Slashdot Mirror
Tinder Embraces Encryption (theverge.com)
Senator Ron Wyden (D-OR) has managed to get Tinder to encrypt the photos sent between its servers and its app. The 69-year-old Senator wrote a letter to Tinder back in February requesting that the company encrypt photos. They apparently already implemented the feature, but "waited to write back to Wyden until it also adjust a separate security feature that makes all swipe data the same size," reports The Verge. "The size of the swipe data was used by security researchers to differentiate actions from one another. That change wasn't implemented until June 19th."
That app is just part of the downfall
Actually encryption does exactly that every day, all day. It is sad, but alas no longer uncommon, to see such a pathetically ignorant post on Slashdot.
Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
It's not for DRM or IP management at all, it's for privacy. The purpose of end-to-end encryption is so you can receive the data you want without the whole world knowing what you received. You know, one of the basic purposes of web-based SSL.
If you don't care about the world knowing who you swipe right on, fine. But there's a whole lot of people who might.
What he is saying is encryption does not protect the photos once they are decided on the device. Once decoded they can be copied and shared.
Notice your friend's SO has an active profile? What is to stop you from taking a screenshot and informing your friend?
Again, this is common knowledge and doesn't mean encryption doesn't work; it merely means things that have been successfully decrypted are no longer encrypted. No shit Sherlock.
Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
It's not for DRM or IP management at all, it's for privacy. The purpose of end-to-end encryption is so you can receive the data you want without the whole world knowing what you received.
Is it end-to-end? So that only the two people swiping each other can see each other?
Maybe I'm wrong, but probably the server is quite a relevant MITM. A server, no less, which willingly sends all photos to people who want to see and swipe photos, because that is the purpose of the server.
Not that much difference to posting on a public website.
encrypting the photos is to reduce snooping of traffic and compiling data from that, like by carriers, hackers and taps on the wifi and the backbone and such, not to protect the data once it's on your device (that's the job of the hardware and software running on it)...
so the senator is not the clueless one here, you are, for not actually comprehending what this is about.
YHBT YHL FOAD
Now they just need to stop all the fake users, and stop the spamming
Nobody said encryption doesn't work. I said it is as pointless as a huge steel door with no walls left and right of it.
(Or more precisely: Like telling a butler that you hired from an untrusted butler service company, to put your nudes in a safe, carry that safe through a perfecly secure physical tunnel, to give it to another person who also has a key for it, so she can take a look at them... And then expect your nudes to stay secret, because she also had a butler she hired from that company to use the key on the safe, instead of her doing it personally.
And the butler has no free will, but is a robot who has to precisely do what his owner tells him. So the fact that he was pre-programmed by a company does not mean shit, even if you trusted it.)
Wyden wrote a letter to Tinder back in February requesting that the company encrypt photos. It had apparently already done so (the letter says they implemented the feature on February 4th)
Why is Wyden even mentioned? He didn't contribute anything here.
69 and interested in Tinder. I would have pegged Senator Wyden as a "Plenty of fish kind of guy".
You too *completely* missed the point.
Nobody said encryption does not work.
I said what is the point, if the whole FUCKING point of Tinder is to share your swipable pictures with everyone in your area?
That by definition already makes the picture public!
L
Not even mentioning the fact that the Tinder client itself written by an untrusted party.
Let alone that said app includes the decryption key, enabling the recipient (which includes every single Tinder employee and contractor, including the entire CA company) to share it not only by making a photo, but also by grabbing it losslessly, before sharing it behind your back.
Are you schizophrenic or how can you possibly not get this?
Previously, I swore that humanity is getting dumbet every day.
Now I *know*: https://m.slashdot.org/story/342214
The study from behind the paywall: http://sci-hub.tw/http://www.pnas.org/content/early/2018/06/05/1718793115
I just checked my childhood album and I can still recognize myself. They did a poor job.
Ezekiel 23:20
"Senator Ron Wyden (D-OR) has managed to get Tinder to encrypt..."
No, he didn't. Tinder's letter said they started encrypting on Feb 6. Wyden's letter asking they encrypt was dated Feb 14.
"National Security is the chief cause of national insecurity." - Celine's First Law
It's not for DRM or IP management at all, it's for privacy.
Bullshit, it's so Senator Clean can get a little on the side without his Wife's PI finding out about it easily.
You obviously don't understand the client/server concept if you refer to the server as the "middle."
The server is an end, the client is the other end. Not your client and the other person's client. You are both connected to the server, not each other.
Fake news made them stoopid.
That's his point, Captian Bumblefuck; if the images are stored unencrypted in the sever, it means fuck all. Which is in all likelihood exactly what's happening, otherwise the party on the receiving end would only see pseudorandomness golbeltygook.
This encryption could only be useful for the privacy of pairs of people further exchanging photos after the first swipe is completed.
Mitt Romney is running for the Senate seat Orin Hatch is leaving. You'll be hearing more from the Democrats related to all the wonderful things they do in Utah, like this - taking credit for making the Internet safe for your children even though Wyden muddled in after the fact.
Is it really for anonymous s3x? If it is, probably ain't eligible, since it's been about 25 years ... wouldn't know how. Seem to remember it was OK tho ...
Yeah - SOS/SSS - same sad story. If it's compromising, you sure as hell don't want to give it to random employees of an internet service provider, and expect they'll keep your little secret.
At one time I'd have thought like you - snorting was the cause. Now I think it's the mind controlling entangled photons radiating for thirty feet from every store front down town ...
Tinder Encrypts Embraces
hmm
I know I shouldn't be shocked - shocked! - to hear this, but the idea that they just didn't bother to encrypt photos is a simply breathtaking feat of negligence.