Comment on How I was able to track the location of any Tinder userComments−elwell12yThis is a really beautiful hack. Not just some SQL injection run-of-the-mill vulnerability. Very clever.−IncludeSecurity12yThanks, these are the kind that we find every week. We also get bored of the SQLi/XSS treadmill....it's much more fun to find a parsing error that leads to a crypto vuln that bypasses authentication (hint hint for a future blog post)
Comments
This is a really beautiful hack. Not just some SQL injection run-of-the-mill vulnerability. Very clever.
Thanks, these are the kind that we find every week. We also get bored of the SQLi/XSS treadmill....it's much more fun to find a parsing error that leads to a crypto vuln that bypasses authentication (hint hint for a future blog post)