Live data from Hacker News

Tinder privacy issues

shakedos.com

1–8 of 8 posts

Re: Tinder privacy issues

#2
Having people name, approximate location and a couple of likes you share it is usually enough to yield a small list of candidates. With the photos is easy to find the actual person.

And that is not something Tinder can fix, since that is a product vulnerability.

Re: Tinder privacy issues

#4
Tinder could just remove the facebook profile ID from the fields they return for each user, couldn't they? This might be a simple fix.

Re: Tinder privacy issues

#5
post #4

Tinder could just remove the facebook profile ID from the fields they return for each user, couldn't they? This might be a simple fix.

Tech-wise, this would imply using a secondary ID to uniquely identify their users. A simple fix, yes, just that it's often a better way to rely on a third-party's ID when you use said third-party's auth system.

Re: Tinder privacy issues

#6
post #4

Tinder could just remove the facebook profile ID from the fields they return for each user, couldn't they? This might be a simple fix.

Tech-wise, this would imply using a secondary ID to uniquely identify their users. A simple fix, yes, just that it's often a better way to rely on a third-party's ID when you use said third-party's auth system.

Mmm. Good point -- maintaining a separate mapping is harder to implement and can lead to preformance issues. I think I see why they did it the way they did now.

Re: Tinder privacy issues

#7
post #4

Tinder could just remove the facebook profile ID from the fields they return for each user, couldn't they? This might be a simple fix.

Tech-wise, this would imply using a secondary ID to uniquely identify their users. A simple fix, yes, just that it's often a better way to rely on a third-party's ID when you use said third-party's auth system.

They could just encrypt the facebook ids in a way that allows the server to map the encrypted client id back to the canonical facebook id.

Re: Tinder privacy issues

#8
post #6

Earlier quoted context omitted.

Tech-wise, this would imply using a secondary ID to uniquely identify their users. A simple fix, yes, just that it's often a better way to rely on a third-party's ID when you use said third-party's auth system.

Mmm. Good point -- maintaining a separate mapping is harder to implement and can lead to preformance issues. I think I see why they did it the way they did now.

Not really harder or bad performance-wise, like esrauch said you can just hash it or anything to get a custom unique value. It's just that to most devs, the first idea will be "I need a unique ID and FB already gives me one, why roll out something else?".