UPDATE: @arirubinstein found an undocumented way Pokemon Go access rights could be used to get full account accesshttps://gist.github.com/arirubinstein/fd5453537436a8757266f908c3e41538 …
So a malicious app could use this technique to gain access to Google account parts without asking for them?
-
-
luckily all of it is now fixed.https://twitter.com/rosyna/status/752931168664727552 …
-
Sarcasm? The important part is how they could get all permissions without asking, no?
- 8 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.