Pokemon Go is a huge security risk

Re:Pokemon Go is a huge security risk by serge2k on Monday July 11, 2016 @01:04PM (#12072458)

> I just assumed that an app couldn't grant itself full permissions without notifying me, but now I can see why that might not be the case since they are free to present whatever UI they want in app.

Is that the case? Doesn't this still require going through the standard prompts?

[ Parent | on HN ]

Re:Pokemon Go is a huge security risk by criley2 on Monday July 11, 2016 @01:06PM (#12072472)

Anecdote: On Android 6.0 the Pokemon Go game requested 4 permissions on first launch. Account, Camera, Storage, and one other I believe. I had to individually approve each one.

[ Parent | on HN ]

Re:Pokemon Go is a huge security risk by sp332 on Monday July 11, 2016 @01:09PM (#12072512)

That's just access to your phone, not your Google account. Those permissions don't cover the app's ability to read your email.

[ Parent | on HN ]

Re:Pokemon Go is a huge security risk by criley2 on Monday July 11, 2016 @01:10PM (#12072518)

I also do not have an entry on my Google permissions page (https://security.google.com/settings/security/permissions?pl...), this appears to be an iOS only bug, explaining why no Android user can recreate this bug

[ Parent | on HN ]

Re:Pokemon Go is a huge security risk by mohaine on Monday July 11, 2016 @02:02PM (#12072949)

I can verify this. I logged in with Google and see no permission given to the app.

[ Parent | on HN ]

Re:Pokemon Go is a huge security risk by trhaynes on Monday July 11, 2016 @03:49PM (#12073846)

I do have an entry on that page!

"Pokemon Go Release - Has full access to your Google account"

Revoking access now. Glad I read HN!

[ Parent | on HN ]

Re:Pokemon Go is a huge security risk by sp332 on Monday July 11, 2016 @01:08PM (#12072495)

According to the article, it does not.

[ Parent | on HN ]