On: How I was able to track the location of any Tinder...

[elwell]

This is a really beautiful hack. Not just some SQL injection run-of-the-mill vulnerability. Very clever.

[IncludeSecurity → elwell]

Thanks, these are the kind that we find every week. We also get bored of the SQLi/XSS treadmill....it's much more fun to find a parsing error that leads to a crypto vuln that bypasses authentication (hint hint for a future blog post)