Google is working on a fix to prevent crafty individuals from accessing emails from accounts signed into certain Android TV devices. The Android TV operating system, preloaded on many smart TVs on the market, could allow people with physical access to access Gmail and other services associated with the owner’s account, as reported 404 Media.
Since Android TV is just Android under the hood, it treats signing into the owner’s Google account as a persistent connection, allowing it to automatically sign in to authorized apps from the Play Store. Google doesn’t allow Chrome to be installed on Android TV, but there is a workaround that could install it, allowing easy access to Gmail, Drive, and other services, like demonstrated by YouTuber Cameron Gray.
In the video, Gray downloads “TV Bro”, a third-party web browser for Android TV available on the Play Store. Using the browser, Gray finds an APK for the Chrome browser from an online archive and installs it without issue – although the app does not support TV remotes, a keyboard and a mouse should therefore be used at this stage. But once Chrome is open, all you have to do is go to gmail.com, and there you are.
As 404 Media According to reports, the video was shared with Google by Senator Ron Wyden’s office, and the company told them this was expected behavior and not a security issue. However, after increasing pressure, Google is now committed to filling this gap.
“Most Google TV devices running the latest versions of the software already do not allow this described behavior,” a Google spokesperson said. 404 Media. “We are in the process of rolling out a fix to the rest of the devices.” Google also reminds users to keep their software up to date.
Users who feel their privacy might be at risk in their environment might consider using a different Google account to sign in to Android TVs. The separate account can be designated as a “family” account and can be added as part of the Google family so that the TV can still have access to YouTube TV and other services. In addition, you can rest easy: your viewing history will not be disturbed by your loved ones.