounts for which compromise could be very significant. It should at the very least be disclosed in the OAuth flow that I'm giving away admin rights to the app. Facebook's flow won't even…

You're saying having your Google account hacked is worse for your health than never exercising?

What is wrong with you?

Post reply on HN