They might be security wise rather weak, but their statistics blog is a brutal-beautiful view into what humans search for dating. https://theblog.okcupid.com/tagged/data
How to boost your popularity on OkCupid using CSRF and a JSON type confusion
11–20 of 134 posts
Re: How to boost your popularity on OkCupid using CSRF and a JSON type confusion
#12Earlier quoted context omitted.
I learned recently that if someone forwards you the email that OKC sends them alerting them to a new message and you click on it you gain passwordless access to their account. I contacted OKC about this but they said that it was not an issue.
That's shocking! Really surprised that they don't see this as an issue, I would expect that it's trivial to social engineer someone into forwarding you one of those emails.
Re: How to boost your popularity on OkCupid using CSRF and a JSON type confusion
#13They might be security wise rather weak, but their statistics blog is a brutal-beautiful view into what humans search for dating. https://theblog.okcupid.com/tagged/data
What people say they sort on: personality, values, morals, political views, friendships, etc. What people sort on when they don't think they're being observed: genes
Re: How to boost your popularity on OkCupid using CSRF and a JSON type confusion
#14Earlier quoted context omitted.
That's shocking! Really surprised that they don't see this as an issue, I would expect that it's trivial to social engineer someone into forwarding you one of those emails.
Maybe, but how much value is there in taking over people's OKCupid account?
But the messages could be interesting.
Re: How to boost your popularity on OkCupid using CSRF and a JSON type confusion
#15Earlier quoted context omitted.
What people say they sort on: personality, values, morals, political views, friendships, etc. What people sort on when they don't think they're being observed: genes
I'm pretty sure 99% of people would openly agree that physical attraction is a core element of partner selection.
Re: How to boost your popularity on OkCupid using CSRF and a JSON type confusion
#16Earlier quoted context omitted.
I'm pretty sure 99% of people would openly agree that physical attraction is a core element of partner selection.
Not anymore, but before online dating people were hiding it much more
Re: How to boost your popularity on OkCupid using CSRF and a JSON type confusion
#17They might be security wise rather weak, but their statistics blog is a brutal-beautiful view into what humans search for dating. https://theblog.okcupid.com/tagged/data
Re: How to boost your popularity on OkCupid using CSRF and a JSON type confusion
#18Re: How to boost your popularity on OkCupid using CSRF and a JSON type confusion
#19Earlier quoted context omitted.
I learned recently that if someone forwards you the email that OKC sends them alerting them to a new message and you click on it you gain passwordless access to their account. I contacted OKC about this but they said that it was not an issue.
Lots of sites do this, it’s a feature for the majority of users who prefer convenience over security.
Re: How to boost your popularity on OkCupid using CSRF and a JSON type confusion
#20Earlier quoted context omitted.
That's shocking! Really surprised that they don't see this as an issue, I would expect that it's trivial to social engineer someone into forwarding you one of those emails.
Maybe, but how much value is there in taking over people's OKCupid account?