Therefore I reverse engineered two apps that are dating.
Photo and movie drip through misconfigured S3 buckets
Typically for images or any other asserts, some form of Access Control List (ACL) will be set up. A common way of implementing ACL would be for assets such as profile pictures
One of the keys would act as a “password” to gain access to the file, therefore the password would simply be offered users who require use of the image. When it comes to a dating application, it is whoever the profile is presented to. Read more