A relatively simple procedure allows you to access a Gmail account from any Android TV device linked to a Google ID. Enough to cause a cold sweat for Internet users concerned about their privacy.
Technically, Android TV boxes do not offer access to the web and even less to Gmail. Devices such as Nvidia Shield or Xiaomi Mi Box are limited to the use of streaming applications and a few games. But a manipulation allows access to the mailbox of the account entered during initialization of the box. If an unscrupulous person has access to your TV for a few minutes, your digital life could be in danger.
A snitch named…. Chromium?
As Youtuber Cameron Gray detailed 3 months ago, installing Chrome on Android TV allows you to take advantage of Android’s underlying automatic identification system and therefore offers easy access to your Gmail inbox. Technically, the Chrome browser is not available on Android TV which limits the risks, but by downloading another browser available on the Play Store then installing a Chrome APK, it becomes possible to browse the web using the identifiers Google used on the box.
Android TV actually works like its little brother for phones. Once a Google account is registered in the system settings, all Google applications can connect to it to avoid asking for user identifiers each time. And this goes for Chrome too, although its use is technically not allowed on TV boxes. Installing Chrome is therefore equivalent to having access to all the Google services of the user of the TV in question, including Gmail which contains a lot of confidential information and which can be used to reset other people’s passwords. services.
A fix on the way
If this “bug” is not really one, since the system acts as it should, but in circumstances not foreseen, Google has still confirmed that a fix will be applied to the boxes concerned to avoid any problems. unnecessary risks. It is easy to imagine how an unscrupulous hacker could access critical information on boxes used in a professional context or even on second-hand devices sold without being reset.
And if you’re wondering why Google is correcting this problem 3 long months after the release of a video highlighting the gaping flaw, it’s because the information was passed on to a US senator who was concerned about this potential problem and subsequently put pressure on Google to change the way its boxes work.
€159.99
9
- Native 4K support
- Upscaling
- Power under the hood
When it comes time to take stock, it’s difficult to rail against anything.
In terms of multimedia, we have said it again and again: there is absolutely nothing to complain about this new version of Shield TV. The Android TV box is ultra fast and allows you to launch any content in the best possible conditions. We appreciate even more that a remote control is now provided as standard, and no longer the controller (optional).
The latter also benefits from a superb slimming treatment which allows it to easily reach the top 3 of the sexiest gamepads of the moment.
Finally, we salute Nvidia’s efforts in cloud gaming. Even if the service is still in beta at the start of 2019, it’s hard not to be amazed by a game launched on the fly and displayed in an optimal level of detail without it being hosted by a home machine.
The majority of manufacturers are harping on us about this cloud gaming which will revolutionize uses. You have to try it to believe it…and I think I believe it.
When it comes time to take stock, it’s difficult to rail against anything.
In terms of multimedia, we have said it again and again: there is absolutely nothing to complain about this new version of Shield TV. The Android TV box is ultra fast and allows you to launch any content in the best possible conditions. We appreciate even more that a remote control is now provided as standard, and no longer the controller (optional).
The latter also benefits from a superb slimming treatment which allows it to easily reach the top 3 of the sexiest gamepads of the moment.
Finally, we salute Nvidia’s efforts in cloud gaming. Even if the service is still in beta at the start of 2019, it’s hard not to be amazed by a game launched on the fly and displayed in an optimal level of detail without it being hosted by a home machine.
The majority of manufacturers are harping on us about this cloud gaming which will revolutionize uses. You have to try it to believe it…and I think I believe it.
Source : 404 Media
1