News for hackers. Stuff that matters.

A comment on Pokemon Go is a huge security risk.

Re:Pokemon Go is a huge security risk by seagray on Monday July 11, 2016 @10:49AM (#12071402)
I don't see any access granted to Pokemon Go (it's not even listed) in the "Apps Connected to your Account" page: https://security.google.com/settings/security/permissions

I am running on a Nexus 6 and signed in with my Google Account when I first launched the app.

Try revoking access and see what happens. Worst case, it might ask you to sign in again.

[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by jpreiland on Monday July 11, 2016 @02:19PM (#12073072)
on iPhone 6s, checked and saw it had full access. I revoked access and opened the app up. It was stuck loading so I logged out and back in. Went back to check app permissions on google and it had full access again.
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by towelrod on Monday July 11, 2016 @04:35PM (#12074307)
Wait, you revoked access from within google, and then the pokemon app was able to give itself access again without asking for permission?
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by jpreiland on Monday July 11, 2016 @05:21PM (#12074780)
Yes. I'm not sure if I need to re-log in the app or not though. Maybe if it didn't freeze and I didn't have to re-log then it might have left the access revoked. But it seems that once I re-log the full access goes back into effect.
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by peterkelly on Monday July 11, 2016 @10:07PM (#12076265)
re-logging in is re-authorization
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by bewatson on Monday July 11, 2016 @04:53PM (#12074495)
if true, something is seriously messed up
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by btown on Monday July 11, 2016 @01:04PM (#12072453)
It's possible it only does this on iOS, because I signed up normally using iOS and I see this at that link:

https://dl.dropbox.com/s/bgii07rzoddj504/Screenshot%202016-0...

[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by mordocai on Monday July 11, 2016 @01:06PM (#12072470)
Just chiming in that I am another person (using a OnePlus One with cyanogenmod) that does not even see pokemon go in my "Apps Connected to your Account".
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by peterkelly on Monday July 11, 2016 @10:09PM (#12076269)
According to an update posted now on the article, the problem is only on the iOS version
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by shkkmo on Monday July 11, 2016 @12:56PM (#12072374)
I also don't see any access granted to Pokemon Go, I signed in on my nexus 5x and was also in the field test.
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by bitewhite on Monday July 11, 2016 @01:48PM (#12072846)
On my iPhone 6s, it shows full access.

Screen: http://imgur.com/YX9K8Ds

[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by chipgap98 on Monday July 11, 2016 @01:14PM (#12072566)
Yeah I'm on a Galaxy S7 and signed up with my google account as well and see no mention of it on my connected apps page
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by cjp on Monday July 11, 2016 @04:57PM (#12074533)
Same here. I recall a "give pokemon go access to your google contacts" dialog (or similar), which I denied.
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by xufi on Monday July 11, 2016 @10:12PM (#12076279)
Same here. I guess "gotta catch 'em" all means something else in this instance
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by casenjo on Monday July 11, 2016 @07:00PM (#12075472)
Same here, OnePlus One running CM13, I can't see it in the list (neither release or the previous field test).
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by handruin on Monday July 11, 2016 @01:19PM (#12072602)
I also don't see any app access granted for Pokemon Go under my LG V10 and Google account.
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by criley2 on Monday July 11, 2016 @01:07PM (#12072490)
I also do not have a Pokemon/Niantic entry in my list there. No idea what happened for OP
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by jdc0589 on Monday July 11, 2016 @03:15PM (#12073538)
ditto. Recent android phone. This worries me almost as much as the full access issue, cause I definitely signed it to my google account via the app yesterday.
[ Parent | on HN ]