Major security flaw on Grindr allowed hackers to access users' accounts

[Spicechinodiva]

A huge security flaw on Grindr caused the app to allow hackers access to peoples' messages, pictures, ****** orientation and HIV status, Tech Crunch reports. They just needed to know that user's valid email address. 

 

Basically, there was a way to reset someone's password by looking at the source code on a browser.

In a statement, Grindr’s chief operating officer Rick Marini  told TechCrunch: “We are grateful for the researcher who identified a vulnerability. The reported issue has been fixed. Thankfully, we believe we addressed the issue before it was exploited by any malicious parties.”

“As part of our commitment to improving the safety and security of our service, we are partnering with a leading security firm to simplify and improve the ability for security researchers to report issues such as these. In addition, we will soon announce a new bug bounty program to provide additional incentives for researchers to assist us in keeping our service secure going forward,” the company said.

Exhale, any of you worried?

 

Related:

[ralphcornio]

Welp ever since their last update, everything just got worse on the app..they're not getting my XTRA money anytime soon tbh...

[Doja Kitten]

I stopped using this app a long time ago. Best decision I’ve made in YEARS. 

[LeglessJamie]

The app has been getting bad press in Belgium due a hacker/catfisher who lured well known national celebs into sharing ***** on other apps after he got tired of luring people to send ***** on Grinde. He, the catfisher, allegedly lured many gay men to share their privates by pretending to be someone else, according to himself he got bored of it and decided to go further and use KIK to lure now celebs in which he succeeded. 3 straight men who are nationally well known in Belgium, send the catfisher explicit content who leaked it. It has been a big deal for weeks now and only this week it came out it all started on Grindr.

The Belgian press is pretty hard for Grindr accusing them to be too easy to access as a fake person. There is no verification as with Tinder and also there are no two step verification settings to protect your account.

[Mexwero]

Grindr is trash. PERIOD. 

[ExXL]

Tried to use it a few times but this app is a mess no thanks, I don't know how it's become the most popular gay dating app because it's pretty bad and there are better options..... 

[DjRobney]

I don't need Grindr, I have Jesus.

[PrettyGorl]

The creator of grindr is a monster. Girl my friend has a storrrrry about him.

His app is a guilty pleasure tho. But I’ve had it deleted for a couple weeks bc it’s toxic, a time waster, and just a buggy experience. I always come crawling back tho. Maybe this lack of security will help convince me to stay away for good. 🙏🏼🤞🏻

[hybirdfox]

Imma just gonna use Exhale from now on 

[BabyBabyBay]

6 hours ago, DjRobney said:

I don't need Grindr, I have Jesus.

Same, but Jesus ain't getting me that good d1ck down 

[1stopBopshop]

What?! Brad the impossibly hot bot ,who says, "Huh, cant' see your message, maybe we should take this to 'HOTGUYSCHATFORCHEAP ONLINE", was a hacker....shocked and appalled. 

 

[DjRobney]

2 hours ago, BabyBabyBay said:

Same, but Jesus ain't getting me that good d1ck down 

Ohh, then I guess you haven't met the right Jesus

[Stefani]

Poor Exhalers. 

[BUWYGF]

There's nothing on my Grindr that thousands of guys haven't seen already lmfaooooo  Bold of these hackers to assume that the stolen gay ***** are worth the blackmail  ***** everybody seen those already

[Alexanda]

Grindr is not the most popular gay-app in my homecountry, i never used it to get in touch with someone, so i should be fine. 

[NobodyKnowsPete]

On 10/5/2020 at 10:33 PM, Spicechinodiva said:

A huge security flaw on Grindr caused the app to allow hackers access to peoples' messages, pictures, ****** orientation and HIV status, Tech Crunch reports. They just needed to know that user's valid email address. 

 

Basically, there was a way to reset someone's password by looking at the source code on a browser.

In a statement, Grindr’s chief operating officer Rick Marini  told TechCrunch: “We are grateful for the researcher who identified a vulnerability. The reported issue has been fixed. Thankfully, we believe we addressed the issue before it was exploited by any malicious parties.”

“As part of our commitment to improving the safety and security of our service, we are partnering with a leading security firm to simplify and improve the ability for security researchers to report issues such as these. In addition, we will soon announce a new bug bounty program to provide additional incentives for researchers to assist us in keeping our service secure going forward,” the company said.

Exhale, any of you worried?

 

Related:

Poor boys...

[DollyParton]

On 10/11/2020 at 7:26 AM, Pbloem19 said:

I stopped using this app a long time ago. Best decision I’ve made in YEARS. 

This