41–50 of 91 posts
How does this even happen? How can the developers behind an endpoint like this not confirm/test that it requires permissions/authentication to consume? (I mean, look at all that data...) Amateurs I can understand - but OKCupid has been around long enough they shouldn't be employing people of that nature. Is there no code review process? This is just nuts.
How does this even happen? How can the developers behind an endpoint like this not confirm/test that it requires permissions/authentication to consume? (I mean, look at all that data...) Amateurs I can understand - but OKCupid has been around long enough they shouldn't be employing people of that nature. Is there no code review process? This is just nuts.
It's certainly not outlandish that this happened. Have you never been employed as a programmer?
Are you implying that it's not outlanding for professional programmers to not have these things in mind?
I haven't used OkC since then, but I thought I'd share that in the context of this blog post ;-)
Earlier quoted context omitted.
Don't know if you're sarcastic, but I prefer privacy related issues like this to be surfaced and would call it morally wrong not doing so.
There would be no privacy issues if the users did not give up that private data willingly in the first place. A-ok with random company on the internet having access to it, but suddenly other random parties exploiting it are "creepy"? It was being shared with advertisers and analytics providers anyway.
That doesn't make it acceptable in any way.
I never get it why people who discover secrets like these make extra sure nobody else can ever enjoy them again. Just use the undocumented feature and don't make a big thing out of it. This way it's ruined for everybody, and they get nothing in return, except for some HN points on their blog post.
I'd prefer that it was. This is clearly something that leaks personal information.
I dated on okc for a few years. I hate driving (LA) and so I frequently filtered my matches to 5 miles (if I recall that was the smallest radius). 5 miles in LA can be a long drive. So I wrote a chrome plugin to add additional drop down options of 0.1, 0.5 and 1 mile. I was surprised to see it work. It was awesome. There is also a hack to get the infamous “top X% of hottest people” feature unlocked... :)
Earlier quoted context omitted.
It's certainly not outlandish that this happened. Have you never been employed as a programmer?
I am, and have been. That's why it's so outlandish to me - I keep user data in mind all the time. Finding out you're leaking sensitive personal data is a slippery slope I (nor my clients) want to go down. Are you implying that it's not outlanding for professional programmers to not have these things in mind?
Earlier quoted context omitted.
I have to wonder how effective paying for a dating site really is. Presumably if you find a partner through the site you stop paying? Aside from a token few they can blog about, what's their incentive to be successful?
OKCupid actually did a blog post about this, which they have since deleted. Here's a copy of it. http://static.izs.me/why-you-should-never-pay-for-online-dat...
Earlier quoted context omitted.
You specify it as part of your profile. If you pay for A-List (paid plan), you can filter potential matches by body type. Disclosure: Paying OKCupid customer. I don't mind paying to support the service, it's provided ongoing value to us.
I have to wonder how effective paying for a dating site really is. Presumably if you find a partner through the site you stop paying? Aside from a token few they can blog about, what's their incentive to be successful?
I figure most other paying people are either the same or looking to cancel their subscription once they find a long term partner.