Third-parties may read your Google Mail emails if you allow it

Discussion in '0-day Release' started by RGiskardR, Jul 3, 2018.

  1. RGiskardR

    RGiskardR Malware Tester Silver Member

    [​IMG]
    Third-party developers may access emails on Gmail if users give them access to the data, that's the main takeaway from a new Wall Street Journal story (which I don't link to because paywall).

    Google users may authorize companies to access account data. Some companies may request access to "read, send, delete, and manage your email" which gives them full access to emails on Gmail.

    Users need to give explicit consent to applications or services, and if that happens through a token-based system that Google uses for this kind of authorization, it does happen without users having to supply their username or password to these companies.

    Clients and services may require access; a third-party email client needs access to emails, and an add-on that runs directly on Gmail needs access as well.

    Full reading: https://www.ghacks.net/2018/07/03/third-parties-may-read-your-google-mail-emails-if-you-allow-it/
     
    silversurfer likes this.
  2. Google Adsense

Share This Page