I was a little confused by this is well, which is how I ended up on this 
page.  I used MightyText for a long time and was very happy with it. The 
combination of it not being fully compatible with Project Fi and a notice 
that as of next month it was going to have a fee for over 500 texts a month 
prompted me to uninstall it.

It looks like it doesn't have access to your account in the way I 
originally thought, but the phone and PC pass the messages along via a 
Chrome extension.  I had 2 extensions installed, one to add it to the Gmail 
sidebar and another for notifications.  After purging the messages I had in 
the system I revoked access in the Chrome extension options, then removed 
the plugins.  I got MightyText popups about not being logged in  until I 
stopped and re-started Chrome.  




On Thursday, March 19, 2015 at 8:23:35 PM UTC-7, Gareth Davies wrote:
>
> There's nothing suspicious in the security check. 
>
> Mightytext is getting access to a Google login token from somewhere 
> through a Google account authorisation. 
>
> There is nowhere within user land to disable this token because Mightytext 
> access is not listed a anywhere in the list of authorised apps or sites. 
>
> This shouldn't be happening and seems to be a security problem: because 
> Mightytext initially uses an Android local token, its use of a Google 
> account server token is not subject to user control!

-- 
You received this message because you are subscribed to the Google Groups 
"Android Security Discussions" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to android-security-discuss+unsubscr...@googlegroups.com.
To post to this group, send email to android-security-discuss@googlegroups.com.
Visit this group at http://groups.google.com/group/android-security-discuss.
For more options, visit https://groups.google.com/d/optout.

Reply via email to