Cover your naughty bits, Grindr has been hacked! Over 100,000 users in Australia have had their personal information, uh, exposed thanks to a Sidney hacker who created a website that allowed anyone to login as another Grindr user and view their photos, chat history, bookmarked friends, change the user pic, and send messages via the service. The app's straight sister, Blendr, is also vulnerable.
Grindr's CEO denied the breach of security originally but by early this week he was singing a new tune.
The founder of the apps, Joel Simkhai, conceded both were vulnerable and he was rushing to release a patch to address the issues. He said he had originally been waiting until new architecture was built "within weeks" but was now releasing an update to both apps "over the next few days".
In a telephone interview about the vulnerabilities last Friday he said it was news to him about the potential for text chats to be monitored and claimed the company had never experienced a "major breach" in which a large portion of users were affected.
"We [do] get people trying to hack into our servers," he said. "That's something that I am aware of and we certainly have a team in place that are working to prevent that."
But by Tuesday Mr Simkhai admitted that he was "aware of some vulnerabilities" but he would not talk about them in detail to avoid a hacker exploiting them.
A security expert interviewed for the Sidney Morning Herald says both apps have "no real security" and are "poorly designed."