4 ms·

It's very interesting that you can use such a feature to triangulate a location, I never thought of that. I discovered a "secure" and "private" dating app, tha

It's very interesting that you can use such a feature to triangulate a location, I never thought of that. I discovered a "secure" and "private" dating app, that just sent the location of the users directly through the API, and then it was up to the clients to do the calculation: http://kaspergrubbe.com/teazr-a-secure-dating-app-with-security-issues http://kaspergrubbe.com/teazr-a-secure-dating-app-with-secur...

geek_at 6y ago
you're right, that _does_ look like a perfect location for a cozy couch
fastball 6y ago
Tinder used to do that as well with location data. Also they used to send your raw birth date over the wire (in order to display your age to other users, calculated on the frontend) until I told them to stop.
dylan604 6y ago
>you can use such a feature to triangulate a location, I never thought of that. Of course this is exactly what people are going to do with that kind of feature. Sharing of location data is such an obvious thing to get exploited. It is part of the human base instinct is to take any new thing to the worst places it can go. There are certain aspects that the first question should be how can this get exploited for uses other than how we want to use it. If nobody in the room can come up with a way, then you need different people in the room.
morpheuskafka 6y ago
The HelloTalk app works the same way. If a users chooses to share their location, it sends the raw GPS coordinates (afaik the only thing limiting them is the device's accuracy and if the user choose not to share "precise" location in iOS) to the server. Then, these get added to a sqlite database on the client and the way they get obscured is when you zoom in past a certain point on the map, their code turns off the dot that shows their position.
lights0123 6y ago
> He was under the impression that using https and Parse everything was secure. That's not something you want to hear from the developer of a "secure" service...

geek_at 6y ago

you're right, that _does_ look like a perfect location for a cozy couch

fastball 6y ago

Tinder used to do that as well with location data. Also they used to send your raw birth date over the wire (in order to display your age to other users, calculated on the frontend) until I told them to stop.

dylan604 6y ago

>you can use such a feature to triangulate a location, I never thought of that. Of course this is exactly what people are going to do with that kind of feature. Sharing of location data is such an obvious thing to get exploited. It is part of the human base instinct is to take any new thing to the worst places it can go. There are certain aspects that the first question should be how can this get exploited for uses other than how we want to use it. If nobody in the room can come up with a way, then you need different people in the room.

morpheuskafka 6y ago

The HelloTalk app works the same way. If a users chooses to share their location, it sends the raw GPS coordinates (afaik the only thing limiting them is the device's accuracy and if the user choose not to share "precise" location in iOS) to the server. Then, these get added to a sqlite database on the client and the way they get obscured is when you zoom in past a certain point on the map, their code turns off the dot that shows their position.

lights0123 6y ago

> He was under the impression that using https and Parse everything was secure. That's not something you want to hear from the developer of a "secure" service...