Playing 'Pokemon Go' Is Potentially a Huge Security Risk If You're Using Your Google Account on iOS

[donotgo]

https://toucharcade.com/2016/07/11/playing-pokemon-go-is-potentially-a-huge-security-risk-if-youre-using-your-google-account-on-ios/

Niantic 已经就此事作出回应： We recently discovered that the Pokémon GO account creation process on iOS erroneously requests full access permission for the user ’ s Google account. However, Pokémon GO only accesses basic Google profile information (specifically, your User ID and email address) and no other Google account information is or has been accessed or collected. Once we became aware of this error, we began working on a client-side fix to request permission for only basic Google profile information, in line with the data that we actually access. Google has verified that no other information has been received or accessed by Pokémon GO or Niantic. Google will soon reduce Pokémon GO ’ s permission to only the basic profile data that Pokémon GO needs, and users do not need to take any actions themselves.

For more information, please review Niantic ’ s Privacy Policy here: https://www.nianticlabs.com/privacy/pokemongo/en

[donotgo]

[sutking]

用 Google 小号玩儿没事儿，或者专门注册一个 Google 账号只玩儿 pokemon go 用

[ferrum]

反正玩不了，刚刚移除了。

和文章说得不一样， Ingress 也是有完整访问权的，这家公司活太糙了。

[sutking]

为什么我的 ingress 也是全部的权限？？？

[hhp]

看了看相关文章， iOS 的 ingress 和 pokemon 都是 full ， android 是 basic

[bullettrain1433]

@sutking 我的 ingress 是基本权限

[Joway]

不给玩就算了, 事还忒多 🙄

[donotgo]

@sutking 不知道。。。这是我的， ingress 没有全部权限。你重新授权一次试试看？

@ferrum 可能以前 ingress 是要全部权限？现在改掉了，我刚刚重新下了 ingress 试了一下，没要求全部权限

[notaCoder]

为啥我都没有显示 ingress

[donotgo]

@hhp 不知道以前怎么样， ingress 现在只要 basic info

[hhp]

@donotgo 我也重新授权了一下，确实是，估计以前是 full

[wzxjohn]

看了一下 ingress 以前确实是 Full ，我删了重新关联一次好了。

[jason19659]

话说我也登录过啊 咋没有授权

[sutking]

@donotgo 现在已经不玩儿 ingress 了，直接删掉授权去抓小精灵了，而且游戏开发公司也说了，将要改进 pokemon 冲！的权限申请，等等吧，过段时间再重新授权一次应该就好了