Technology
A security flaw in Grindr let anyone easily hijack user accounts – TechCrunch
Secret tokens used to reset account passwords were leaking to the browser.
Grindr, one of the world’s largest dating and social networking apps for gay, bi, trans, and queer people, has fixed a security vulnerability that allowed anyone to hijack and take control of any user’s account using only their email address.
Wassime Bouimadaghene, a French security researcher, found the vulnerability and reported the issue to Grindr. When he didn’t hear back, Bouimadaghene shared details of the vulnerability with security expert Troy Hunt to help.
The vulnerability was fixed …
-
Noosa News18 hours agoQueensland weather forecast sees sunny weather for last week of winter
-
Noosa News19 hours agoForum responds to urgent homelessness issues in Nambour
-
Business16 hours agoWhy the Betashares Nasdaq 100 ETF could be a perfect buy and hold pick
-
General18 hours agoEnergy provider ENGIE to ‘correct’ electricity bills for thousands of South Australian customers