Okcupid has huge security privilege escalation for all users

8 points by carterschonwald ↗ HN
If you log into okcupid right now, you can view anyone's 8 most recent conversation threads. The site shouldn't be live right now if they know this is going on.

If you are on the OKC team or you know how to reach one of them, please do so. If not, please make sure that others can see this post.

This is a huge security and privacy breach. That is all.

3 comments

[ 2.8 ms ] story [ 17.9 ms ] thread