Group dating app 3Fun was found to be lacking in security that jeopardized the private information of their users.
The issue was immediately resolved by the team, but it could have been a major problem for affected users.
‘Privacy Trainwreck’
A recent report from security firm Pen Test Partners revealed the ”privacy trainwreck” in the group dating app 3Fun. According to the report, retrieving user data was as simple as spoofing a GPS location in the app. Doing this led to revealing the users’ “near real-time” location, sexual preferences, birth dates, private photos, and chats. Even if personal information was filtered on the app itself, it was still easy to retrieve from the servers.
When tested, the results even revealed that there were users of the app in the White House and the Supreme Court. The report, however, does not that no detailed information was revealed about those users and it is possible that those were just spoofed locations as well.
Private Information
As for 3Fun, the developers immediately sorted out the issue within weeks after they were notified. Pen Test Partners note that this could have been disastrous for users if anyone decided to use their private information against them.
“How many relationships or careers could be ended through this data being exposed?” the firm noted, especially since similar events have happened before.
In the Ashley Madison breach years ago, many were severely affected, and a New Orleans pastor who was found on the site even committed suicide.
Privacy in apps such as these is not to be taken lightly.
3Fun
As mentioned, 3Fun is basically a group dating app for “open-minded” people who are into “3some, Swinger Lifestyle & BDSM.” The app claims to have 1.5 million users worldwide in top cities such as New York, Chicago, Los Angeles, Las Vegas, and Washington D.C. It boasts privacy protection in that only those whom the users have liked would be able to see their profiles.
