• Latest
  • Trending
Are Dating Website or Apps are Safe?

Are Dating Website or Apps are Safe?

November 4, 2017
ADVERTISEMENT
local fish store in philippines

Trusted Local Fish Store in Philippines

October 6, 2020
Philippines Travel: COVID-19 Advisory

Philippines Travel: COVID-19 Advisory

September 30, 2020
What are the Restrictions and Requirements for Domestic Travel in the Philippines?

What are the Restrictions and Requirements for Domestic Travel in the Philippines?

September 30, 2020
COVID-19 job and income loss leading to more financial hardship

COVID-19 job and income loss leading to more financial hardship

September 30, 2020
PLDT Default Admin Password and Username for (Fibr, DSL)

PLDT Default Admin Password and Username for (Fibr, DSL)

September 27, 2020
LTO Car Registration Process – Philippines

LTO Car Registration Process – Philippines

September 26, 2020
What is the requirements for TIN ID in the Philippines?

What is the requirements for TIN ID in the Philippines?

September 26, 2020
FAQ ON LICENSE AND PERMIT ISSUANCE IN THE PHILIPPINES

FAQ ON LICENSE AND PERMIT ISSUANCE IN THE PHILIPPINES

September 25, 2020
Customize your iPhone’s home screen in iOS 14

Customize your iPhone’s home screen in iOS 14

September 24, 2020
How Your Anxiety Is Hurting Your Health?

How Your Anxiety Is Hurting Your Health?

September 23, 2020
Handling Stress – Kids

Handling Stress – Kids

September 5, 2020
Israeli first flight to United Arab Emirates

Israeli first flight to United Arab Emirates

September 2, 2020
Friday, February 26, 2021
  • Login
Pencil Written Logo

Pencil Written

News, Trending, Travel, Health, latest current events, and Technology

ADVERTISEMENT
  • Home
    • Cookie Policy
    • Cookies
    • General Terms & Conditions
    • Contact Us
    • Front Page
  • Latest
    • News
    • Politics and Economy
  • Technology
    • Science and Technology
    • Electronics
  • Health & Fitness
  • Travellers
    • Travellers Guide
    • Travel
    • Philippines
  • More on Pencil
    • Top List
    • Thoughts
    • Do It Yourself
    • Did You Know?
  • Earth Clock
  • COVID-19
No Result
View All Result
  • Home
    • Cookie Policy
    • Cookies
    • General Terms & Conditions
    • Contact Us
    • Front Page
  • Latest
    • News
    • Politics and Economy
  • Technology
    • Science and Technology
    • Electronics
  • Health & Fitness
  • Travellers
    • Travellers Guide
    • Travel
    • Philippines
  • More on Pencil
    • Top List
    • Thoughts
    • Do It Yourself
    • Did You Know?
  • Earth Clock
  • COVID-19
No Result
View All Result
Pencil Written Logo
No Result
View All Result

Are Dating Website or Apps are Safe?

November 4, 2017
in News, Technology
4 min read
0
Are Dating Website or Apps are Safe?

Searching for one’s destiny online — be it a lifelong relationship or a one-night stand — has been pretty common for quite some time. Dating apps are now part of our everyday life. To find the ideal partner, users of such apps are ready to reveal their name, occupation, place of work, where they like to hang out, and lots more besides. Dating apps are often privy to things of a rather intimate nature, including the occasional nude photo. But how carefully do these apps handle such data? Kaspersky Lab decided to put them through their security paces.

Kaspersky experts studied the most popular mobile online dating apps (Tinder, Bumble, OkCupid, Badoo, Mamba, Zoosk, Happn, WeChat, Paktor), and identified the main threats for users. We informed the developers in advance about all the vulnerabilities detected, and by the time this text was released some had already been fixed, and others were slated for correction in the near future. However, not every developer promised to patch all of the flaws.

RelatedPosts

Customize your iPhone’s home screen in iOS 14

Handling Stress – Kids

An Air India Express plane with 191 people on board has crashed

Threat 1. Who you are?

Our researchers discovered that four of the nine apps they investigated allow potential criminals to figure out who’s hiding behind a nickname based on data provided by users themselves. For example, Tinder, Happn, and Bumble let anyone see a user’s specified place of work or study. Using this information, it’s possible to find their social media accounts and discover their real names. Happn, in particular, uses Facebook accounts for data exchange with the server. With minimal effort, anyone can find out the names and surnames of Happn users and other info from their Facebook profiles.

And if someone intercepts traffic from a personal device with Paktor installed, they might be surprised to learn that they can see the e-mail addresses of other app users.

Turns out it is possible to identify Happn and Paktor users in other social media 100% of the time, with a 60% success rate for Tinder and 50% for Bumble.

Threat 2. Where are you?

If someone wants to know your whereabouts, six of the nine apps will lend a hand. Only OkCupid, Bumble, and Badoo keep user location data under lock and key. All of the other apps indicate the distance between you and the person you’re interested in. By moving around and logging data about the distance between the two of you, it’s easy to determine the exact location of the “prey.”

Happn not only shows how many meters separate you from another user, but also the number of times your paths have intersected, making it even easier to track someone down. That’s actually the app’s main feature, as unbelievable as we find it.

Threat 3. Unprotected data transfer

Most apps transfer data to the server over an SSL-encrypted channel, but there are exceptions.

As our researchers found out, one of the most insecure apps in this respect is Mamba. The analytics module used in the Android version does not encrypt data about the device (model, serial number, etc.), and the iOS version connects to the server over HTTP and transfers all data unencrypted (and thus unprotected), messages included. Such data is not only viewable, but also modifiable. For example, it’s possible for a third party to change “How’s it going?” into a request for money.

Mamba is not the only app that lets you manage someone else’s account on the back of an insecure connection. So does Zoosk. However, our researchers were able to intercept Zoosk data only when uploading new photos or videos — and following our notification, the developers promptly fixed the problem.

Tinder, Paktor, Bumble for Android, and Badoo for iOS also upload photos via HTTP, which allows an attacker to find out which profiles their potential victim is browsing.

When using the Android versions of Paktor, Badoo, and Zoosk, other details — for example, GPS data and device info — can end up in the wrong hands.

Threat 4. Man-in-the-middle (MITM) attack

Almost all online dating app servers use the HTTPS protocol, which means that, by checking certificate authenticity, one can shield against MITM attacks, in which the victim’s traffic passes through a rogue server on its way to the bona fide one. The researchers installed a fake certificate to find out if the apps would check its authenticity; if they didn’t, they were in effect facilitating spying on other people’s traffic.

It turned out that most apps (five out of nine) are vulnerable to MITM attacks because they do not verify the authenticity of certificates. And almost all of the apps authorize through Facebook, so the lack of certificate verification can lead to the theft of the temporary authorization key in the form of a token. Tokens are valid for 2–3 weeks, throughout which time criminals have access to some of the victim’s social media account data in addition to full access to their profile on the dating app.

Threat 5. Superuser rights

Regardless of the exact kind of data the app stores on the device, such data can be accessed with superuser rights. This concerns only Android-based devices; malware able to gain root access in iOS is a rarity.

The result of the analysis is less than encouraging: Eight of the nine applications for Android are ready to provide too much information to cybercriminals with superuser access rights. As such, the researchers were able to get authorization tokens for social media from almost all of the apps in question. The credentials were encrypted, but the decryption key was easily extractable from the app itself.

Tinder, Bumble, OkCupid, Badoo, Happn, and Paktor all store messaging history and photos of users together with their tokens. Thus, the holder of superuser access privileges can easily access confidential information.

Conclusion

The study showed that many dating apps or website do not handle users’ sensitive data with sufficient care. That’s no reason not to use such services — you simply need to understand the issues and, where possible, minimize the risks.

So What you Do’s?

Do’s:

  • Using a VPN;
  • Installing security solutions on all of your devices; Andi virus
  • Sharing information with strangers only on a need-to-know basis.

Don’ts:

  • Adding your social media accounts to your public profile in a dating app; giving your real name, surname, place of work;
  • Disclosing your e-mail address, be it your personal or work e-mail;
  • Using dating sites on unprotected Wi-Fi networks.
234
Tags: Online Dating SafetyOnline Dating site not safe
Share6Tweet4Share1Pin1Share1Share
Previous Post

Trojan stole $140,000 in Bitcoin

Next Post

Top 7 Travel Destinations to Visit this 2018

Next Post
Top 7 Travel Destinations to Visit this 2018

Top 7 Travel Destinations to Visit this 2018

The Robot Atlas by Boston Dynamics to the next Level

The Robot Atlas by Boston Dynamics to the next Level

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

I agree to the Terms & Conditions and Privacy Policy.

Recent Posts

  • Trusted Local Fish Store in Philippines
  • Philippines Travel: COVID-19 Advisory
  • What are the Restrictions and Requirements for Domestic Travel in the Philippines?
  • COVID-19 job and income loss leading to more financial hardship
  • PLDT Default Admin Password and Username for (Fibr, DSL)
ADVERTISEMENT
DMCA.com Protection Status

Tags

3D Printer (2) Android (5) Anti Drugs (2) Apple (7) Arduino (2) Armenia (2) Beautiful (2) Bitcoin (2) blackberry (2) Children (2) Corona Virus (2) coronavirus (3) covid-19 (13) Cure for Disease (2) dark-side of facebook (2) Depression (5) diy (3) Donald Trump (3) Drone (3) Drugs (2) Dubai (3) Earth (3) Genius (2) Gold (2) Google (7) Health Tips (2) Healthy Marriage (2) how to (2) Iphone (4) iphone x (3) Partner (2) Philippines (6) Playstation (2) Processor (3) robotics (8) S8 (2) Samsung (2) Sars-CoV-2 (4) Science (2) Sex (2) Shapeoko (2) Technology (4) Travel (3) Travel Guide (4) Trump (3)

Advertisement

Recent Posts

  • Trusted Local Fish Store in Philippines October 6, 2020
  • Philippines Travel: COVID-19 Advisory September 30, 2020
  • What are the Restrictions and Requirements for Domestic Travel in the Philippines? September 30, 2020
  • COVID-19 job and income loss leading to more financial hardship September 30, 2020
  • PLDT Default Admin Password and Username for (Fibr, DSL) September 27, 2020
  • LTO Car Registration Process – Philippines September 26, 2020
  • What is the requirements for TIN ID in the Philippines? September 26, 2020
  • FAQ ON LICENSE AND PERMIT ISSUANCE IN THE PHILIPPINES September 25, 2020
  • Customize your iPhone’s home screen in iOS 14 September 24, 2020
  • How Your Anxiety Is Hurting Your Health? September 23, 2020
  • Handling Stress – Kids September 5, 2020
  • Israeli first flight to United Arab Emirates September 2, 2020

© 2020 Pencilwritten.Com

No Result
View All Result
  • Home
    • Cookie Policy
    • Cookies
    • General Terms & Conditions
    • Contact Us
    • Front Page
  • Latest
    • News
    • Politics and Economy
  • Technology
    • Science and Technology
    • Electronics
  • Health & Fitness
  • Travellers
    • Travellers Guide
    • Travel
    • Philippines
  • More on Pencil
    • Top List
    • Thoughts
    • Do It Yourself
    • Did You Know?
  • Earth Clock
  • COVID-19

© 2020 Pencilwritten.Com

Welcome Back!

Login to your account below

Forgotten Password?

Create New Account!

Fill the forms bellow to register

*By registering into our website, you agree to the Terms & Conditions and Privacy Policy.
All fields are required. Log In

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy and Cookie Policy.