Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Who do you trust? Would tinder and bumble have the same mindset?


Applies to all dating apps, really: just treat any info you put in your profile as 100% public, for anyone, worldwide. Location is easily faked, other filtering options are about as effective as a lone "do not enter" sign with no fence - I can put any info I like into my profile to fit your criteria and have you show up in my feed.

Chats? The only IM apps with functional E2EE are: Signal, iMessage, WhatsApp; and even those have trade-offs. Treat everything else as readable by some third party, and dating apps by design need to be able to look into people's chats to be able to handle harassment cases.

That of course is no excuse for having gaping security/privacy holes, but you're trading off quite a bit of privacy by design; it's like meeting in a public space where you can feel a little bit safer with someone you don't know yet.

I'd say if you're concerned with any of that, go meet new people IRL, but there are 100% legitimate cases where this is not the most effective strategy (e.g. Feeld's primary target audience).


Lots of great points in your post.

Real question: Has WhatsApp ever had a security leak that we know about? Example: Someone can break into accounts, or chats were leaked?


> Real question: Has WhatsApp ever had a security leak that we know about? Example: Someone can break into accounts, or chats were leaked?

Yes, a bunch of them. I don't remember any of the years, but from the top of my head:

- Pegasus was installable via Whatsapp calls that didn't need to be installed, probably the most famous vulnerability with the largest impact

- Bunch of multimedia vulnerabilities that allowed attackers remote execution

- At least one huge database dump was released at some point


Oh, I forgot about Pegasus. Hat tip there.


> Has WhatsApp ever had a security leak that we know about?

I don't know of any, but I distrust anything Meta/FB/MZ does, out of principle.

I have more trust in iMessage, but it's incredibly tightly tied to Apple's devices (as far as I can tell, part of its security architecture relies on the hardware/SEP).

Signal (as a non-profit org) could have been a neutral third party everyone could feel safe to trust, but they've lost my confidence when they introduced support for cryptocurrencies - I can no longer trust their motives. It also does not offer any choice over some security/usability trade-offs (like syncing your chat history to a new device); I understand this is critical for e.g. whistleblowers, but a deal-breaker for many of the rest of us.


Those types of bugs can be sold for millions so you probably won't hear about them


The for-profit dating scene is a quagmire. Sure it can work, I've seen it work, but at what cost?

We desperately need a new platform owned and operated by the people, for the people.



Hey, sign me up. Outside the "necessary evil" trade-offs inherent to facilitating one-on-one meetups, I would really love a platform that treats people like people, not cattle to be milked for money.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: