Coding error gave Pokemon Go maker access to your emails

COLUMBUS (WCMH) — Have you downloaded the popular Pokemon Go game to your phone yet? If you used your Google account to sing up, you may have given up a lot of person information.

According to Popular Science.com, when a person signs into the game with their Google account, they grant the app full account access, including emails, search history, photos and other even your past locations.

The app could also send emails as you, which is a huge hacking opportunity, according to Popular Science.com.

Niantic, the developer of Pokemon Go, released a statement detailing exactly what the app can access.

We recently discovered that the Pokémon GO account creation process on iOS erroneously requests full access permission for the user’s Google account. However, Pokémon GO only accesses basic Google profile information (specifically, your User ID and email address) and no other Google account information is or has been accessed or collected. Once we became aware of this error, we began working on a client-side fix to request permission for only basic Google profile information, in line with the data that we actually access. Google has verified that no other information has been received or accessed by Pokémon GO or Niantic. Google will soon reduce Pokémon GO’s permission to only the basic profile data that Pokémon GO needs, and users do not need to take any actions themselves.

CNN reports the app maker made several emergency fixes after gaining an unprecedented level of access into players’ personal lives.

“This is probably just the result of epic carelessness,” said computer security expert Adam Reeve. “I don’t know how well they will guard this awesome new power they’ve granted themselves… I really wish I could play, it looks like great fun, but there’s no way it’s worth the risk.”

Pokémon Go, is a free app that uses GPS technology to allow users to find Pokemon is various areas across the country. The app also allows the phone camera to function once a Pokemon is discovered; giving the user the option of taking a picture of the characters they collect in an actual setting.

The company plans to update the permissions it asks for in the coming days.

The other option to sign up for the game, using a Pokémon account, continues to remain unavailable.

What others are clicking on:

NBC4i.com provides commenting to allow for constructive discussion on the stories we cover. In order to comment here, you acknowledge you have read and agreed to our Terms of Service. Commenters who violate these terms, including use of vulgar language or racial slurs, will be banned. Please be respectful of the opinions of others and keep the conversation on topic and civil. If you see an inappropriate comment, please flag it for our moderators to review.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s