Not automating Tinder in the Cloud (...)
summary
A project automates Tinder via its undocumented API using an Azure Function deployed to the cloud, sending 40 likes/sec for eight days, harvesting hidden birthdates and GPS and emailing matched profiles. It adds OAuth token automation by scripting browser clicks to refresh tokens and even bypassing MFA; Facebook locks the account for simultaneous logins and Tinder briefly fails (Jan 8). An unofficial GitHub API doc exists, the public code is later removed and the experiment stops.
AI-written summary · about
chapters (4)
- 0:00Start
- 13:16Tinder Went Down
- 17:36Black Hats vs White Hat
- 31:34What Can We Use the App for the Api for
related talks
26mAPI Abuse - Comprehension and Prevention
31mHow to Leak a 100-Million-Node Social Graph in Just One Week?
30mAutomating Multi-Factor Authentication
31mAdvanced Persistent Teenagers: Understanding the Lapsus$ Playbook
20mNo API Left Untested: Shift Left with API Security
25mTesting Your Organization's Social Media Awareness
20mOAuth 2: A closer look
21mAutomating Secure OIDC-Based Cross-Cloud Authentication