Notebookcheck

A Twitter user claims an Android TV allowed access to other users' Google Photos data

A potentiallly critical bug has been found through the use of a Vu Android TV. (Source: NDTV Gadgets)
A potentiallly critical bug has been found through the use of a Vu Android TV. (Source: NDTV Gadgets)
An Indian Twitter user has alleged that an Android TV to which he had access allowed him to see all the other accounts linked to the same via the Google Home app. The bug in question also could have let him put their Google Photos-stored images up on the screen. Google has responded by temporarily suspending the app options involved.

Android TVs can be controlled using the Google Home app on a connected phone. Recently, a user of this set-up may have identified a serious bug in the arrangement. This individual, known as @wothadei on Twitter, made an alarming claim via the social media platform: his app allowed him to see all the other users of an Android TV he was connected to.

This user posted what appears to be a screen recording of this potential bug in the Android TV/Google Home interface. It clearly shows that a (quite lengthy) list of other Google account names appeared as a result of pressing Linked Accounts under Device Settings in the app. @wothadei also posted a second recording that appeared to depict what happened when the option Ambient Mode under the same settings was selected. Once the radio button for Google Photos was toggled on in this Mode, it appeared that the user had the ability to display each users' images as a slideshow on the TV.

This device was a screen sold under the brand-name Vu. As @wothadei tagged Google and Google India in his tweets on the subject, the company has not hesitated to respond. So far, it has stated that it has temporarily rescinded the app options in question (which are to "to remotely cast via the Google Assistant or view photos from Google Photos on Android TV devices") while they investigate the problem. It also should be noted that the ability to see other linked accounts or add their Google Photo data to Ambient Mode also disappeared in response to a reset of the TV in question.

Source(s)

static version load dynamic
Loading Comments
Comment on this article
Please share our article, every link counts!
> Notebook / Laptop Reviews and News > News > News Archive > Newsarchive 2019 03 > A Twitter user claims an Android TV allowed access to other users' Google Photos data
Deirdre O Donnell, 2019-03- 4 (Update: 2019-03- 4)