OkCupid's Blind Dates Not So Blind, Thanks To Revealing App Bug

By Alexandra Burlacu email: a.burlacu@mobilenapps.com | Jan 17, 2013 10:53 AM EST

Share This Story

  • Print
  • Email

Blind dates can be both exciting and scary, because you never know who you're going to meet and how it could turn out.

Some people have found their soulmates through blind dates, others have just found new targets for a restraining order. Either way, OkCupid wants people to have an easy way to set up blind dates, and has launched a new mobile app called Crazy Blind Date.

Follow us

The really crazy part about this Crazy Blind Date app is that it's not so blind anymore. The app aims to make things simple - a user names a time and place and the app finds a suitable blind date.

As the Wall Street Journal found out, however, the app's software took the blind out of blind dates and made users' full birth dates and e-mail addresses accessible "to anyone with the right technical skills."

When anonymity stands at the very core of a service, such a glitch can prove to be a huge problem. Moreover, one could also exploit the app bug to see the information of people nearby who had signed up to use the service.

According to the Wall Street Journal, the bug occurred in Crazy Blind Date's Application Programming Interface (API). Not only were the e-mail addresses and birth dates accessible, but one could also use the API to take an app user's ID and correlate it to their own OkCupid Profile, which could potentially reveal more information on that user.

OkCupid patched the security hole immediately after the WSJ notified it of the issue and a version 1.1 of the Crazy Blind Date app is already available in the App Store. The app is available for Android as well. OkCupid CEO Sam Yagan told the WSJ that his company found no evidence of anyone exploiting the glitch. Even so, the bug still raises a red flag over how easily one's information could be accessed through such online services, even if the app claims otherwise.

With the glitch fixed, the app's API now provides just the user's ID, first name, gender, desired date's gender, and profile photo. E-mail addresses and full birth dates are no longer accessible.

Get the Most Popular Mobile&Apps Stories in a Weekly Newsletter

Join Our Conversation

The HTC logo is seen with different devices from the brand HTC M10 Perfume Launching A Month Later After MWC 2016
Lava Unleashes New P7 Device Into The Indian Market
New Disney Phone Coming To Japan
Xiaomi Locks Redmi Note 3, Mi 4c And Mi Note Pro; Others To Follow Suit?
Tablet / Laptop / PC
Dell Venue 7 and Venue 8 Dell unveils Venue 7 and Venue 8 Android 4.3 Jelly Bean tablets
Retina iPad Mini facing delays, may not launch until early next year
Refurbished 128GB iPad with Retina Display now available on the Apple Online Store
Samsung Galaxy Note 10.1 – 2014 Edition: Pricing and availability now official
Amazon Logo Amazon reportedly to launch ‘Firetube’ set-top box before 2013 holidays
Samsung Galaxy Note 3 and Galaxy Gear India launch: Pricing and availability
Samsung Galaxy Gear Android smartwatch now up for pre-order in Canada
Samsung Galaxy Gear 2 reportedly in the works already, may debut at CES or MWC 2014
OS / Software
HTC Logo HTC reportedly considering Android/Windows Phone dual-booting smartphone as Microsoft pushes for deeper Windows mobile integration
iOS 7 Chrome Incognito mode leaks private searches due to bug
Sprint HTC One Android 4.3 Jelly Bean already rolling out, AT&T, T-Mobile & Verizon to follow
Microsoft Windows 8.1 now available for pre-order
Internet / Social Media
Google Downtime Google blacks out for two minutes, causes 40 percent drop in world’s Internet traffic
Xbox Music web player is live and ready for Xbox Music Pass subscribers
Facebook Android app collected phone numbers even if users never logged in
Firefox 22 brings support for web video calls, 3D gaming, and Unreal Engine 3
What's App
ZTE's new lease program ZTE’s new Lease-to-own Program for Mobile Devices
LG’s G Pay to Take on Google, Samsung and Apple
Facebook: Taxes in the UK and a new Shopping tab
Samsung’s VR Headset to be Released at $99, Hulu Jumps Onboard with Apps Ready

Most Popular

© 2016 IBT Media Inc. All Rights Reserved.mobilenapps