Connect with us

News

Grindr security flaw exposes user location data

the breach put more than three million daily users at risk

Published

on

Grindr, social media app, gay news, Washington Blade

(Logo courtesy of Grindr)

More than three million of Grindr’s daily users were temporarily put at risk because of a major security flaw in the app that was exposed by a third-party site.

C*ckblocked, a now-defunct site that allowed Grindr users to view who blocked them by entering a Grindr user name and password, was able to access user information from Grindr’s Application programming interface (API). The information included email addresses, deleted photos, personal messages and the location of users.

Trever Faden, founder of C*ckblocked, told NBC that it would be easy for anyone to access a user’s private information.

“One could, without too much difficulty or even a huge amount of technological skill, easily pinpoint a user’s exact location,” Faden told NBC. 

In a separate security issue, Faden claimed that Grindr users’ location, which must be inputed directly into the app and not via a third-party site, was not encoded and could be accessed by anyone monitoring public online traffic.

Faden emphasized that the ability to find a user’s location was “a feature, not a bug.”

NBC reports that two independent cybersecurity researchers confirmed the security flaw.

After Faden informed Grindr of the security issues, Grindr blocked the flaw that allowed third-party sites like C*ckblocked to receive data.

Grindr released a statement advising users not to use their username and password for other sites.

“Grindr moved quickly to make changes to its platform to resolve this issue. Grindr reminds all users that they should never give away their username and password to any third parties claiming to provide a benefit, as they are not authorized by Grindr and could potentially have malicious intent,” the statement reads.

However, Grindr denied that user location isn’t encoded.

“Grindr is a location-based app. Location is a critical element of our social network platform. This allows our users to feel connected to our community in a world that would seek to isolate us. That said, all information transmitted between a user’s device and our servers is encrypted and communicated in a way that does not reveal your specific location to unknown third parties,” Grindr’s Chief Technology Officer Scott Chen told the Huffington Post. 

The company also released a statement on Twitter to inform users that the problems have been addressed and to be safe using their service.

The flaw is similar to the one in the Facebook/Cambridge Analytica scandal, which allegedly exposed the personal data of 50 million users.

Advertisement
FUND LGBTQ JOURNALISM
SIGN UP FOR E-BLAST

District of Columbia

Bowser appoints first nonbinary person to Cabinet-level position

Peter Stephan named Office of Disability Rights interim director

Published

on

The Wilson Building (Bigstock photo by Leonid Andronov)

D.C. Mayor Muriel Bower has named longtime disability rights advocate Peter L. Stephan, who identifies as nonbinary, as interim director of the D.C. Office of Disability Rights.

The local transgender and nonbinary advocacy group Our Trans Capital and the LGBTQ group Capital Stonewall Democrats issued a joint statement calling Stephan’s appointment an historic development as the first-ever appointment of a nonbinary person to a Cabinet-level D.C. government position.

“This milestone appointment recognizes Stephan’s extensive expertise in disability rights advocacy and marks a historic advancement for transgender and nonbinary representation in District government leadership,” the statement says.

The statement notes that Stephan, an attorney, held the position of general counsel at the Office of Disability Rights immediately prior to the mayor’s decision to name him interim director.

The mayor’s office didn’t immediately respond to a question from the Washington Blade asking if Bowser plans to name Stephan as the permanent director of the Office of Disability Rights. John Fanning, a spokesperson for D.C. Council member Anita Bonds (D-At-Large), said the office’s director position requires confirmation by the Council.

Stephan couldn’t immediately be reached for comment.

“At a time when trans and nonbinary people ae under attack across the country, D.C. continues to lead by example,” said Stevie McCarty, president of Capital Stonewall Democrats. “This appointment reflects what we have always believed that our community is always strongest when every voice is represented in government,” he said.

“This is a historic step forward,” said Vida Rengel, founder of Our Trans Capital. “Interim Director Stephan’s career and accomplishments are a shining example of the positive impact that trans and nonbinary public servants can have on our communities,” according to Rangel. 

Continue Reading

Bulgaria

Top EU court issues landmark transgender rights ruling

Member states must allow name, gender changes on ID documents

Published

on

(Photo by nito/Bigstock)

The European Union’s highest court on Thursday ruled member states must allow transgender people to legally change their name and gender on ID documents.

The EU Court of Justice in Luxembourg issued the ruling in the case of “Shipova,” a trans woman from Bulgaria who moved to Italy.

“Shipova” had tried to change her gender and name on her Bulgarian ID documents, but courts denied her requests for nearly a decade.

A ruling the Bulgarian Supreme Court of Cassation issued in 2023 essentially banned trans people from legally changing their name and gender on ID documents. Two Bulgarian LGBTQ and intersex rights groups — the Bilitis Foundation and Deystvie — and ILGA-Europe and TGEU – Trans Europe and Central Asia supported the plaintiff and her lawyers.  

“Because her life in Italy also depended on her Bulgarian documents, the lack of documents reflecting her lived gender creates an obstacle to her right to move and reside within EU member states,” said the groups in a press release. “This mismatch between her gender identity and expression and her gender marker in her official documents leads to discrimination in all areas of life where official documents are required. This includes everyday activities such as going to the doctor and paying for groceries by card, finding employment, enrolling in education, or obtaining housing.” 

Denitsa Lyubenova, a lawyer with Desytvie, in the press release said the case “concerns the dignity, equality, and legal certainty of trans people in Bulgaria.” TGEU Senior Policy Officer Richard Köhler also praised the ruling.

“Today, the EU Court of Justice has taken an important step towards a right to legal gender recognition in the EU,” said Köhler. “Member states must allow their nationals living in another member state to change their gender data in public registries and identity cards to ensure they can fully enjoy their freedom of movement. National laws or courts cannot stand in their way.” 

“Thousands of trans people in the EU are breathing a sigh of relief today,” added Köhler.

Continue Reading

Senegal

Senegalese lawmakers approve bill to further criminalize homosexuality

A dozen men arrested in February for ‘unnatural acts’

Published

on

(Image by xileodesigns/Bigstock)

Senegalese lawmakers on Wednesday approved a bill that would further criminalize consensual same-sex sexual relations in the country.

The Associated Press notes the measure that Prime Minister Ousmane Sonko introduced in February would increase the penalty for anyone convicted of engaging in consensual same-sex sexual relations from one to five years in prison to five to 10 years. The AP further indicates the bill would prohibit the “promotion” or “financing” of homosexuality in the country.

The bill passed with near unanimous support. Only three of 135 MPs abstained.

President Bassirou Diomaye Faye is expected to sign the measure.

The National Assembly in 2021 rejected a bill that would have further criminalized homosexuality in Senegal.

Senegalese police last month arrested a dozen men and charged them with committing “unnatural acts.”

Volker Türk, the U.N. high commissioner for human rights, in a statement described the bill as “deeply worrying.”

“It flies in the face of the sacrosanct human rights we all enjoy: the rights to respect, dignity, privacy, equality and freedoms of expression, association, and peaceful assembly,” he said.

Türk also urged Faye not to sign the bill.

“I urge the president not to sign this harmful law into effect, and for authorities to repeal the existing discriminatory law and to uphold the human rights of all in Senegal, without discrimination,” said Türk. 

Continue Reading

Popular