In a groundbreaking Check Point Research (CPR) analysis, vulnerabilities have been uncovered in several popular dating applications, cumulatively boasting over 10 million downloads.
This investigation focused on the inherent risks associated with the use of geolocation data—a feature that, while designed to connect users with potential matches in their vicinity, may compromise their privacy.
Among the scrutinized apps, “Hornet,” a widely used gay dating platform, was found to have significant security flaws that could reveal the exact locations of its users.
CPR’s research highlighted a technique to pinpoint user coordinates using distance information.
Despite Hornet’s efforts to safeguard user privacy by disabling the display of distances, CPR developed a method that achieved location accuracy within 10 meters in controlled experiments.
Following the discovery, Hornet’s developers have taken steps to mitigate these risks, reducing location accuracy to 50 meters.
However, the initial vulnerability posed a substantial privacy risk to its users.
Geolocation technology can pinpoint the real-world geographic location of a device with varying degrees of accuracy.
Trustifi’s Advanced threat protection prevents the widest spectrum of sophisticated attacks before they reach a user’s mailbox. Try Trustifi Free Threat Scan with Sophisticated AI-Powered Email Protection .
While this technology offers numerous benefits, it also presents several privacy and security risks, such as unauthorized data access, unintended sharing with third parties, and potential exploitation by malicious actors.
CPR’s methodology involved sorting users by ascending the distance order and using two known distances to estimate the target user’s location.
Additionally, by registering an additional account with controllable coordinates, researchers could refine their search and narrow the distance between the target and the auxiliary account, achieving remarkable precision.
The research utilized a two-step trilateration process, initially identifying two possible candidate locations before selecting the correct solution with information from a third reference point.
This method allowed for an astonishingly high accuracy in determining user locations.
The vulnerabilities discovered in the Hornet dating app underscore the significant privacy risks of exposing user geolocation.
Despite improvements made by Hornet’s developers, the potential for location determination remains.
CPR advises users to exercise caution with app permissions and to disable location services to protect their privacy.
This proactive approach can prevent apps from tracking movements and sharing personal data with external entities, ensuring a safer online dating experience.
Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.
Microsoft has rolled out its April 2025 Patch Tuesday update, addressing 121 security vulnerabilities across…
In a disturbing evolution of financial fraud, cybercriminals are leveraging advanced techniques to exploit mobile…
A recently disclosed SQL injection vulnerability in older versions of the Shopware platform has raised…
A recent malware distribution scheme has been uncovered on SourceForge, the popular software hosting and…
Cybersecurity experts have uncovered an alarming escalation in cyber-espionage operations targeting Ukrainian critical sectors, as…
Vidar Stealer a notorious information-stealing malware has adopted a deceptive method to disguise itself as…