In brief LGBTQ dating site Grindr has squashed a security bug in its website that could have been trivially exploited to hijack anyone’s profile using just the victim’s email address. French bug-finder Wassime Bouimadaghene spotted that when you go to the app’s website and attempt to reset an account’s password using its email address, the site responds with a page that tells you to check your inbox for a link to reset your login details – and, crucially, that response contained a hidden token.

Read full article on The Register