Group dating app 3Fun exposed sensitive data on 1.5 million users

guest · Aug 9, 2019

Group dating app 3Fun exposed sensitive data on 1.5 million users
August 8, 2019
https://techcrunch.com/2019/08/08/group-dating-app-3fun-security-flaws/

More than 1.5 million users of a group dating service had their personal data exposed — including their real-time location — because of a vulnerability in the app.

The dating site, 3Fun, bills itself as a “private space” where you can meet “local kinky, open-minded people.” But the data wasn’t private at all. Ken Munro, founder of Pen Test Partners, which published its findings Thursday and shared its findings with TechCrunch, said it was “probably the worst security for any dating app we’ve ever seen.”

Pen Test Partners researchers found the app was leaking the precise location, photos and other personal details of any nearby user.
Using a man-in-the-middle tool like Burp Suite, we could capture our real location, manipulate it in transit on the way to the server and receive a batch of data for that location.

None of the data was encrypted. The researchers called the app a “privacy train wreck.”
Click to expand...

Log in or Sign up

Group dating app 3Fun exposed sensitive data on 1.5 million users

guest Guest

Log in or Sign up

Group dating app 3Fun exposed sensitive data on 1.5 million users

guest Guest

Useful Searches