nonetheless, we discovered in November, 2015 that their Android software ended up being nevertheless suffering from the problem that is same. We notified Match.com and received no reaction for 30 days.
At that time, a part for the security group emailed to state they are looking at the reported problem. After another couple weeks, we contacted Match for the status improvement in addition they responded they were still looking at the situation nonetheless it would take more time because of the Christmas time getaway. We received no further up-date from Match but seen in late January that a fresh form of the application had fixed the vulnerability, of which point we went general public. Interestingly, the safety team reached away to us in February after general public disclosure to schedule a call to go over the vulnerability we reported in their mind. (Note we discovered extremely common to talk about any details over phone in the place of e-mail, presumably to cut back the “paper trail” that would offer proof of the vulnerability.) We asked them why they wished to fulfill now, particularly because they had already fixed the situation, and now we never heard from their store once again. (more…)