Chris M
OkCupid has become the latest dating app to fall prey to the sloppy-security police, with several bugs discovered that could have led to a leak in users’ personal information.
A team from cybersecurity specialist Checkpoint Research discovered problems with both the website and app, which, if exploited could have given criminals access to unredacted profiles and even private messages, with full sending privileges.
Any hacker who wanted to could send a phishing email to a user containing a link which includes malicious code, giving the sender access to the account.
The stalwart site has remained stubbornly free to use throughout its life, and with a ‘light touch’ in terms of moderation, meaning it has been a prime target for everything from Catfishing users to fake mirror sites.
OkCupid repaired the problems within 48 hours of being informed by Checkpoint Research. In a statement released by Checkpoint (which is a slightly unusual way of handling it), OkCupid said:
“Check Point Research informed OkCupid developers about the vulnerabilities exposed in this research and a solution was responsibly deployed to ensure its users can safely continue using the OkCupid app. Not a single user was impacted by the potential vulnerability on OkCupid, and we were able to fix it within 48 hours. We’re grateful to partners like Check Point who with OkCupid, put the safety and privacy of our users first.”
OkCupid has oft been questioned over the way it monetises data, with accusations that it sells users’ personal data to analytics firms. Now, as it emerges that the coding has flaws too, raising the question – how safe are dating apps?
“Our research into OkCupid, which is one of the longest-standing and most popular applications in their sector, has led us to raise some serious questions over the security of dating apps,” Checkpoint says.
“The fundamental questions being: how safe are my intimate details on the application? How easily can someone I don’t know access my most private photos, messages and details?”
The sad fact is that we all need to ask this question when really and truly, it should never come up. This isn’t the first piece of sloppy coding by a dating app and it certainly won’t be the last.
We’ve asked OKCupid for comment, but hadn’t heard back at the time of publication.
