Is Your Privacy at Risk? Alarming Findings About Popular Dating Apps

As an elite matchmaking service, Lyons Elite is committed to your safety and privacy. Recent research has uncovered alarming vulnerabilities in popular dating apps like Bumble and Hinge, which allowed malicious users to pinpoint users’ locations within two meters. Researchers from KU Leuven analyzed 15 dating apps and found that Badoo, Bumble, Grindr, happn, Hinge, and Hily all had similar security flaws.

While these apps don’t share exact locations publicly, they used precise coordinates for filters like distance. This flaw enabled attackers to exploit the apps through a technique called “oracle trilateration.” Trilateration, commonly used in GPS, involves using three points and measuring their distance relative to the target to pinpoint the exact location. Oracle trilateration works similarly but starts with a rough estimate of the target’s location and then refines it by moving in increments until the exact spot is identified.

According to Karel Dhondt, one of the researchers, it was surprising to find such known issues still present in these popular apps. Although this technique doesn’t reveal the exact GPS coordinates of the victim, pinpointing within two meters is close enough to be concerning.

The good news is that all the apps that had these vulnerabilities have now updated their distance filters to prevent this type of attack. They achieved this by rounding up coordinates by three decimals, which creates an uncertainty of approximately one kilometer, making it significantly harder for malicious users to pinpoint exact locations.

Bumble and Hinge responded swiftly to the researchers’ findings. Bumble’s vice president of global communications, Gabrielle Ferree, confirmed that the company resolved the issue early in 2023. Hily’s CTO, Dmytro Kononov, explained that their internal mechanisms made exploiting the vulnerability impractical, but they still collaborated with researchers to enhance their security algorithms.

However, the issue is not entirely resolved for all apps. Grindr, for example, rounds users’ precise locations by three decimals, resulting in a potential location accuracy of around 111 meters. While this is better than two meters, it still poses a risk, especially in densely populated areas. Grindr users can disable their distance display if they prefer, but the potential for misuse remains a concern.

At Lyons Elite, we prioritize your safety. Here are some tips to help you stay safe and protected when dating online:

1. Adjust Location Settings: Use the app’s privacy settings to limit how much location information is shared. Disable exact location sharing whenever possible.
2. Be Cautious with Personal Information: Avoid sharing detailed personal information, such as your home address, place of work, or routine locations.
3. Verify Profiles: Use video calls or meet in public places before sharing personal information or agreeing to meet privately.
4. Use Strong, Unique Passwords: Ensure your dating app accounts are protected with strong, unique passwords that you do not use elsewhere.
5. Report Suspicious Activity: If someone seems suspicious or too eager to learn your exact location, report them to the app’s support team.
6. Stay Updated: Keep your apps updated to ensure you have the latest security features and patches.
7. Use Secure Connections: Always use a secure internet connection, especially when sharing personal information.

Your safety is paramount, and by taking these precautions, you can enjoy a secure and enjoyable online dating experience.