←back to thread

I hacked a dating app (and how not to treat a security researcher)

(alexschapiro.com)
561 points bearsyankees | 1 comments | 12 May 25 16:39 UTC | HN request time: 0.296s | source
Show context
sherdil2022 ◴[12 May 25 17:03 UTC] No.43965176[source]▶
They might not have a playbook on how to handle such reports. Doesn’t mean they shouldn’t respond. They are also probably sh*t scared about legal ramifications - but not responding only makes them look even worse. None-the-less it is amazing how many of these products and services don’t put security and user privacy first.

Open for discussion - What would make them pay attention?

replies(3): >>43965210 #>>43965311 #>>43965836 #
1. squigz ◴[12 May 25 18:01 UTC] No.43965836[source]▶
Fines that are enough to actually hurt, and regulations that force companies to actually secure PII.

If they're scared of such things, then maybe they shouldn't be making and marketing a dating app. It's not 2003 anymore, and this isn't some innocent app - they're collecting information on passports and sexual preferences for thousands of people. They should be aware of the responsibility that ought to come with that.