News
Grindr security flaw exposes user location data
the breach put more than three million daily users at risk

(Logo courtesy of Grindr)
More than three million of Grindr’s daily users were temporarily put at risk because of a major security flaw in the app that was exposed by a third-party site.
C*ckblocked, a now-defunct site that allowed Grindr users to view who blocked them by entering a Grindr user name and password, was able to access user information from Grindr’s Application programming interface (API). The information included email addresses, deleted photos, personal messages and the location of users.
Trever Faden, founder of C*ckblocked, told NBC that it would be easy for anyone to access a user’s private information.
“One could, without too much difficulty or even a huge amount of technological skill, easily pinpoint a user’s exact location,” Faden told NBC.
In a separate security issue, Faden claimed that Grindr users’ location, which must be inputed directly into the app and not via a third-party site, was not encoded and could be accessed by anyone monitoring public online traffic.
Faden emphasized that the ability to find a user’s location was “a feature, not a bug.”
NBC reports that two independent cybersecurity researchers confirmed the security flaw.
After Faden informed Grindr of the security issues, Grindr blocked the flaw that allowed third-party sites like C*ckblocked to receive data.
Grindr released a statement advising users not to use their username and password for other sites.
“Grindr moved quickly to make changes to its platform to resolve this issue. Grindr reminds all users that they should never give away their username and password to any third parties claiming to provide a benefit, as they are not authorized by Grindr and could potentially have malicious intent,” the statement reads.
However, Grindr denied that user location isn’t encoded.
“Grindr is a location-based app. Location is a critical element of our social network platform. This allows our users to feel connected to our community in a world that would seek to isolate us. That said, all information transmitted between a user’s device and our servers is encrypted and communicated in a way that does not reveal your specific location to unknown third parties,” Grindr’s Chief Technology Officer Scott Chen told the Huffington Post.
The company also released a statement on Twitter to inform users that the problems have been addressed and to be safe using their service.
As a company that serves the LGBTQ community, we understand the delicate nature of our users’ privacy. Ensuring safety and security of our users is of paramount importance to us and will continue to be our top priority. pic.twitter.com/vD2zXqxSr0
— Grindr (@Grindr) March 29, 2018
The flaw is similar to the one in the Facebook/Cambridge Analytica scandal, which allegedly exposed the personal data of 50 million users.
District of Columbia
Mayor Bowser signs bill requiring insurers to cover PrEP
‘This is a win in the fight against HIV/AIDS’
D.C. Mayor Muriel Bowser on March 20 signed a bill approved by the D.C. Council that requires health insurance companies to cover the costs of HIV prevention or PrEP drugs for D.C. residents at risk for HIV infection.
Like all legislation approved by the Council and signed by the mayor, the bill, called the PrEP D.C. Amendment Act, was sent to Capitol Hill for a required 30-day congressional review period before it takes effect as D.C. law.
Gay D.C. Council member Zachary Parker (D-Ward 5) last year introduced the bill.
Insurance coverage for PrEP drugs has been provided through coverage standards included in the Affordable Care Act, known as Obamacare. But AIDS advocacy organizations have called on states and D.C. to pass their own legislation requiring insurance coverage of PrEP as a safeguard in case federal policies are weakened or removed by the Trump administration, which has already reduced federal funding for HIV/AIDS-related programs.
Like legislation passed by other states, the PrEP D.C. Amendment Act requires insurers to cover all PrEP drugs approved by the U.S. Food and Drug Administration.
Studies have shown that PrEP drugs, which can be taken as pills or by injection just twice a year, are highly effective in preventing HIV infection.
“I think this is a win for our community,” Parker said after the D.C. Council voted unanimously to approve the bill on its first vote on the measure in February. “And this is a win in the fight against HIV/AIDS.”
Vice President JD Vance and his wife, second lady Usha Vance, will visit Hungary next week.
An announcement the White House released on Thursday said the Vances will be in Budapest, the Hungarian capital, from April 7-8.
JD Vance “will hold bilateral meetings with” Hungarian Prime Minister Viktor Orbán. The announcement further indicates the vice president “will also deliver remarks on the rich partnership between the United States and Hungary.”
The Vances will travel to Hungary less than a week before the country’s parliamentary elections take place on April 12.
Orbán, who has been in office since 2010, and his Fidesz-KDNP coalition government have faced widespread criticism over its anti-LGBTQ crackdown.
The Associated Press notes polls indicate Orbán is trailing Péter Magyar and his center-right Tisza party.
President Donald Trump removed Attorney General Pam Bondi from her post Thursday, following growing criticism over how she and the Department of Justice handled a range of issues, including matters related to sex offender and Trump ally Jeffrey Epstein.
Trump announced Bondi’s removal on Truth Social, where he also said Todd Blanche will serve as acting head of the Justice Department.
“Pam Bondi is a great American patriot and a loyal friend, who faithfully served as my attorney general over the past year,” Trump wrote on the platform. “Pam did a tremendous job overseeing a massive crackdown on crime across our country, with murders plummeting to their lowest level since 1900.”
Trump was seen as recently as Wednesday with the now-former attorney general at a Supreme Court hearing on citizenship.
The decision contrasts with Trump’s previous public praise of Bondi, the 87th U.S. attorney general and former 37th attorney general of Florida, who served in that role from 2011-2019 before joining the Trump-Vance administration. He has frequently lauded her loyalty and said he speaks with her often. Bondi was also one of president’s defense lawyers during his first impeachment trial.
Privately, however, Trump had grown frustrated that Bondi was not “moving quickly enough” to prosecute critics and political adversaries he wanted to face criminal charges, according to multiple sources. The New York Times reported that her inability to charge former FBI Director James B. Comey and New York Attorney General Letitia James with any crimes is a large factor in the president’s choice to fire her from the government’s primary law enforcement agency.
The move comes as Trump has sought to minimize public turmoil within his administration, avoiding the perception of a revolving-door Cabinet that defined his first term.
Lee Zeldin, a former Republican congressman from New York who unsuccessfully ran for governor, has emerged as a leading contender to lead the Justice Department. He has been one of Trump’s most reliable allies.
“He’s our secret weapon,” Trump said of Zeldin in February during a White House event promoting the coal industry, adding, “He’s getting those approvals done in record-setting time.”
Bondi has also growing faced scrutiny from Congress.
The House Oversight Committee recently subpoenaed her to testify about the department’s handling of certain files, where she declined to answer key questions during a contentious House Judiciary Committee hearing in February.
The Tampa native has a long history of opposing LGBTQ rights through her roles in government. As Florida attorney general, she fought against the legalization of same-sex marriage, arguing it would cause “serious public harm,” pushing forward a legal battle that cost taxpayers nearly half a million dollars. She also asked the Florida Supreme Court to overturn a lower court ruling that found the state’s same-sex marriage ban unconstitutional.
More recently, Bondi established a “Title IX Special Investigations Team” within the Justice Department focused on restricting transgender women and girls from participating in women’s and girls’ sports teams and accessing facilities aligned with their gender identity. She also told Children’s Hospital of Philadelphia to turn over the medical records of anyone under 19 who received gender-affirming care.
Her removal follows Trump’s decision last month to oust another controversial female Cabinet figure, Kristi Noem.
