Kink and LGBT dating apps exposed 1.5m private user images online
Researchers have discovered nearly 1.5 million pictures from specialist dating apps – many of which are explicit – being stored online without password protection, leaving them vulnerable to hackers and extortionists.
Anyone with the link was able to view the private photos from five platforms developed by M.A.D Mobile: kink sites BDSM People and Chica, and LGBT apps Pink, Brish and Translove.
These services are used by an estimated 800,000 to 900,000 people.
M.A.D Mobile was first warned about the security flaw on 20th January but didn't take action until the BBC emailed on Friday.
They have since fixed it but not said how it happened or why they failed to protect the sensitive images.
Ethical hacker Aras Nazarovas from Cybernews first alerted the firm about the security hole after finding the location of the online storage used by the apps by analysing the code that powers the services.
He was shocked that he could access the unencrypted and unprotected photos without any password.
"The first app I investigated was BDSM People, and the first image in the folder was a naked man in his thirties," he said.
"As soon as I saw it I realised that this folder should not have been public."
The images were not limited to those from profiles, he said – they included pictures which had been sent privately in messages, and even some which had been removed by moderators.
Mr Nazarovas said the discovery of unprotected sensitive material comes with a significant risk for the platforms' users.
Malicious hackers could have found the images and extorted individuals.
There is also a risk to those who live in countries hostile to LGBT people.
None of the text content of private messages was found to be stored in this way and the images are not labelled with user names or real names, which would make crafting targeted attacks at users more complex.
In an email M.A.D Mobile said it was grateful to the researcher for uncovering the vulnerability in the apps to prevent a data breach from occurring.
But there's no guarantee that Mr Nazarovas was the only hacker to have found the image stash.
"We appreciate their work and have already taken the necessary steps to address the issue," a M.A.D Mobile spokesperson said. "An additional update for the apps will be released on the App Store in the coming days."
The company did not respond to further questions about where the company is based and why it took months to address the issue after multiple warnings from researchers.
Usually security researchers wait until a vulnerability is fixed before publishing an online report, in case it puts users at further risk of attack.
But Mr Nazarovas and his team decided to raise the alarm on Thursday while the issue was still live as they were concerned the company was not doing anything to fix it.
"It's always a difficult decision but we think the public need to know to protect themselves," he said.
In 2015 malicious hackers stole a large amount of customer data about users of Ashley Madison, a dating website for married people who wish to cheat on their spouse.
Ashley Madison client data 'leaked'
The hackers taking the bugs to the bank
'Sensitive' army papers found scattered in street
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
31 minutes ago
- Yahoo
Held at gunpoint: BBC team detained by Israeli forces in southern Syria
On the morning of 9 May, I was part of a BBC Arabic team which left the Syrian capital, Damascus, for the southern province of Deraa. From there we planned to go to the frontier with the Israeli-occupied Golan Heights. We wanted to get close to the Syrian territory that has been seized by the Israeli military since December, when Israel's prime minister said it was taking control indefinitely of a demilitarised buffer zone and neighbouring areas following the fall of Bashar al-Assad's regime. We were a team of seven - myself (a British citizen), two Iraqi BBC staff, and four Syrians - three freelancers and one BBC cameraman. Israel says it struck near Syria palace over violence in Druze areas First Druze crossing in 50 years as Israel courts allies in Syria Israeli strikes in Syria a challenge to Turkey We were filming near one of the UN Disengagement Observer Force (UNDOF) observation posts, close to the town of al-Rafeed, when an official from the UN told us that the Israeli side had inquired about our identity and had been informed that we were a BBC crew. We next drove north towards Quneitra city, which has been located inside the buffer zone since a 1974 disengagement agreement between Syria and Israel, which captured the Golan during the 1967 Middle East war. About 200m (660ft) away from the city, an unguarded checkpoint blocked the road. To the side of the checkpoint we spotted Merkava tanks, one of which was flying an Israeli flag. From a nearby tower, two Israeli soldiers were watching us - one of them through binoculars - and my colleague held his BBC ID up for them to see. The BBC has complained to the Israeli military about what happened next to my team, but it has not yet received a response. A minute after we started filming in the area, a white car approached from the other side of the checkpoint. Four Israeli soldiers got out of the car and surrounded us. They pointed their rifles at our heads and ordered us to place the camera on the side of the road. I tried to explain that we were a BBC crew, but things escalated unexpectedly quickly. I was able to send a message to my BBC colleagues in London saying that we had been stopped by the Israeli military before our phones and all equipment were confiscated, more Israeli soldiers arrived in a Humvee military vehicle, and our car was thoroughly searched. The soldiers escorted us through a barrier into the city of Quneitra and stopped at the crossing point that separates Quneitra from the occupied Golan. There, the soldiers began reviewing the footage as we sat in our car, while one pointed his rifle at my head from metres away. After more than two hours, one of the soldiers asked me to step out of the car and speak on a mobile phone. I didn't know who the person on the line was. He spoke broken Arabic. He asked why we were filming Israeli military positions. I told him I was a British BBC journalist and explained to him the nature of our work. I returned to my car, and the rifle was again aimed at my head. After another hour of waiting, one more vehicle arrived. A group of security personnel got out of the car carrying blindfolds and plastic zip ties and asked me to step out first. The lead officer, who spoke fluent Palestinian Arabic dialect, took me by the hand towards one of the rooms at the crossing point which were previously used by the Syrian army. The floor was strewn with broken glass and rubbish. He told me that they would treat me differently - no handcuffs, nor blindfold - unlike the rest of my team. I was in shock. I asked why they were doing this when they knew we were a BBC crew. He said he wanted to help get us out quickly and that we had to comply with their instructions. Moments later, another officer entered and told me to take off all my clothes except my underwear. I initially refused, but they insisted, and threatened me, so I complied. He inspected even inside my underwear, both front and back, searched my clothes, then told me to put them back on and started interrogating me - including personal questions about my children and their ages. When they eventually let me out of the room, I witnessed the horrific scene of my team members, tied up and blindfolded. I pleaded to the officer to release them, and he promised to do so after the interrogations. They were taken one by one to the same room for strip search and questioning. They returned with their hands still bound but not blindfolded. The team's interrogation lasted more than two hours, during which all our phones and laptops were examined, and many photos - including personal ones - were deleted. The officer threatened us with worse consequences if we approached the frontier from the Syrian side again, and said that they know everything about us and would track us down if any hidden or un-deleted photo was ever published. About seven hours after our detention - it was past 21:00 - we were taken by two vehicles, one in front of our car and the other behind us, to a rural area about 2km (1.2 miles) outside Quneitra. There, the vehicles stopped and a bag containing our phones was thrown towards us before the vehicles left. Lost in the dark with no signal, no internet and no idea where we were, we kept driving until we reached a small village. A group of children pointed us to the highway, warning that a wrong turn could draw Israeli fire. Ten tense minutes later, we found the road. Forty-five minutes after that, we were in Damascus. Israel demands complete demilitarisation of southern Syria 'We just need peace': BBC speaks to Syrians watching Israel's incursion Israel seizes Golan buffer zone after Syrian troops leave positions
Yahoo
4 hours ago
- Yahoo
The (incomplete) truth about the BBC's Gaza headlines
Donald Trump's press secretary was confident she had the BBC bang to rights. Responding to a question about the shooting of civilians at the new US-backed aid distribution centres in southern Gaza, Karoline Leavitt accused the BBC of misreporting the story. Her evidence was a list of different headlines for the same story, which she then read out. 'Israeli tank kills 26.' 'Israeli tank kills 21.' 'Israeli gunfire kills 31.' In case there was any doubt about her opinion of Britain's national broadcaster, Ms Leavitt presaged her remarks with: 'Unfortunately, unlike some in the media, we don't take the word of Hamas as total truth.' Behind closed doors in Jerusalem and Tel Aviv, fists will have punched the air. Israel's reputation managers have had a battering in the past few days, with allegations of three shootings of civilians by the IDF near the already controversial new aid stations. It has threatened to discredit entirely the current phase of its military operation to flush out Hamas. What is currently happening in the 25-by-6-mile pocket of land in the corner of the Levant is arguably the most acute military and humanitarian situation in the world. But trusted information here is scarce. Israel banned independent journalists from entering the Strip straight after the October 7 Hamas massacre. The world now relies on highly polarised and often competing statements from both sides of the divide. And when they cannot be trusted, there is a network of local on-the-ground reporters living under continuous bombings. They are serially displaced people who are out of contact for hours a day. Some of those Gazan reporters on the ground have helped The Telegraph piece together what happened in the latest deadly incident when hungry Palestinians attempted to reach heavily guarded aid. Mervat Zidan, a 20-year-old woman, told us how she ventured from the tent where she lives towards the site with her mother at 4am on Tuesday in the hope of getting food. 'When we reached the area of the Muawiya mosque…heavy shooting started,' she said. It was not clear where from. 'We lay down in the street, trying to escape the bullets. As soon as my mother raised her head, she was shot in the middle of her head and fell to the ground. No one could try to help us. Everyone was trying to escape.' Mervat, who lost her brother in January 2024, also said she saw snipers in a nearby tall building – the only one still standing in the neighbourhood. She says there was also shelling by the IDF. Later in the day, she found her mother, Reem Salmah Al-Akhras, in the mortuary of the Nasser Hospital in Khan Younis, which said it had received 27 bodies from an Israeli shooting. That facility, ultimately, comes under the control of Hamas. However, the International Committee of the Red Cross does not, and it said it sent over the 27 corpses to Nasser, Nineteen of them had been dead on arrival at their field hospital and eight subsequently died of their wounds. There is no confirmation of how these people died or where and by whom they were shot. Israel said its troops fired warning shots at Palestinians walking the wrong way, and when these didn't work, they fired 'near' the civilians. Hamas has publicly warned citizens not to collect aid. The Telegraph has found no evidence that it killed civilians in this incident. The picture, as ever, remains incomplete. Another witness of the shootings corroborated what Mervat saw. Our reporters also spoke to Saeed Al-Feri, a 35-year-old from Beit Lahia in the north of the Strip, who had spent four days trying to get to the aid centre in the south, braving bandits, walking for miles, and finally reaching it on Tuesday. 'Suddenly, shooting and artillery shells began,' he said. 'Whoever was injured had no one to rescue. Everyone was rushing to get aid and a shell was fired at us. 'A quadcopter [drone] came and ordered us over a loudspeaker to retreat.' In recent days, the use of quadcopters and artillery, as well as the general allegations of shooting, have been corroborated by other reporters and witnesses. They are believed to be weapons only Israel has access to. A 29-year-old called Musaa from Khan Younis, who spoke to a different local colleague, described the use of quadcopters and artillery at Sunday's incident. The full, unvarnished truth about what happened at the aid centres may never been known. Verified footage from Tuesday is hard to find. As usual, there is no shortage of people saying that this is because the whole thing is fabricated. Unverified photographs and videos from social media typically fill the vacuum when facts are scarce. They run parallel with statements from officials often linked to Hamas and, of course, the IDF, Israel's military. Independent organisations and charities inside Gaza have slowly been vanishing as the war in the Strip has become more violent. Some have also been blocked by Israel, or excluded from aid distribution. Online misinformation, especially early after an incident takes place, is persistent and aggressive, and the statements of on-the-ground players routinely contradict each other. Take air strikes, for example. The IDF says it targets terrorist command centres. The civilian casualty figures are often published quickly by the health ministry in Gaza, which is ultimately under Hamas control. There is often no way for local reporters or aid workers to reach the bomb site. However, the BBC's network is wide and the organisation cites 'trusted sources' in the Strip – without stating who they are – when it produces fast news reports. It also publishes clarifications. The BBC has entirely rejected Ms Leavitt's criticism, claiming its story and headline from Sunday's shooting were 'updated throughout the day with the latest fatality figures as they came in from various sources'. 'They were always clearly attributed … this is totally normal practice on any fast-moving news story,' a spokesman said. The outlet has certainly come in for some fair criticism since the start of the war – such as misreporting an alleged hospital bombing in the early days. Last month, the Today programme reported a claim by Tom Fletcher, the UN's humanitarian chief, that 14,000 babies in Gaza could die within 48 hours. The corporation later issued a correction when it emerged the figure was an estimate for the number of children at risk of 'severe malnutrition' by March next year. The practice of updating headlines and the wording of stories as the day goes on is not unique to the BBC. However, the reporting of Sunday's attack included one disappearing headline referring to Israeli tanks. This has not yet been confirmed. Israel, as well as some Western analysts, have also argued that Hamas persistently inflates mortality figures, partly by failing to distinguish between combatants and civilians. The terrorist army has a well-oiled propaganda machine. And there have been widespread allegations about their use of fake news to try to deter ordinary Gazans from accessing the Gaza Humanitarian Foundation (GHF) aid hubs. The fingerprints of Hamas or their supporters can often be traced to examples of misattribution involving some, although not all, of the most heartbreaking and bloody videos. Israel also tries to control the narrative in its own way. Under Benjamin Netanyahu's government, ministers brand allegations of IDF wrongdoing as 'lies', even when they are later acknowledged to be true. Foreign powers, including key allies, who question the conduct of the ongoing war are accused of siding with Hamas. On Sunday, government aides circulated to foreign media a video appearing to show a Hamas gunman murdering a civilian who was carrying a bag of flour. Credit: IDF It appeared to be an attempt to suggest that the terror group was responsible for the disorder and bloodshed at the GHF distribution sites. But the incident portrayed in the video turned out to have nothing to do with it. It is unlikely that many in Gaza will have noticed Tuesday's noises about BBC reporting in the White House press room. Having been deprived of aid for nearly two months, there are increasing reports of impending starvation. The row between the White House and the BBC is unlikely to help solve the situation. Credit: X Civilians, many of whom have been displaced multiple times, are being forced south towards the already flattened city of Rafah under the current seize-and-hold military escalation of the IDF campaign to finally defeat Hamas. There, they are faced with trying to get food from centres whose wider security is provided by the IDF, a military force in one of the most hostile environments, trained to engage – and not to distribute aid. At the same time, Hamas steps up its campaign of execution and torture of civilians – and associated propaganda videos – in an attempt to keep control of a disintegrating population. According to one civilian who spoke to The Telegraph, people are getting so desperate that it is increasingly hard to distinguish between armed gangs robbing food trucks for money, and those just hoping to feed themselves that day. Meanwhile, on Wednesday, GHF announced it was temporarily closing its aid distribution centres in order to work on better security for the sites. Unusually for Gaza, no one contradicted it. Broaden your horizons with award-winning British journalism. Try The Telegraph free for 1 month with unlimited access to our award-winning website, exclusive app, money-saving offers and more.
Yahoo
9 hours ago
- Yahoo
East Grand Forks parents allege city isn't doing enough to combat bullying in parks and recreation programs
Jun. 4—GRAND FORKS — A group of parents say they feel that East Grand Forks Parks and Recreation is not doing enough to stop bullying within its programs. Three parents spoke in front of the East Grand Forks City Council during its meeting on Tuesday. The parents presented several allegations about the conduct of coaches and parks and recreation staff, but most were centered around Parks and Recreation Coordinator John Wuitschick. "For over a year, I've witnessed and documented a troubling pattern of bullying, retaliation, dishonesty and mismanagement under (Wuitschick's) leadership," East Grand Forks resident Matt Hanglesben told the council. "These issues are professional failures that affect our youth and the families who trust this city to protect them." Hanglesben alleges that the city did not do enough to prevent his son from being bullied during his participation in East Grand Forks Parks and Recreation programs. He also alleges that parks and recreation, namely Wuitschick, has retaliated against his son because of his actions to bring up those issues. "(Wuitshick) also tried to force our team of 11-, 12- and 13-year-old kids to go to a (LGBT) Pride event with him the night before our first state tournament," Hanglesben said. "He made this decision without consulting any parents. ... When I told him that my son wasn't going to go, he retaliated by telling me my children were no longer welcome to play in his summer hockey teams." He added that he, along with other parents he has spoken with, has felt that the quality of programming has gone down since Wuitshick was hired. Wuitshick was first hired by the city in June 2024 as a parks and recreation specialist and later as the parks and recreation coordinator in March. The behavior also extends into coaching practices as well for at least five years, parent Anna Dumas claimed. "These concerns have been brought up to parks and rec's attention numerous times," Dumas said. "This past season, when I shared my concerns again, instead of taking a look at the coach's behavior, they chose to blame my 11-year-old daughter instead." Parker Carlson added that, "this year we had a coach have to leave the bench because of a fight with another coach, so our kids got to witness their coaches fight. ... It doesn't make any sense for these kids to have to go through this." The City Council was concerned about these allegations, but said it wants more information before making any decisions. "My attitude is we can't fix it if we don't know, and so now there's something that has been brought to our attention. How you personally feel about it doesn't really matter in my opinion, but we have a responsibility to look into it," Council member Tami Schumacher said. "Hearing these concerns, it bothers me, so I would like to see something moving forward." City Administrator Reid Huttunen said that he's begun an investigation into the matter and is putting together information on the sequence of events. He told the council he wasn't sure if that investigation would be ready before the next meeting, but that he would continue to work with the city attorney and city human resources on the matter. Parks and Recreation Superintendent Jeremy King also spoke in front of the council, saying that from his perspective, Wuitshick has been doing a good job. "We had an outreach from a lot of different residents and participants in our programs who really like the direction that our parks and rec department is going, and really enjoy what (Wuitshick) has been doing there," King said. "There was a lot of pointed and tough messages heard here today, but I want everyone to know there are two sides to the story ... and that from a department head perspective, (Wuitshick) has been doing a great job and we enjoy and like the changes." In other news, the council: * Directed city staff to continue negotiations with Midco for the upcoming franchise fee renewal contract, but to negotiate fewer in-kind cable services. The change would mean that schools in the city would no longer have in-kind services provided. The in-kind service will also be redacted from the total amount collected from the franchise fee, around $3,000. * Moved forward two ordinances regulating conduct in public spaces in the city. One ordinance would make camping illegal in non-designated public spaces and the other would set hours and motor vehicle rules for city parks. The council will be considering the ordinances again later this month.
