Dating service including email addresses
“This type of info exposure betrays our trust that the service can determine what fields of data should be public and private.”Holmes said unlike Twitter, which is more public and which is transparent about who has blocked whom, Grindr introduces the additional layer of sexual orientation, and the release of a user's personal information could lead to increased stalking and other forms of sex-based harassment.“LGBTQ folks have vastly different legal standing across countries and continents,” Holmes added.C*ckblocked — which was neither associated with Grindr nor the Chinese gaming company Beijing Kunlun Tech, which owns a majority stake in Grindr — first went live on Friday, March 16.Shamas also shared concerns about an article posted to Grindr-owned digital publication INTO.The outlet published an article about C*ckblocked earlier this month that seemingly glossed over the data aspect, focusing instead on how the third-party service exposed the pattern of white men blocking men of color on the app."They normalized this app by having this article up, and it’s not really doing anything," Shamas said, expressing concern that the article appears to be promoting a third-party product which has gained access to sensitive personal information.
Teaching people to trust services like C*ckblocked, Shamas added, could make future attacks with malicious intent more successful.
In a statement issued to NBC News, Grindr said it was aware of the vulnerability that Faden had found and had changed its system to prevent access to data regarding blocked accounts.
The company did not change access to any of the other data.
This capability is open to any user that joins the app and requires no verification or authentication.
The data flaw raises questions about the security of Grindr's users around the world.
Cooper Quintin, a security researcher at the Electronic Frontier Foundation, reviewed Faden’s findings and confirmed the flaw.“There are a million reasons why you might not want someone to find your location through Grindr, and Grindr is dealing with that as a non-issue,” Quintin said.