"Pokemon Go has full access to your Google account"
http://adamreeve.tumblr.com/post/147120922009/pokemon-go-is-a-huge-security-risk …
#PokemonNo
-
-
Replying to @n8fr8
If this is real, Google is equally at fault for making it possible to grant such access, especially without confirmation.
1 reply 0 retweets 1 like -
Replying to @RichFelker @n8fr8
But anything beyond "identity" simply should not be available to apps _at all_.
2 replies 1 retweet 0 likes -
Replying to @RichFelker @n8fr8
If they got full access without normal prompt, is it possible the app is getting your login/pw via its own input field?
1 reply 0 retweets 0 likes -
Replying to @RichFelker
Could be. They show the in-app webkit browser view w/o any URL bar, so it is hard to tell. They could be faking the google page.
1 reply 0 retweets 0 likes
Replying to @n8fr8
Yeah, in-app browsers are super problematic. Any good app-store should ban them for apps that aren't explicitly "browsers".
7:39 AM - 11 Jul 2016
0 replies
0 retweets
0 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.