Latest in Gear

Image credit: undefined undefined via Getty Images

Group dating service 3Fun exposed data for 1.5 million users

It included detailed info that could be used for blackmail.
106 Shares
Share
Tweet
Share
Save

Sponsored Links

undefined undefined via Getty Images

Yet another dating service is learning about the dangers of data vulnerablilities. Pen Test Partners discovered that threesome-oriented app 3Fun left 1.5 million users' data exposed, including precise locations, sexual orientation and even private photos. You only needed to spoof your location to glean information from people in a given area. While you could restrict positional info from the app, that filtering didn't apply on the servers -- a nosy person just had to query the service's framework to find someone's claimed whereabouts.

While that data would be sensitive in most any context, it could be particularly damaging with an app like 3Fun. An attacker could have used the info for extortion, scams or stalking knowing that many of the victims might be hesitant to let this knowledge escape into the wild. The consequences wouldn't necessarily be as dire as they were with the Ashley Madison breach, but they could still have been serious.

To its credit, 3Fun fixed the issue within a few weeks of Pen Test notifying the company on July 1st. The concern is that 3Fun exposed this information in the first place. It didn't just reflect a lack of concern for users' security, it jeopardized their trust. Dating apps rely on privacy and discretion as a matter of course, and users could quickly jump ship if they don't feel their info is truly secure.

Via: TechCrunch
In this article: 3fun, app, dating, gear, internet, privacy, security, sex
All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
106 Shares
Share
Tweet
Share
Save

Popular on Engadget

Engadget's Guide to Privacy

Engadget's Guide to Privacy

View
Pocket Casts will give existing desktop customers Plus for life

Pocket Casts will give existing desktop customers Plus for life

View
Verizon will bring its 5G network to NYC on September 26th

Verizon will bring its 5G network to NYC on September 26th

View
Switch Lite review: The best way to play on the go

Switch Lite review: The best way to play on the go

View
Amazon plans to hit Paris climate change goals 10 years early

Amazon plans to hit Paris climate change goals 10 years early

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr