Tinder Online Dating app vulnerability revealed Exact Location of Users


Using Popular Online Dating app - Tinder on iPhone?? Then you are at significant risk that exposed members' private information without their knowledge.
Online Dating app Tinder, available for the iPhone from the app store, has become incredibly popular in the past few months.
Tinder app allows you to find dates nearby your location within a few miles and connects you with them, but a vulnerability allowed the attacker to potentially pinpoint your exact location to within 100 feet.
Security Researchers at Include Security discovered that Tinder GPS vulnerability making members vulnerable to hackers.



The Security flaw was discovered by the company last October, that enabled any member with some programming skills to access the app's API (Application Programming Interface) to get the exact latitude and longitude for another member.


Tinder Online Dating app
"Due to Tinder's architecture, it is not possible for one Tinder user to know if another took advantage of this vulnerability during the time of exposure. The repercussions of a vulnerability of this type were pervasive given Tinder's massive global base of users," Include Security Founder Erik Cabetas said in a statement.
Using GPS data collected by Smartphone, one could triangulate to determine where a user is located. Researchers built their own private application called TinderFinder, that could locate a person simply by entering a member's Tinder identification number.
Video Demonstration:



 “You don’t need any special privilege or anything like that. All the information is gathered from the server with any Tinder user account,” said Erik Cabetas and unfortunately the Online Dating app turned out be a GPS tracker.
Tinder CEO Sean Rad said in a statement that it implemented security measures “shortly after being contacted” by Include Security, and did not respond to further inquiries from the company because it does not usually share the specifics of Tinder’s security measures. “Our users’ privacy and security continue to be our highest priority,” said Tinder.
Include Security says, app designers should be careful to protect users' security as they add new features that incorporate Geo-location. "As more and more applications are being built to include Geo-location services, there is an increased risk to the privacy and safety of users."


Comments

  1. Unknown24 April 2015 at 11:01

    I have been using Tinder app for dating from few years back. I have not came across any kind of vulnerability of such. In my opinion every app have pros and cons. It matters how we are making use of it. There are many safety ways exist to use tinder app properly.

    Tinder Clone App

    ReplyDelete

Post a Comment

Popular posts from this blog

How to transfer apps on Andriod phone-to-phone

Image
Hello guys, here is a way in which you can transfer any file on your android device including apps installed, from on phone/device to another. I would just keep this short, no stress, no worries required. Its easy. Follow the steps below to to transfer apps on Android from phone/device-to-phone/device ; Step 1 - Click the link or go to Google play and download Bluetooth File Transfer Step 2 - After installing it. Turn on your Bluetooth. Step 3 - Look for the Installed Bluetooth File Transfer app, open it Step 4 - While on the interface, click the options button on your Android phone. Step 5 - Go for more, and select "Send applications" We are done! Now you can send application from your android phone or device to another android phone or device
Read more

Here's the Facebook Hacking Tool that Can Really Hack Accounts.

Image
Yes, you heard me right. A newly discovered Facebook hacking tool actually has the capability to hack Facebook account, but YOURS, and not the one you desires to hack. How to Hack Facebook account? How to Hack my Girlfriends Facebook account? My boyfriend is cheating on me, How do I hack his Facebook Account? These are the queries that most of the Internet users search on Google. But Beware! If you come across any Facebook hacking tool that promises you to help you hack your friends Facebook accounts, you may end up downloading a hacking tool that could hack you, instead of them. Dubbed Remtasu, the tool is marketing itself as a Facebook hacking tool but actually is a Windows-based Trojan that has accelerated globally over the past year, and has now capability to disguise itself as an app for accessing people's Facebook account credentials. The tool contains a Keylogger that can capture all your keystrokes and store them in a file that is subsequently sent to...
Read more