←back to thread

I hacked a dating app (and how not to treat a security researcher)

(alexschapiro.com)
560 points bearsyankees | 1 comments | 12 May 25 16:39 UTC | HN request time: 0s | source
Show context
nixpulvis ◴[12 May 25 17:50 UTC] No.43965715[source]▶
People need to be forced to think twice before taking in such sensitive information as a passport or even just addresses. This sort of thing cannot be allowed to be brushed off as just a bunch of kids making an app.
replies(5): >>43965749 #>>43966078 #>>43966320 #>>43966383 #>>43968604 #
jonny_eh ◴[12 May 25 18:25 UTC] No.43966078[source]▶
There should to be some kind of government operated identity confirmation service that is secure/private.

Or by someone "government-like" such as Apple or Google.

replies(4): >>43966153 #>>43966160 #>>43967625 #>>43969390 #
clifflocked ◴[12 May 25 18:33 UTC] No.43966153[source]▶
OAuth exists and can be used to confirm someone's identity by linking their Google account.
replies(3): >>43966180 #>>43966304 #>>43966328 #
1. kelnos ◴[12 May 25 18:52 UTC] No.43966328[source]▶
Linking a Google account doesn't confirm your identity, though. It just confirms that you created a Google account with a particular name.