Discover how to enter the Tinder account of your contacts
If you are a user of the Tinder dating application, your account could have been hacked due to a security flaw that, fortunately, has already been corrected through a patch. Just by having a Tinder user's phone number, cybercriminals could have access to that user's contacts A security flaw found among the Tinder social network Facebook and the Facebook API, which Tinder uses so that users can log into their accounts and have the two apps connected.
https://www.youtube.com/watch?v=tIAxmZt1joY
The login system in the Tinder application was not correctly verifying if the permissions granted by Facebook correctly matched the data of the user to which they belonged, so with any 'token' or 'permission' received that was valid could be done with any Tinder account. This serious vulnerability, as reported by the technology news site The Verge, has been discovered by Appsecure. This company dedicated to the security of mobile applications, thanks to the discovery, was awarded 5.00 euros by Facebook.
It is not the first time that Tinder has faced security problems in its mobile application. At the end of last month we reported that due to a new security hole anyone could have access to your 'matches', that is, to the people with whom you had coincided by showing love interest.When one user 'dismisses' another, the server sends a 278-byte encrypted data packet. However, when accepting a candidate on Tinder, that packet is then 374 bytes in size. And what happens when both are coincident? That the size of that packet is 581 bytes. That the information is encrypted is the least of it: with the size of the packet you can see if there is a match or not.
Regarding the situation of the most recent security breach, both Tinder and Facebook have already taken action on the matter, leaving the situation already resolvedsatisfactorily.