UPDATED: Full Access Granted to Personal Google Accounts - MMORPG.com

SBFord

Full Access Granted to Personal Google AccountsPGO Pokemon Go News - MMORPG.com

According to Adam Reeve via Tumblr and verified by our own Rob Lashley and Bill Murphy, Niantic Labs' Pokemon Go has a rather large security issue going: When logging in to play using Google, the app is granted full access to all of Google's connected features including Gmail, Google Drive and the rest.

Read the full story here

UPDATE: Via Eurogamer

"We recently discovered that the Pokémon Go account creation process on iOS erroneously requests full access permission for the user's Google account," The Pokémon Company and Niantic explained in a joint statement.

"However, Pokémon Go only accesses basic Google profile information (specifically, your User ID and email address) and no other Google account information is or has been accessed or collected.

"Once we became aware of this error, we began working on a client-side fix to request permission for only basic Google profile information, in line with the data that we actually access.

"Google has verified that no other information has been received or accessed by Pokémon GO or Niantic. Google will soon reduce Pokémon GO's permission to only the basic profile data that Pokémon GO needs, and users do not need to take any actions themselves."

SBFord

Well, until this issue is resolved, our family has deleted the game from all of our devices. Pokemon Don't Go.

yonpachi

Wow this is messed up! Why would this app need access to read your email and send email as you is beyond me

kitarad

The worse thing about some of these apps is they do not even inform you that they are gaining access which is why even on my phone if a wallpaper or anything I use asks for more access I don't allow the app on my phone.

Lobotomist

Well I am not saying they are doing it. But potentially they can sell data about you as a user. Like what online shops you buy from and what, what do you search, etc.

Gazimoff

Well, that's Pokemon Gone...

Phry

So, how did that slip through the QA before the game was released, or is it perhaps working as intended?

etharn

lol....

Dragnelus

Andriod ftw.

Nanfoodle

Is this intended? If it is that shocking.

xxxxxx1

Even if you delete the app from the mobile devices, you will need to go to Gmail account settings and remove the full permissions from Pokemon Go. (Connected apps & sites under Sign-in & Security)

TaishiFox

Hmm, doesn't seem to be the case for me, it seems Pokémon Go is not in the list, however thanks for the link I shall be keeping a close eye on it.

Allerleirauh

Wow, that is probably one of the worst privacy issues I have heard; people were all concerned over Windows 10. I would most definitely consider something like that spyware. I never used Facebook, so don't even mention that lol. I just noticed a couple kids when I was looking outside; they more than likely were playing this game. They were running across the street with their phones, and they never even looked up once. This game is going to kill people, that's for sure (if it hasn't already).

Scott_Jeslis

Doesn't appear to have any access to my Google account, I'm on Android.

psiic

Sigh once again told you so... small story for you had Discover email me the other day " Your new Discover IT card is on the way. " I immediately get on the phone with discover and am like no thanks I will just stay with the discover card I have had for the last 20 years, but oh this is so much better and nothing changes they said. If nothing changes how can it be better I respond. Well it gives you more cash back faster they say. Wait says I, a bank, a credit card company, the devil incarnate wants to give me something for nothing? Bullshit I say. Sir let me let you speak the my manager he can explain it better he says. Hello Sir this is Steve with Discover can I answer any questions for you tonight. Well hey there Steve you sure can says I, first off what kind of a total and complete idiot do you people think I am? You do realize I am not one of these idiot millennials you usually con right? Err sir, he says its not like that. Sure it is Steve you are a demon who works for Satan convincing young people to sell their souls into debt for a living I reply. Sir if you do not want the upgrad... Steve Steve Steve I interrupt you were sending it to me without my consent or permission and would have automatically converted me over if I had not called you to put a stop to IT. So Steve considering you wasted an hour of my life tonight just how pissed do you think I should be at you. Sir, please he replies. Please what Steve, you sit here lying to me, calling me an idiot trying to tell me a card with a base interest rate of 11% is not going to change my existing 6.5% come on Steve I looked it up before I even called you to see what bullshit you were trying to pull this time you really think nobody ever reads the fine print? So Steve what are you going to do for me tonight? Well sir you already have our lowest rate sir, oh come on Steve don't lie to me again I know your lowest rate is 4%. He literally sighs.. well sir I guess I can lower it a quarter point for you sir. Well thank you Steve and you have a wonderful evening. Moral of the Story, NEVER trust anyone ALWAYS read the print and if possible ALWAYS be working for that better deal.

mbrodie

still not overly bothered, like i'm not overly bothered about windows 10 "spyware", i can understand how some people might be upset by this, but i mean just because it can access it doesn't mean they actively are.

also i'm on android so i'm probably not affected lol

observer

mbrodie said:

still not overly bothered, like i'm not overly bothered about windows 10 "spyware", i can understand how some people might be upset by this, but i mean just because it can access it doesn't mean they actively are.

also i'm on android so i'm probably not affected lol

I generally agree, but at some point, these companies need to be held responsible for unethical behavior.

mbrodie

observer said:

mbrodie said:

still not overly bothered, like i'm not overly bothered about windows 10 "spyware", i can understand how some people might be upset by this, but i mean just because it can access it doesn't mean they actively are.

also i'm on android so i'm probably not affected lol

I generally agree, but at some point, these companies need to be held responsible for unethical behavior.

This is probably true to some degree, but unfortunately governments are making it easier and easier for them to do this kind of stuff legally, it might have been an oversight.... or the fact that it has access to said functions might be for upcoming features like trading n stuff i mean whose to say i mean it's not required now but who knows what they could use such api functions for in the future.

ceratop001

This is disturbing on so many levels. I so badly want to do a Hillary joke but I wont. Just wondering because I'm not a lawyer if there could be some legal ramifications. Sensitive information could be obtained and used for nefarious activities. I predict there could be some serious lawsuits coming.

Rusque

None of you have any privacy. All your data is collected, all the time. Unless you don't use mobile phones or the internet at all.

SpottyGekko

Rusque said:

None of you have any privacy. All your data is collected, all the time. Unless you don't use mobile phones or the internet at all.

True enough, but that is passive data collection, as opposed to invading your personal device, which is a bit more "active" and direct.

Ozmodan

Yep kids are mad at me, but I took it off their phones last night.  They do not understand the implications of a game like this.  

Iselin

Google has full access to your Google account and Niantic, the PGO dev, is owned by Google and was in fact just spun-off as an "independent" last year.

Not saying that this makes it OK by any means but it makes me wonder just which parts of the "Don't be Evil" empire have full access to my account and what they do with it.

 

Horusra

Benbrada said:

Doesn't appear to have any access to my Google account, I'm on Android.

Same for me

sludgebeard

For those of you who are deleting Go from you phones/staying away from it because of these apparent "Security Issues", what is your "Worst Case Scenario" here for the app?

Im just trying to get a perspective on why you think this situation is any different from giving your Social Security to potential employers, giving Steam your Tax Information, giving your phone number/address to gamestop. 

All im saying is this isnt anything different, we dont stop going to gamestop, we dont give up a job opportunity for privacy, and we would rather sell our .10 Cent CSGO cases and give Steam our Tax Info than let them sit around. So seriously whats new here?

observer

Rusque said:

None of you have any privacy. All your data is collected, all the time. Unless you don't use mobile phones or the internet at all.

It can be mitigated though.  The choices to secure your privacy are out there, so it's up to each individual to do it.