Hacking Grindr Accounts with Copy and Paste
troyhunt.com
Hacking Grindr Accounts with Copy and Paste
1–10 of 202 posts
Re: Hacking Grindr Accounts with Copy and Paste
#2fuck "responsible disclosure"
the outcome of this runaround was that grindr stated they will create a bug bounty program
proving once again that the "market based bug bounty program" has better aligned incentives and results in solving the same thing, vulnerabilities that should have been fixed to begin with were fixed.
Re: Hacking Grindr Accounts with Copy and Paste
#3Gives new meaning to backdooring on Grindr.
Re: Hacking Grindr Accounts with Copy and Paste
#4Wow, password reset tokens returned directly in-browser; that's hard to believe. I wonder how long this had been going on?
Re: Hacking Grindr Accounts with Copy and Paste
#5I guess the good news is that it requires knowledge of the user's email address to execute. You can't just run it on random people (emails aren't disclosed) and even if you know someone on the app in real life, chances are good that they use a personal address that you won't have.
Still a pretty bad vulnerability and pretty awful that grindr was ignoring it.
Re: Hacking Grindr Accounts with Copy and Paste
#6I guess the good news is that it requires knowledge of the user's email address to execute. You can't just run it on random people (emails aren't disclosed) and even if you know someone on the app in real life, chances are good that they use a personal address that you won't have. Still a pretty bad vulnerability and pretty awful that grindr was ignoring it.
> even if you knkw someone on the app, chances are good that they use a personal address that you won't have
I doubt that; I bet most users use whatever Gmail/etc personal address they use for other non-work accounts.
Re: Hacking Grindr Accounts with Copy and Paste
#7I guess the good news is that it requires knowledge of the user's email address to execute. You can't just run it on random people (emails aren't disclosed) and even if you know someone on the app in real life, chances are good that they use a personal address that you won't have. Still a pretty bad vulnerability and pretty awful that grindr was ignoring it.
Imagine someone running their contact list through this. You could find everyone you know on Grindr right away, and snoop on their conversations and read their personal info...
Not only that, but emails are very easy to find these days with tools like apollo.io.
Re: Hacking Grindr Accounts with Copy and Paste
#8I guess the good news is that it requires knowledge of the user's email address to execute. You can't just run it on random people (emails aren't disclosed) and even if you know someone on the app in real life, chances are good that they use a personal address that you won't have. Still a pretty bad vulnerability and pretty awful that grindr was ignoring it.
Imagine someone running their contact list through this. You could find everyone you know on Grindr right away, and snoop on their conversations and read their personal info... Not only that, but emails are very easy to find these days with tools like apollo.io.
It would be very easy to target a large group of individuals at a given organization.
Re: Hacking Grindr Accounts with Copy and Paste
#9I guess the good news is that it requires knowledge of the user's email address to execute. You can't just run it on random people (emails aren't disclosed) and even if you know someone on the app in real life, chances are good that they use a personal address that you won't have. Still a pretty bad vulnerability and pretty awful that grindr was ignoring it.
Imagine someone running their contact list through this. You could find everyone you know on Grindr right away, and snoop on their conversations and read their personal info... Not only that, but emails are very easy to find these days with tools like apollo.io.
Good point, even just being able to use it as a tool to play "gay or not" has some pretty aweful implications for people who aren't openly gay.
Re: Hacking Grindr Accounts with Copy and Paste
#10Wow, password reset tokens returned directly in-browser; that's hard to believe. I wonder how long this had been going on?
someone designed and implemented it. Would be interesting to know the rationale and their train of thought leading to that.