New, by me: Dating app Raw (which this week said it's planning to release a hardware wearable for tracking partners' emotions) claims to use end-to-end encryption.
But when we tried the app this week, I found it was exposing users' location data and personal information to the web — no password needed.
https://techcrunch.com/2025/05/02/dating-app-raw-exposed-users-location-data-personal-information
After hearing about Raw's planned wearable (which sounds rife for abuse), I tested the Raw dating app using dummy data and a network traffic analysis tool (Burp Suite, ftw). Within a few minutes, I found Raw's servers were publicly exposing users' profile data — and granular location — to the web.
After contacting the Raw's co-founder, the bug was fixed. When I asked, the company confirmed it hadn't asked for a third-party security audit of its app.
https://techcrunch.com/2025/05/02/dating-app-raw-exposed-users-location-data-personal-information
@tdp_org @zackwhittaker i er... mean like... ... people who have those ideas... probably also vibe code...
"[...] the Raw Ring, an unreleased wearable device that it claims will allow app users to track their partner’s heart rate and other sensor data to receive AI-generated insights, ostensibly to detect infidelity."
@zackwhittaker [...] that its “focus remains on building a high-quality product and engaging meaningfully with our growing community.”
How dumb do they think we are to not understand that this is just saying "we don't care about spending money on security, we like the money more"?
And there are thousands of companies out there with the same mindset.
Zack, thanks for making the internet a little bit safer.
There's a visual novel game called Steins Gate: My Darling's Embrace in which two of the characters, who are always sniping at each other, have to wear electronic devices that give them an electric shock if they misbehave.
This product reminds of that game. And it also reminds me why I don't really use apps anymore.
@NosirrahSec @zackwhittaker I...
But...
alright i can't come up with a public-appropriate response. You win this time.
@zackwhittaker - Any time these apps say "end to end encryption", I just take it to mean they're using https between the app and their own server.
I've had too many discussions with vendors where that's what they meant. E2EE is just a bullshit term for them.
@zackwhittaker
> hardware wearable for tracking partners' emotions
Not at all dystopian... (the black/purple of the rings does look cool, though)
I'm not a tech person, but what a world we live in. Could be putting this energy towards solving world hunger or something, but instead they made a long distance mood ring. And it leaks all your personal info. No bueno.
Great, looking forward to being hunted for sport with the new addition of real-time data about my fear
Zack Whittaker
Lee Holmes 
AnneH
Neil Craig
Tobias Fiebig
Mekki
NosirrahSec 🏴☠️
Brokar
Phillip 
Winter Trabex
Dragoniff
Eric Zarowny
Ian Campbell
Ben Rosengart
draeath
Tinker ☀️
Bill
Jason Bowen 🇺🇦
GutterPoetry
Maite Maxwell