Dating App ‘Raw’ Accidentally Rawdogs Users’ Location Data, Personal Info

A dating app that only announced this week, a weird dress, has been found to have publicly exposed consumer data. The statistics were gracious and personal, including places near them.

The app, Ra, says it is Is dedicated to promotion Its “real and unusable love”, which resembles barrels (it uses the next and previous camera of your phone), through its unique user interface), but for dating. RAW recently announced A strange piece of hardwareCalled, called RawWho intends to allow consumers to track the location of their loved ones so that they are not cheating (there is no way that can lead to distress, okay?). Unfortunately, it would be evident that RAW is also promoting something else in the “unconstitutional” fashion: consumer data.

Takkarch Reports Due to lack of basic digital security concerns, RAW accidentally left consumer personal information open for public inspection. In fact, before this week, anyone with a web browser could access the app user’s detailed information, including their date of birth, display names, sexual preferences, and a lot of specific “street level” location data.

Tech Crunch says it discovered security shortages during a short test of the company app. Rao was downloaded to a virtualized Android device, and then TC staff used a network monitoring tool to observe the data in the app and from it. Analysis shows that personal data is not being preserved with any verification barrier. TC says it discovered the problem within the first “a few minutes” to use the app. The TC also noted that, while the end of the raw, at the end of the raw, claims to protect the encryption users, it has found no evidence that E2EE was present. They break the same way the security detection:

When we first loaded the app, we found that it was pulling the user’s profile information directly from the company’s servers, but that the server was not protecting the returned data with any verification. In practice, this meant that anyone could access the web address of an exposed server using any other private information from any other private information. api.raw.app/users/ Then according to another app user, there is a unique number of 11 digits. Changing the digits to compatible with another user’s 11 digit identifier returned private information from this user’s profile, including their location data. Such weakness is known as an unsafe direct object reference, or Idor, a type of bug that allows someone to access or edit data on someone else’s server due to lack of appropriate security checks on a user who accesses data.

For more information, Gazmudo reached Rao. According to statements made to the Tech Crunch, security issues have been compromised by Wednesday. “The closing locations that have been exposed earlier have been protected earlier, and we have implemented additional safety measures to prevent similar issues in the future,” Marina Anderson, co -founder of the Rape Rating app, told outlets.

Protecting user data for companies is not uncommon. The strange thing is as if it can sound, security in the software industry is not particularly a great priority. This time can be demand, expensive, and slow down other parts of the production, a lot of companies Just don’t worry about it. With a dating app, however – a business that is dedicated to handling users’ highly intimate and sensitive data. It is obvious that locking the luggage pays for a little more time. As they say: Wrap it before taping it.