Tinder's Lack of Encryption Lets Strangers Spy on Your Swipes

ronjor · Jan 23, 2018

Andy Greenberg 01.23.18

On Tuesday, researchers at Tel Aviv-based app security firm Checkmarx demonstrated that Tinder still lacks basic HTTPS encryption for photos. Just by being on the same Wi-Fi network as any user of Tinder's iOS or Android app, the researchers could see any photo the user did, or even inject their own images into his or her photo stream.
Click to expand...

Minimalist · Feb 22, 2018

Private chats and user accounts could be exposed by Tinder security bug

An easy-to-exploit bug has left Tinder accounts and private chats exposed to hackers, revealed a researcher this week.

Indian engineer Anand Prakash, a serial bug hunter, said in a Medium post on Wednesday, 20 February, that a flaw in a Facebook-linked program called Account Kit let attackers access profiles armed with just a phone number. Account Kit has been implemented on Tinder and it has been used by developers to let users log on to a range of apps using mobile details or email addresses without a password.
Click to expand...

https://www.scmagazine.com/private-...xposed-by-tinder-security-bug/article/746145/

guest · Jun 29, 2018

Tinder finally encrypted everyone’s photos
June 29, 2018
https://www.theverge.com/2018/6/29/17519234/tinder-encrypted-profile-photos-senator-ron-wyden

Tinder’s parent company Match Group publicly announced today, in a letter to Sen. Ron Wyden (D-OR), that it is now encrypting photos sent between Tinder’s servers and its app. The changes were implemented in February, following the public disclosure of an attack that could have let hackers view people’s profile pictures and swipe actions.

The size of the swipe data was used by security researchers to differentiate actions from one another. That change wasn’t implemented until June 19th.

What does this mean for you, the user? Nothing really other than you can rest easy knowing that hackers shouldn’t be able to view your encrypted profile photos. I can’t imagine these photos were super sensitive, anyway, but maybe your topless pic is for Tinder users’ eyes only.
Click to expand...

Log in or Sign up

Tinder's Lack of Encryption Lets Strangers Spy on Your Swipes

ronjor Global Moderator

Minimalist Registered Member

guest Guest

Log in or Sign up

Tinder's Lack of Encryption Lets Strangers Spy on Your Swipes

ronjor Global Moderator

Minimalist Registered Member

guest Guest

Useful Searches