Just platonic or marriage-likely relationships observe here

Far on my treat, Tantan’s designers hadn’t deterred the debug texts and you can tons of fascinating pointers was being sent toward console. One of the primary one thing I observed was you to Tantan lots a summary of “foul” conditions that it censors.

The list of the language is written for the a password called Unicode which makes it easy to lookup.

I will exit deciphering the whole range of words because an exercise to you personally, my personal loyal reader (Update: Quartz pling shows that many conditions have to do that have hookups and you will informal sex.

Shallow charm

Looking up bad words is fun and all sorts of, however, there were ideal, way more enjoyable what things to come across. Scrolling toward, We spotted the fresh labels and details of its host and you can information concerning the desires the newest app is actually to make flashing by.

It searched unusual one a software you to definitely searched very well-written at first glance will be so careless the lower. I happened to be interested to appear greater to discover if, instance so many of those your fulfill toward matchmaking applications, Tantan’s first beauty was just mirage.

Intercepted

Second upwards, I decided to see what brand of recommendations the software was delivering and how well it had been secure.

We utilized the ssh for connecting to my personal family router and you will turned on the fresh tcpdump system to see what type of studies is actually flying up to involving the Tantan run on my personal mobile phone and Tantan’s servers. I seemed in the Internet protocol address away from Tantan’s server then come watching and you may collecting website visitors using this demand:

tcpdump -we ppp88 server .15 and port 80 -letter -s 0 -vvv -w tantan 

Data sent between a software and you can a host are encoded therefore the dozen or maybe more machines it undergoes to your their travel through the internet can not see clearly. Therefore, definitely, I expected to see a bunch of encrypted, unreadable studies passageway as a result of my router between my personal cellular telephone and you can Tantan’s servers.

Far to my amaze, all the info sent between my cell phone and you may Tantan’s server somewhere on another side of the High Firewall strong for the Mainland China try completely viewable. I am able to comprehend the code I got simply entered, my personal contact number and all people I happened to be being paired that have. Of course I could read it, it means numerous other people you will definitely as well.

Viewing this also structured suggestions moving backwards and forwards piqued my personal interest in training more info on exactly what style of data Tantan is event from its profiles right after which dripping into the globe.

Should your common wonders actually secret

Always when opposite engineering an enthusiastic undocumented API to determine how it functions, might have to take a few minutes to set up specific units to decode the brand new encrypted stuff. not, Tantan’s safety failings managed to make it trivial to see just how their application and you may host collaborate and you will keep in touch with one another.

We are able to see the username to hook up to Tantan’s authentication server, 100002 , additionally the complimentary password. If you wish to keep anything miracle, you are able to encryption.

Evidently, the purpose of it mutual secret would be to end 3rd party programs out-of linking towards the Tantan server, but versus security the key wasn’t extremely magic.

Tantan shares your with the industry

Second, I went the process of creating a different hot mexican women sort of affiliate. Tantan expected me to share my country and you may contact number before it sent myself a password of the text enabling us to keep.

• My personal gender
• Sexual direction
• Mate decades needs
• Interests
• Hobbies

Selling your family unit members

For the signup techniques, just after carrying out a free account, new users is actually encouraged to fairly share its associations which have Tantan. Tantan intends to cover up you against the people on your contacts number. One imagines that is to get rid of the possibility, umm, public awkwardness, from popping up given that a potential meets to help you a beneficial coworker, ex-boyfriend otherwise newest spouse. Believe Ashley Madison matches Tinder.