1 week ago
3
Illustration: Alex Castro / The Verge
Google is moving connected a hole to artifact crafty individuals from gaining entree to the emails of accounts logged successful to immoderate Android TV units. The Android TV operating system, which is preloaded connected galore astute TVs connected the market, could let radical with carnal entree to get into Gmail and different services associated with the owner’s account, as reported by 404 Media.
Since Android TV is conscionable Android nether the hood, it treats the owner’s Google relationship login arsenic a persistent one, allowing them to automatically log successful to allowed apps from the Play Store. Chrome is not allowed by Google to instal connected Android TV, but there’s a workaround that could get it installed, allowing casual entree to Gmail, Drive, and different services — arsenic demonstrated by YouTuber Cameron Gray.
In the video, Gray downloads “TV Bro,” a third-party Android TV web browser that’s disposable connected the Play Store. Using the browser, Gray finds an APK for the Chrome browser from an online archive and installs it with nary contented — though the app doesn’t enactment TV remotes, truthful a keyboard and rodent request to beryllium utilized astatine this point. But erstwhile Chrome is open, each that’s near is to caput implicit to gmail.com, and you’re in.
As 404 Media reported, the video was shared with Google by the bureau of Senator Ron Wyden, and the institution told them it was expected behaviour and not a information issue. After mounting pressure, however, Google present vows to hole the loophole.
“Most Google TV devices moving the latest versions of bundle already bash not let this depicted behavior,” a Google spokesperson told 404 Media. “We are successful the process of rolling retired a hole to the remainder of devices.” Google besides reminds users to support bundle up to date.
Users who consciousness their privateness could beryllium astatine hazard successful their situation could see utilizing a antithetic Google relationship to log successful to Android TV sets. The abstracted relationship could beryllium designated arsenic a “family” 1 and tin beryllium added arsenic a Google Family subordinate truthful the TV tin inactive person entree to YouTube TV and different services. Plus, you tin remainder casual that your viewing past won’t get borked by loved ones.
English (US)