Pokemon Go, is the new augmented reality video game that has taken the world by storm, it already had broken many records and already beaten the popular dating app Tinder. Many people are still excited to play this new game.
Pokemon Go is a “Malware” and a “Huge Security Risk”, Security Expert Says
Let me tell you Pokemon Go is the latest addition to the long-running games launched by Nintendo. The Game is actually developed by Niantic, and it was such a huge hit that it got 53,000 reviews in Just 5 days in iOS App Store.
Adam Reeve, the security expert said the game need an account to play, and you get the choice to create an account from Pokemon.com website or by connecting your Google Account. According to Adam Reeve, he said in one of his tweets that Pokemon Go is a “Malware” and a “Huge security risk”
— Adam Reeve (@adamreeve) July 9, 2016
Adam Reeve said Pokemon Go players have actually endangered themselves to security risks by signing up with their google account. Pokemon.com website is rejecting new sign-ups at the moment, so people are forced to use their Google account to sign-up.
According to Adam Reeve, when you install the game you need to enter the Google account, then you are redirected to login. Usually, we used to see apps or games asking for permissions like “View your basic profile information”, “can view your contacts” etc. However, Researcher Adam Reeve was “stunned” when he came to know that Pokemon Go grants itself “Full account access” to his account.
According to Google support page if you grant any app the “Full account access” it can:
When you grant full account access, the application can see and modify nearly all information in your Google Account (but it can’t change your password, delete your account, or pay with Google Wallet on your behalf).
According to Adam Reeve, Pokemon Go developed by Niantic can now:
- Read all your email.
- Send email on your behalf.
- Access your Google Drive documents (including deleting them).
- Look at your search history as well as Maps navigation history.
- Access your private photos stored in Google Photos.
- And a whole lot more.
Even though Pokemon Go might not be planning to conduct a heavy data theft, But we are now watching lots of security breaches and this type of permissions can be dangerous. We often see leaked data ended up in the wrong hands of hackers to access accounts.
In Reply Niantic said they have been actively working to fix the permissions issue “We recently discovered that the Pokémon GO account creation process on iOS erroneously requests full access permission for the user’s Google account”
Niantic also said, “Once we became aware of this error, we began working on a client-side fix to request permission for only basic Google profile information, in line with the data that we actually access.”
For Gamers who already granted permissions can revoke Pokémon GO’s full account access to their Google account here’s what they can do:
- Go to Google Account Permission Page and there look for Pokemon Go
- Select Pokemon Go and then click “Remove” to revoke full account access.