u/TerrorBitein r/programming • Recommends
On “How to stalk your Facebook friends Tinder profiles”
They used to include exact resolution in their API replies, until another researcher noticed it.
YouTube for the impatient
0:00 / 0:00
#tinder#locationtracking#apivulnerability
TinderFinder - Tinder Privacy Vulnerability Demo
Include Security
84 subscribers • 1 video on Hallway
- Recommended by 1 person: 1 in engineering communities.
- May be out of date. The tools, versions or practices it shows have likely moved on.
Intermediate. Assumes working knowledge.
50K views12 years ago1 recommendation
SecurityExploits and vulnerabilitiesPrivacy and surveillanceAPI design
A demonstration of a Tinder API vulnerability that allowed precise tracking of users' physical locations.
In Oct 2013 Include Security reported a vulnerability which allows a user's mobile phone location to be tracked via the popular location aware dating application Tinder. At the last check, it appears Tinder has implemented the suggested fix sometime between Dec 2013 and Jan 2014. Find us on twitter: @IncludeSecurity And our blog: blog.includesecurity.comWhy it's here
1 person recommends thisWhat people say. Recommended as a demonstration of how Tinder's API exposed exact user coordinates.