Pokemon GO sends Nintendo shares soaring

Adjust Comment Print

When some players signed in with Google, Pokemon Go was given full access to their Google accounts, including documents and email. "However, Pokemon Go only access basic Google profile information (specifically, your User ID and email address)" and no other Google account information is or has been accessed or collected.

Adam Reeve, a computer security expert at the cybersecurity firm RedOwl, was the first to discover this. Nevertheless, it's clear to see why he might have been led down this line of logic.

By Tuesday, Niantic had issued a statement saying it would pull back on access to users' Google accounts.

But if players learn that their virtual security is also at risk, Niantic may have a major PR problem on its hands.

The essence of the game is fairly simple - users walk around in the real world and attempt to find little imaginary animals known as Pokemon.

"When you grant full account access, the application can see and modify almost all information in your Google Account", Reeve said. A ready-made pool of fans, nurtured on playing cards, video games and cartoon shows, have embraced the idea of finding, training and pitting "pocket monsters" against each other using their smartphones.

"This is probably just the result of epic carelessness", Reeve wrote in a blog post Monday.

It appears Niantic may have used outdated user agreements.

Pokémon Go makers Niantic Labs are working with Google to fix a bug that gave them "full account access" to iPhone players' Google accounts, after concerns erupted over gamers' privacy. I don't know how well they will guard this awesome new power they've granted themselves, and frankly I don't trust them at all.

Shares in computer games giant Nintendo have surged for the second day straight after investors sweetened to its Pokemon GO smartphone app. It was simply an out of date API, which could have come from Niantic's other mobile game Ingress.

Comments