Pokemon Go Info security Issues

‘…throwing away the schoolbag in a corner and swirling the shoes in opposite direction I ran into the room with the TV. It was 5:05 pm and I had already missed the title track of pokemon. Mom was shouting in the background to change my clothes, get fresh, drink milk and have snacks and in one loud shout I replied, “Not until the break” cursing the rickshaw-wala in my own childish way.’

I am pretty sure we’ve all encountered this situation numerous times in our childhood. Evening schedule for many of us remain fixed; 5:00 is pokemon, 5:30 is Beyblade and 6:00 is DragonBall Z. Those were the days when we used to play real life pokemon using pokemon cards and any small round object that can replicate a poke Ball and imagined creatures to appear from those objects. Shear visualization. Who knew at that age that 15 years down the line there would come a game that would actually allow those visualizations be implemented in a way that would revolutionize not only the virtual gaming but also the life of all the adults. It can actually be stated as “A CHILDHOOD DREAM COME TRUE”.

PokemonGo, has broken records around the horizon surpassing records recorded by tinder, twitter and other leading social media. But along with a million dreams coming true, the game has encountered some security related issues.

A post by Adam Reeve, who works for a security analytics firm, raised attention to the level of account permissions the game has by default, revealing that players who sign in through Google grant Pokémon Go developer Niantic Labs access into the entirety of their account data. When launching the game, players can choose to either sign in through Google — the previous owner of Niantic Labs — or through the Pokémon Trainer Club. The latter site has currently suspended new account registration, leading many to choose logging in with their Google accounts. Yet doing so doesn’t prompt a pop-up indicating the information that Niantic Labs will have access to through this method; instead, it loads up the game without giving the user a chance to edit permissions. Looking at the security permissions tied to a Pokémon Go player’s account shows that the game has “full account access” automatically. For iOS users, there’s no option to edit these permissions; the only option is to revoke access entirely.


Source: tumblr