Easy Tinder prank hack lets you play stupid cupid

Software engineer Robert Heaton has detailed simple tricks to fondle your mates' Tinder and Facebook accounts over the festive season. Friendship is a pre-requisite for the prank that requires cookies to be swiped off an unattended machine and reworked to be absorbed into the iOS Tinder app. In a detailed post Heaton said …

[Robert Helpmann??]

That's just mean!

...you change all of his photos to pictures of Gary Busey...

But at least it wasn't Steve Buscemi.

[A Non e-mouse]

And..?

So he's stolen your Facebook cookie by having physical access to your device, and used it to do naughty things. And this is new, how...?

[Annihilator]

Re: And..?

Quite. I could do it without faffing around with nicking cookies either - just use the fecking terminal they left unattended to directly play with it.

[Joe Harrison]

Advanced state-level adversary technique

"His session is in his browser cookies. You get his Facebook.com cookies, you get his session."

Wow! Leaving your session open allows people to do bad things and impersonate you. Who knew.

[Anonymous Coward]

"Pranksters have up to 45 minutes to enjoy their festive furtive free-for-all"

Followed by a couple of years in jail...

[Michael Wojcik]

Re: "Pranksters have up to 45 minutes to enjoy their festive furtive free-for-all"

Followed by a couple of years in jail...

This attack appears to require having friends who have Tinder accounts. Surely that's punishment enough?

[steamrunner]

The blue skittle insists on using two-factor authentication. The red skittle says "make sure you lock your device before walking away from it". The yellow one continually says "use a good password, and change it often, and don't use it anywhere else" and the green one keeps a beady eyeball on your whole-disk encryption. Taste the rainbow.