Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say | TechCrunch
techcrunch.com
Badoo, Bumble, Grindr, happn, Hinge and Hily all had the same flaw that could have helped a malicious user to identify the near-exact location of another user.

In a new academic paper, researchers from the Belgian university KU Leuven detailed their findings when they analyzed 15 popular dating apps. Of those, Badoo, Bumble, Grindr, happn, Hinge and Hily all had the same vulnerability that could have helped a malicious user to identify the near-exact location of another user, according to the researchers.

While neither of those apps share exact locations when displaying the distance between users on their profiles, they did use exact locations for the “filters” feature of the apps. Generally speaking, by using filters, users can tailor their search for a partner based on criteria like age, height, what type of relationship they are looking for and, crucially, distance.

To pinpoint the exact location of a target user, the researchers used a novel technique they call “oracle trilateration.”

The good news is that all the apps that had these issues, and that the researchers reached out to, have now changed how distance filters work and are not vulnerable to the oracle trilateration technique.

Neither Badoo, which is owned by Bumble, nor Hinge responded to a request for comment.

  • @werefreeatlastEnglish
    1•4 months ago

    I don’t understand why people use Sniffles anymore. They used to allow you to post comments while not paying. Now you gotta pay up for everything. It’s not stupid for them but it means that if you want to find someone to 💕 love 😘, 💞, you gotta give someone else money. That makes no sense to me whatsoever. I propose that the entire community create icons with numbers…like number 234… Put it on the sniffies AP as your icon, and then come over to a local Lemmy instance and talk away. It’s ridiculous to have to pay for love. WTF!