News for hackers. Stuff that matters.

A comment on Pokemon Go is a huge security risk. Parent comment

Re:Pokemon Go is a huge security risk by ocdtrekkie on Monday July 11, 2016 @01:04PM (#12072450)
The other day someone's web app I clicked on, and it automagically signed me in with Google and added itself to my connected apps. Cloudcraft.co, I think it was. When I hit their signup link, it auto-signed in with Google without me even clicking their Google button.

After I disconnected it, it didn't behave that way a second time. So I am kinda mystified what happened there. But it was pretty strange.

[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by fattire on Monday July 11, 2016 @03:31PM (#12073658)
Could the app be intercepting the confirm screen and auto-agreeing w/o user interaction?
[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by ocdtrekkie on Monday July 11, 2016 @05:47PM (#12074978)
I am very hesitant to accuse the app of doing something intentionally shady like that. I don't really :know: what happened, and I couldn't replicate it myself after removing the app from my account and visiting it again.
[ Parent | on HN ]