On: Pokemon Go is a huge security risk

[seagray]

I don't see any access granted to Pokemon Go (it's not even listed) in the "Apps Connected to your Account" page: https://security.google.com/settings/security/permissions

I am running on a Nexus 6 and signed in with my Google Account when I first launched the app.

Try revoking access and see what happens. Worst case, it might ask you to sign in again.

[jpreiland → seagray]

on iPhone 6s, checked and saw it had full access. I revoked access and opened the app up. It was stuck loading so I logged out and back in. Went back to check app permissions on google and it had full access again.

[towelrod → jpreiland]

Wait, you revoked access from within google, and then the pokemon app was able to give itself access again without asking for permission?

[jpreiland → towelrod]

Yes. I'm not sure if I need to re-log in the app or not though. Maybe if it didn't freeze and I didn't have to re-log then it might have left the access revoked. But it seems that once I re-log the full access goes back into effect.

[peterkelly → jpreiland]

re-logging in is re-authorization

[bewatson → towelrod]

if true, something is seriously messed up

[btown → seagray]

It's possible it only does this on iOS, because I signed up normally using iOS and I see this at that link:

https://dl.dropbox.com/s/bgii07rzoddj504/Screenshot%202016-0...

[mordocai → seagray]

Just chiming in that I am another person (using a OnePlus One with cyanogenmod) that does not even see pokemon go in my "Apps Connected to your Account".

[peterkelly → seagray]

According to an update posted now on the article, the problem is only on the iOS version

[shkkmo → seagray]

I also don't see any access granted to Pokemon Go, I signed in on my nexus 5x and was also in the field test.

[bitewhite → seagray]

On my iPhone 6s, it shows full access.

Screen: http://imgur.com/YX9K8Ds

[chipgap98 → seagray]

Yeah I'm on a Galaxy S7 and signed up with my google account as well and see no mention of it on my connected apps page

[cjp → seagray]

Same here. I recall a "give pokemon go access to your google contacts" dialog (or similar), which I denied.

[xufi → cjp]

Same here. I guess "gotta catch 'em" all means something else in this instance

[casenjo → seagray]

Same here, OnePlus One running CM13, I can't see it in the list (neither release or the previous field test).

[handruin → seagray]

I also don't see any app access granted for Pokemon Go under my LG V10 and Google account.

[criley2 → seagray]

I also do not have a Pokemon/Niantic entry in my list there. No idea what happened for OP

[jdc0589 → seagray]

ditto. Recent android phone. This worries me almost as much as the full access issue, cause I definitely signed it to my google account via the app yesterday.