Two Tinder Security Flaws Mean Strangers Can Spy On Your Swipes

Two Tinder Security Flaws Mean Strangers Can Spy On Your Swipes

 Two Tinder Security Flaws Mean Strangers Can Spy On Your Swipes

“It’s very simple to execute because the problem is, Tinder actually neglected to encrypt some of the data,” Amit Ashbel, director of product marketing with the security firm Checkmarx, which led the study, told BuzzFeed News. “You just have to listen to the network and you’ll have the images available to you.”

As Wired first reported, because Tinder doesn’t encrypt profile images on its app, a hacker can snoop around a user’s profile and see their profile images and the images of other users that they view while they are connected to an open Wi-Fi network, according to Checkmarx’s research. A hacker might also be able to swap out images a user sees, insert ads, or insert malware disguised as an image. But images aren’t the only part of the data that is unencrypted, said Ashbel. A snoop could see when a chat is initiated — but the text in the chat is not exposed because it’s encrypted, he said.

A hacker on the same open network could also see when a user swipes left, right, or up to “super like” someone — Tinder does encrypt this data, but the encrypted text for each action has a distinct length, so it would be easy to use that to determine how someone swipes on a profile.

Tinder does not disclose details about its security tools “to avoid tipping off would-be hackers,” a company spokesperson told BuzzFeed News. But it said it takes the security and privacy of users seriously.

“Like every other technology company, we are constantly improving our defenses in the battle against malicious hackers,” the spokesperson said. “For example, our desktop and mobile web platforms already encrypt profile images, and we are working towards encrypting images on our app experience as well.”

A YouTube video of the test shows how a creative hacker would be able to see exactly what a victim sees on their screen, along with what action they took on a particular profile.

“The victim has no way to know someone is actually watching them,” Yalon told BuzzFeed News. “There is no way to avoid this and no way to know its happening.”

However, there is a way to avoid this kind of lurking: Only use Tinder when you’re on a secure connection. Because someone could only exploit this vulnerability from a shared network, it’s not that easy for someone to actually lurk on your Tinder profile.

“If you don’t want people to know what’s going on in your Tinder account, preferably use a secure Wi-Fi network,” Ashbel said. “The second one is what I recommend to all my friends, is anything you don’t want visible to all people, don’t do on a network-connected device.”

Checkmarx said that Tinder should not rely on HTTP for its app, which includes sensitive personal information about its users, like their sexual preferences, age, location, and employer. Instead, Ashbel and Yalon said Tinder should exclusively use encrypted connections for its entire app.

“We know there is no data theft in this case; it’s just a privacy invasion, a privacy invasion creative hackers can easily leverage,” said Ashbel.


Love and Share!

You Should See This:

Ellen Page Kicked Off 2018 By Announcing She Totally Got Married
Build A Bagel And We'll Tell You Which NYC Borough You Belong In
Your Potato Preferences Will Reveal What People Love Most About You
People Are Mad That Michelle Williams Was Reportedly Paid Less Than 0.1% Of What Mark Wahlberg Made ...
Create Taylor Swift's Tour Setlist And We'll Tell You Which Album You Are
26 Easter Eggs And Details In "Black Mirror" Season 4 That Will Make You Scream
16 Big Batch Slow Cooker Recipes That Freeze Well For Leftovers
Abuse Victims Address Former USA Gymnastics Doctor In Court
The Trump Administration Just Asked The Supreme Court To Uphold The Decision To End DACA
Another Right-Wing Insurgency Is Gathering Force In The West
Do You Work In Fashion? We Want To Hear Your Stories
A Fan Tipped Aja From "Drag Race" With A Burger And Now That's The Only P...
Nicole Kidman Proved She Gives No Fucks By Eating A Whole Bunch Of Bugs
How You Fry Your Eggs Will Reveal The Best Thing About You
Describe Your 1930s Life And We'll Tell You Which Timeless Celebrity You're Most L...
5 Easy Ground Beef Dinner Recipes Kids Will Love

Leave a Reply

Your email address will not be published. Required fields are marked *