Monday, July 11, 2016

Pokemon Go on IOS is a permission nightmare!

If you play on IOS, now the game has complete access to your entire Google life, Email, Gdrive, Photos, Contacts, Everything!

According to Adam Reeve on his Tumbler blog,
http://adamreeve.tumblr.com/post/147120922009/pokemon-go-is-a-huge-security-risk

"Let me be clear - Pokemon Go and Niantic can now:
  • Read all your email
  • Send email as you
  • Access all your Google drive documents (including deleting them)
  • Look at your search history and your Maps navigation history
  • Access any private photos you may store in Google Photos
  • And a whole lot more"
And according to Ars Technica
http://arstechnica.com/gaming/2016/07/pokemon-go-on-ios-gets-full-access-to-your-google-account/

"External apps that you sign into with Google often ask for a small subset of permissions based on what they need to do—view your contacts, view and send e-mail, view and delete Google Drive documents, and so on. But Niantic's Pokémon Go iOS app doesn't ask, and with full account access, it can theoretically do all of those things and more."

Think twice about allowing your children to play this, until the security concerns are addressed. 

0 comments: