Skip to content
Why I didn’t catch any Pokemon today
blog.trailofbits.com | blog | #mobile-security | #privacy | #oauth | #trail-of-bits | #pokemon-go | #permissions
Summary
Trail of Bits investigates Pokemon Go's Google account permissions: the app used an undocumented OAuthLogin scope, bypassable jailbreak detection, and silently re-enables revoked permissions.
- Published
- Collected