---
id: 2385
title: "Why I didn’t catch any Pokemon today"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2016/07/11/why-i-didnt-catch-any-pokemon-today/"
published_at: "2016-07-12T03:37:27Z"
tags: ["mobile-security", "privacy", "oauth", "trail-of-bits", "pokemon-go", "permissions"]
phying_url: "https://phying.com/item/2385"
lang: en
---

# Why I didn’t catch any Pokemon today

## Summary

Trail of Bits investigates Pokemon Go's Google account permissions: the app used an undocumented OAuthLogin scope, bypassable jailbreak detection, and silently re-enables revoked permissions.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2016-07-12T03:37:27Z
- **Original:** https://blog.trailofbits.com/2016/07/11/why-i-didnt-catch-any-pokemon-today/
- **Phying News:** https://phying.com/item/2385