Pokemon Go's creators say they didn't mean to spy on Google accounts
http://www.recode.net/2016/7/11/12154354/pokemon-go-niantic-google-permissions
"We recently discovered that the Pokmon GO account creation
process on iOS erroneously requests full access permission for
the user's Google account," the company said in a statement
provided to Recode. "Once we became aware of this error, we
began working on a client-side fix to request permission for
only basic Google profile information, in line with the data
that we actually access."
- - -
Here's what bugs me about this statement. OK, fine, it was an error.
You didn't mean to request full account access. But it's difficult to
imagine how a quality software review would screw up on such a basic
security/privacy issue before the launch. And it makes one wonder what
else may be screwed up in there.
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
I have consulted to Google, but I am not currently
doing so -- my opinions expressed here are mine alone.
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
