Dating Apps Exposed 1.5m Private User Pictures Online. Say What!

Nazarovas recovered nan vulnerability by looking astatine nan codification powering these services. He was capable to entree unencrypted and unprotected photos without immoderate password.

"The first app I investigated was BDSM People, and nan first image successful nan files was a naked man successful his thirties," he said.

"As soon arsenic I saw it, I realized that this files should not person been public."

The unprotected images were not conscionable floor plan pictures but besides privately sent photos and moreover those removed by moderators.

This poses a awesome consequence to users, particularly those surviving successful countries wherever LGBT group are discriminated against.

Although nan images weren't branded pinch usernames aliases existent names - making targeted attacks harder - there's still a anticipation for malicious hackers to utilization this vulnerability.

M.A.D Mobile was first alerted astir this information flaw connected January 20, but didn't return action until nan BBC reached out.

The institution has now fixed nan rumor but has not disclosed really it occurred aliases why they grounded to unafraid delicate images.

In consequence to Nazarovas's discovery, a spokesperson for M.A.D Mobile expressed gratitude for uncovering nan vulnerability and preventing a imaginable information breach.