Timeline for Sent images on company WiFi network by accident
Current License: CC BY-SA 3.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 16, 2015 at 5:46 | comment | added | 匿名柴棍 | In sum, instead of making qwerty’s issue more serious, I just want to make it clearer and let qwerty know what security risk that he is really facing. so sorry for a series of comment, but I cannot add my answer as usual since this question has been marked as duplicate, although I think it's not duplicate at all. Good luck! | |
| Nov 16, 2015 at 5:45 | comment | added | 匿名柴棍 | For discussion about DNS and IP of Grindr, I agree that the information can also be exploited to trace qwerty's use of the app. However, one more possible and easier way is to find the use of the app by search the "string: Grindr" in the packets logged by the company. As you all may know that all apps nowadays come with ads. Sadly, those ads leak your private information including the apps that you are using because they do not encrypt the packet sent to the ads provider's server. It's also proved in the paper I mentioned above. It's just exact the case of qwerty, where Grindr is examined. | |
| Nov 16, 2015 at 5:44 | comment | added | 匿名柴棍 | I have not gone completely through the paper but it seems to have shown that Grindr does not encrypt the pictures. Therefore, if @qwerty uploaded his picture, and set its as his profile picture; the company (if they want to) can definitely recover the uploaded picture from their logged packets. | |
| Nov 16, 2015 at 5:44 | comment | added | 匿名柴棍 | First, you wrote that: Grindr does in fact use SSL/TLS for its connection to the Grindr server, where all data is sent/received from (including pictures) --> To some extent, I agree that Grindr uses SSL/TLS to encrypt its connection, but not all. And, unfortunately, it does not include pictures, more specifically the profile picture of the user. As I search on Google and found that there is a recent study about this Grindr app. Here it’s: “Your Neighbors Are My Spies: Location and other Privacy Concerns in Dating Apps” URL:[goo.gl/k9jCy5]. | |
| Nov 16, 2015 at 5:43 | comment | added | 匿名柴棍 | Hi Herringbone_Cat, thank you for your informative answer with evident study. However, because the study had been done in 2013, there are some points that I also want to discuss and make the issue clearer for the current security condition in Grindr, thus help @qwerty understand more comprehensively about his problem. | |
| Oct 24, 2015 at 23:01 | comment | added | qwerty | Thank you guys. I am extremely relieved. Lesson learned! | |
| Oct 24, 2015 at 22:49 | comment | added | Brian Duke | +1 @qwerty the only thing they can see if they were interested would be that you connected to those services not the actually content. In the case of Gmail they use end to end encryption regardless of the platform. | |
| Oct 24, 2015 at 19:15 | comment | added | qwerty | There is no corporate app on the phone. Also, not sure if it matters, but the gmail was via webmail not an email app. | |
| Oct 24, 2015 at 19:10 | comment | added | Herringbone Cat | GMail does in fact enforce TLS as well (https) -- but the question becomes did you do so on your smartphone, and does that smartphone have any corporate management apps installed? If you did use your phone, and it doesn't have apps installed, it's probably secure and not vulnerable to corporate eavesdropping. If you used a corporate desktop, or there's some app installed on your phone for management, then it may not be secure. | |
| Oct 24, 2015 at 19:09 | history | edited | Herringbone Cat | CC BY-SA 3.0 |
clarification
|
| Oct 24, 2015 at 19:08 | comment | added | qwerty | If this is the case, i am okay. I dont think merely using Grindr would be viewed as so horrible, its the imafes that im very worried about. I sent similar images that day over gmail as well. Would this fall into the same category ( except more benign since it's only gmail and not grindr)? | |
| Oct 24, 2015 at 19:05 | history | answered | Herringbone Cat | CC BY-SA 3.0 |