Authored by: Rojan Rijal, Tinder Security Labs | Johnny Nipper, Sr. Director | Tanner Emek, Sr Engineering Manager Summary In 2021, GitHub released support for OpenID Connect (OIDC) for GitHub Actions (GHA), allowing developers to securely interact with their infrastructure resources in Amazon Web Services (AWS), and other major cloud service…

Author: Darragh Burke, Software Engineer II, Web Development at Tinder Tinder’s UI Opportunities: Wildfire When Tinder first launched in 2012, it pioneered a brand new user experience: the Swipe Right® and “Swipe Left”™ features. The app’s simplicity was a big part of what made it so appealing. We’ve emphasized…

Authors: Rojan Rijal, Tinder Security Labs | Johnny Nipper, Product Security Manager | Tanner Emek, Engineering Manager Recently, Tinder Security Labs gave a talk at Recon Village @ Defcon 30 called “Scanning your way into internal systems via URLScan.” We went over examples of sensitive links indexed by URLScan that…

Authored by: Vijayvangapandu Vijaya Vangapandu, Distinguished Software Engineer Siva Periyasamy, Staff Software Engineer Nishant Mittal, Senior Software Engineer Tejas Nomulwar, Senior Software Engineer Introduction Tinder API Gateway (TAG) is one of the critical frameworks at Tinder that solves the need of exposing public APIs and enforcing strict authorization and security rules…

Alex Rozinov is one of the veteran members of the Machine Learning team. A senior machine learning engineer with over five years at Tinder, he’s worked on various projects and initiatives that have shaped the app. Currently, he focuses on anti-harassment and abuse within trust and safety. First, could you…

Authored by: Ishan Khanna, Senior Software Engineer, Android I recently gave a talk on performing due diligence as an Android Engineer. Having worked on multiple projects that involved integration with 3rd party vendor SDKs, I gathered my learnings and came up with a framework. …

Authored by: Danielle Zegelstein, Engineering Manager | Serge Vartanov, Staff Software Engineer | Jeff Glasse (The Belated Engineer), Senior Engineering Manager | Cooper Jackson (cajaks2), Staff Site Reliability Engineer In our first post, we touched on the execution of building the Inception Service for Swipe Night Season 2. Following up…

Author: Tasha Ramesh, Staff Software Engineer It’s an exciting time to be a mobile engineer. Now that declarative UI has finally made its way into Android with Jetpack Compose, I was fascinated about how this new tech could improve the development of Tinder’s features. Given its promise of simplifying and…

Authored by: Rojan Rijal, Tinder Security Labs | Johnny Nipper, Product Security Manager | Tanner Emek, Engineering Manager GitHub Actions is a commonly used CI/CD pipeline for automated testing and deployment. While Actions make it easier to test and deploy, it also adds security risks to the project and its…