Playing 'Pokemon Go' Is Potentially a Huge Security Risk If You're Using Your Google...

TouchArcade

iPhone Gaming
iPhone Gaming
While we've already established that Pokemon Go [
Please, Log in or Register to view URLs content!
] is
Please, Log in or Register to view URLs content!
, not everything is as awesome as it seems in the land of Pokemon.
Please, Log in or Register to view URLs content!
by
Please, Log in or Register to view URLs content!
, principal architect of the security firm
Please, Log in or Register to view URLs content!
, if you're playing Pokemon Go via logging in through your Google Account, you're potentially giving Niantic and Pokemon Go access to everything on your Google account. What can you do with full access to a Google account? Well, as Reeve
Please, Log in or Register to view URLs content!
:


Let me be clear - Pokemon Go and Niantic can now:

  • Read all your email
  • Send email as you
  • Access all your Google drive documents (including deleting them)
  • Look at your search history and your Maps navigation history
  • Access any private photos you may store in Google Photos
  • And a whole lot more

Sure enough, I double checked my own Google Account, and Pokemon Go has full access to everything. Oddly enough, Niantic's other game, Ingress [
Please, Log in or Register to view URLs content!
], which also uses your Google account only requests permission to basic account info:

Screen-Shot-2016-07-11-at-1.49.06-PM.png


The other option for playing on iOS is by using a
Please, Log in or Register to view URLs content!
, but it seems the whole Club Pokemon system has been offline ever since Pokemon Go got slammed so hard. Also, there doesn't appear to be any way to transition from a Google account to a Club Pokemon account, as your progress is locked to your account. Right now, this is all feeling kind of gross as Google really ties you into their ecosystem and I really, really don't like the idea that Pokemon Go has access to send email as me.

If you want to check what access Pokemon Go and other apps connected to your Google account have,
Please, Log in or Register to view URLs content!
, log in, and then go to the
Please, Log in or Register to view URLs content!
link. Also, while you're in there, it's a good idea to revoke access to stuff you're not using anymore. We're going to keep a close eye on this, so stay tuned for updates on how this all ends up unfolding.

Please, Log in or Register to view URLs content!
 

Users who are viewing this thread

Top