Shouldn't this incur a massive fine under the GDPR? Isn't this gross negligence in data protection?
GDPR enforcement against non-EU companies has not been tested yet, but this might be a juicy test case if there are any lawyers out there.
Hacking Grindr Accounts with Copy and Paste
171–180 of 202 posts
Re: Hacking Grindr Accounts with Copy and Paste
#172Earlier quoted context omitted.
I think this is a good point. I'll admit that I'm naive about web and security (not my area). Are multiple password resets within a small time frame common? I would not expect this to be common, but user behavior has often defied my expectation. If it is uncommon I think you could create a correlation and get an estimate, if it is common then I completely agree that it would be lost in the noise. And yeah I agree tha…
> Are multiple password resets common within a small timeframe? Yes. When you reset your password once, probability is high to reset it many times. It is often because you don’t remember it, and the new one isn’t fixated in your memory. Or because I’ve changed devices, but my computer kept my old password, so I reset it too, and back and forth on each device until I have time to bring the two devices together and typ…
We see this with password email reset requests that have deliverability delays.
If the user does not receive the reset email within a few seconds, they submit more reset requests.
Also, there have been several Windows updates that cleared the saved password login info in the browser, and get a flurry of reset requests.
Re: Hacking Grindr Accounts with Copy and Paste
#173All you need to do is buy a seat on a RTB exchange and you can already collect pretty much all the information you need without having to hack anything.
Our digital infrastructure is ludicrously insecure and open to abuse. The stable door is wide open, and has been for over a decade.
Re: Hacking Grindr Accounts with Copy and Paste
#174Why was it necessary for Troy to create an account on behalf of someone else?
If the target has halfway competent security response, you just say "Look at this obvious bug in your design" and they fix it. The first part of Troy's post makes it clear that Grindr did not have halfway competent security response.
When you're dealing with a target that doesn't have halfway competent security response the only option is to actually have an equivocal demo that there's a hole which means you need to break into somebody else's account.
Anything else they'll most likely gaslight you and their users. "No, there was no hole, Troy just accessed his own account, nothing to see, fake news".
Re: Hacking Grindr Accounts with Copy and Paste
#175> Hey, do you have a Grindr account? > Lol I can understand this is most probably a private lol by a surprised. But how about we at least stop making these are you gay? Lol! a public moment worth screenshooting? An Ashley Madison data leak is a national embarrassment whereas a Grindr one, a "national security threat" [1]. Being on AM is just a vaudevillian indiscretion, being on Grindr is bro lol that feeds hate and…
The photo used for the account is also kind of mildly offensive in the same vein. (To non-gay readers: this is not actually how gay men pose for their grindr pics.) Update: I decided to make the same point in the comments on his post and he responded in about the douchiest low-key homophobic way imaginable: http://disq.us/p/2c9pnno Tech has a long way to go on homophobia :(
I am gay and don't find it offensive or homophobic* at all , just a bit cringey.
To non-gay readers: yes actually some gays do pose with grimaces.
* I'm even inclined to say you are kind of abusing these Big Words, but not care to start argument.
Re: Hacking Grindr Accounts with Copy and Paste
#176Earlier quoted context omitted.
The photo used for the account is also kind of mildly offensive in the same vein. (To non-gay readers: this is not actually how gay men pose for their grindr pics.) Update: I decided to make the same point in the comments on his post and he responded in about the douchiest low-key homophobic way imaginable: http://disq.us/p/2c9pnno Tech has a long way to go on homophobia :(
I am gay and don't find it offensive or homophobic* at all , just a bit cringey. To non-gay readers: yes actually some gays do pose with grimaces. * I'm even inclined to say you are kind of abusing these Big Words, but not care to start argument.
I did say "mildly" offensive. There's lots of screenshots of the Grindr profile grid posted online. I'd be surprised if you could find one including a profile photo that looks much like this one.
But really the point isn't that no gay man has ever posed for a photo like this. (I'm sure some straight men have too.) The point is that the photo is used to make a joke about how ridiculous Scott would look if he was gay. He couldn't just have a normal dating profile photo.
Re: Hacking Grindr Accounts with Copy and Paste
#177Earlier quoted context omitted.
I am gay and don't find it offensive or homophobic* at all , just a bit cringey. To non-gay readers: yes actually some gays do pose with grimaces. * I'm even inclined to say you are kind of abusing these Big Words, but not care to start argument.
I did say "mildly" offensive. There's lots of screenshots of the Grindr profile grid posted online. I'd be surprised if you could find one including a profile photo that looks much like this one. But really the point isn't that no gay man has ever posed for a photo like this. (I'm sure some straight men have too.) The point is that the photo is used to make a joke about how ridiculous Scott would look if he was gay.…
That is plainly untrue, some gays do use ridiculous facial expressions.
Re: Hacking Grindr Accounts with Copy and Paste
#178Earlier quoted context omitted.
I did say "mildly" offensive. There's lots of screenshots of the Grindr profile grid posted online. I'd be surprised if you could find one including a profile photo that looks much like this one. But really the point isn't that no gay man has ever posed for a photo like this. (I'm sure some straight men have too.) The point is that the photo is used to make a joke about how ridiculous Scott would look if he was gay.…
That is plainly untrue, some gays do use ridiculous facial expressions.
So do some straight men. That's not the point. (I think you responded before my edit - sorry.)
If the pose is a common one, it should be easy to find a screenshot. I couldn't, personally.
Re: Hacking Grindr Accounts with Copy and Paste
#179Earlier quoted context omitted.
I did say "mildly" offensive. There's lots of screenshots of the Grindr profile grid posted online. I'd be surprised if you could find one including a profile photo that looks much like this one. But really the point isn't that no gay man has ever posed for a photo like this. (I'm sure some straight men have too.) The point is that the photo is used to make a joke about how ridiculous Scott would look if he was gay.…
That is plainly untrue, some gays do use ridiculous facial expressions.
And I think you actually meant "not professional" instead of "homophobic".
Re: Hacking Grindr Accounts with Copy and Paste
#180Earlier quoted context omitted.
$50 says they're not. This is something every organization has to say for PR reasons, but saying "we believe" is very fishy wording. It could well be this bug has been around for months before it was discovered, and used by many black/grey-hat hackers.
Governments. It was likely used by governments. Bi men who live straight lives with a wife and family are ridiculously common. The ability to blackmail those people is extremely valuable to certain state organizations.
I'm not sure why being on Grindr is being seen here as a blackmail risk.
If you are visible on Grindr, you have made a kind of public testimony.
So, you have reduced your blackmail risk - since you're already at least somewhat prepared for this information to be public.