We respect your privacy. All addresses you provide will be used just for sending this story.
Researchers at the Israeli cybersecurity firm Checkmarx recently found security flaws in the Android version of OkCupid that, among other things, could have let cybercriminals send users missives disguised as in-app messages. The flaws have since been fixed. Before that, however, users could have been tricked into losing control of their s or had information stolen and then used for identity theft or credit card scams, according to the researchers.
While both the OkCupid and Tinder security problems have since been fixed, they still stand as a warning to consumers to be wary of all apps, and particularly dating apps, that store a lot of personal information. The OkCupid app works together with an outside web browser, such as Chrome or Firefox, to download and display messages from other users.
Need a fwb (friends with benefits)? top 10 best fwb dating apps and sites
The researchers found that an attacker could create a malicious link that looked legitimate to the app—and once opened in the OkCupid app, the message would ask the user to enter log-in credentials. In addition to data such as names, addresses, and geographic location, OkCupid s tend to include information about the people a given user might be interested in dating, as well as personal photos and details deed to entice potential dates. All that information would make it much easier for a cybercriminal to target the user for cybercrimes such as identity theft, insurance or bank fraud, and even stalking.
Yalon says consumers still need to think before sharing personal information through any kind of app. I write about all things "cyber" and your right to privacy. What I enjoy: cooking and learning to code with my kids.
I've lived in the Bronx for more than a decade, but as a proud Michigan native, I will always be a die-hard Detroit Tigers fan no matter how much my family and I get harassed at Yankee Stadium. Follow me on Twitter BreeJFowler. In. Become a Member. Remember Me. Forgot username or password? Not a member?
Need further assistance? Please call Member Services at Love Bug? A software vulnerability in the popular dating app could have let hackers take over user s and spread malware. By Bree Fowler. February 14, Sharing is Nice Yes, send me a copy of this. Send We respect your privacy. Oops, we messed up. Try again later.
's 9 expert-approved dating apps in detroit that really work
When you shop through retailer links on our site, we may earn affiliate commissions. Learn more.
More on Security and Privacy. Mimicking Pop-Up Apps The OkCupid app works together with an outside web browser, such as Chrome or Firefox, to download and display messages from other users.
Online daters looking for more than endless swiping
Use multifactor authentication. Turn on this setting, which is available for most big online services, including banks and social media platforms. This can prevent hackers who guess your password or acquire it from a data breach from accessing your. The more information you volunteer online, the more information can be stolen. Keep apps updated.
The 5 best dating websites
As the OkCupid incident demonstrates, security teams are constantly fixing software vulnerabilities discovered through data breaches or through the efforts of researchers such as Checkmarx. Download app updates automatically and you get the benefit of these fixes. Fail to do that, and you remain needlessly vulnerable. Turn off location tracking in apps. Bree Fowler I write about all things "cyber" and your right to privacy.
Love bug? security flaw found in okcupid's android version.
More From Consumer Reports. Show comments commenting powered by Facebook. Make a Donation Newsletters Give a Gift.