Advertisement Continue reading the main story 
 
 Never mind whether your date is smart or good-looking. How do you know you aren’t flirting with a felon? 
 
 For a small fee, a nascent crop of companies wants to help you find out by running background checks on the potential flames you encounter on Match.com, eHarmony or any of the nation’s nearly 1,500 dating Web sites. 
 
 At the same time, at least two states, New York and New Jersey, have begun regulating Internet dating sites, and legal experts say they believe changes to the liability laws that protect such sites are on the horizon. 
 
 And you thought your mother was the only one who wanted to vet your love life. 
 
 The focus on background screenings comes as some 20 million Americans are using dating sites, more than double the number five years ago, according to the market research firm IBISWorld. While they are finding casual dates and even love, they are also encountering married people pretending to be single or, worse, sexual predators and convicted felons. 
 
 No one has put a number on how much violence stems from dating sites, according to groups that keep track of rape and other violent crimes, like the Department of Justice’s Bureau of Justice Statistics and the National Center for Victims of Crime. 
 
 Yet plenty of crime stories begin with two people skimming each other’s online dating profiles. Consider the widely reported case of Jeffrey Marsalis, a serial rapist in Philadelphia who met his victims on Match.com. 
 
 Such perils have been around since the dawn of the Internet, an ideal medium for complex cover-ups. But now that online dating is a billion-dollar industry, state officials, public safety advocates and enterprising businesses are calling for further safeguards. 
 
 Whether it is possible, however, to effectively screen people and make sites more truthful is unclear. After all, members are not always honest about their age and weight. 
 
 “What we want to do is provide some degree of safety,” said Robert Buchholz, a retired New York State Police captain who, with Andrew J. Scott, a former police chief in Boca Raton, Fla., founded MyMatchChecker.com, a Web site that went live in April, enabling people to request background checks on anyone they have met on a dating site. 
 
 Mr. Buchholz and Mr. Scott, who each have more than 30 years of law enforcement experience, said that having daughters inspired them to try to make online dating safer. Their company offers a basic background search for $9.95. 
 
 In addition to Web sites, a flurry of mobile phone apps aim to make background checks as quick and easy as ordering a pizza: Just plug in a couple of facts like a name and birth date. ValiMate, the creator of the Instant National Criminal Search app, even allows users to send the results of the check to a friend for added safety. 
 
 Date Check, from Intelius, encourages users to “look up before you hook up.” The app is marketed to women who want to perform a background check on would-be Romeos “in the time it takes to redo your lip gloss.” (Industry professionals say that predators are usually men.) 
 
 Advertisement Continue reading the main story 
 
 Advertisement Continue reading the main story 
 
 State officials are also pushing for safer Internet dating. A law that takes effect this month in New York State, the Internet Dating Safety Act, requires sites to post common-sense safety tips, like “meet in a public place.” 
 
 Assemblywoman Audrey I. Pheffer, a sponsor of the Internet law, said that it grew out of her realization that online dating had become ubiquitous, even among people she “never dreamed” would pursue romance online. 
 
 Some states have considered similar legislation but ultimately rejected it. New York’s law is like one passed in 2008 by New Jersey, which also requires dating sites with a membership fee to inform users whether they do criminal background checks (most do not). 
 
 Such legislation was championed by True.com, one of the first major online dating companies to screen members to determine if they are married, felons or sexual offenders (about 2 percent of those who try to sign up are rejected, they said). Ruben Buell, the company’s president, said that the type of checks it conducted were inexpensive. “You’re talking pennies per check.” 
 
 Still, most online dating companies question whether such checks can be effective. They contend that because state and county databases are incomplete, the checks give daters a false sense of security. Even advocates of criminal screenings concede that they are imperfect because the databases vary in quality and availability. Some counties, for instance, do not keep digital records. Others do not provide data about sex offenders. 
 
 “If I really knew that there was great ability for us to not let anyone on the site that shouldn’t be on the site, I would do it,” said Mandy Ginsberg, the general manager and executive vice president of Match.com. Background checks, she said, might lead daters to think everyone they encounter on the sites is safe. (Ms. Pheffer said she originally wanted background checks but decided against them for the same reason.) 
 
 Critics also point out that companies that conduct background screenings are not necessarily perfect. Some have mishandled information. Another concern involves mobile apps, which can provide personal information to people who may abuse it. 
 
 Braden Cox, a policy counsel for NetChoice, a group that advocates for Internet companies, said that background screenings were well intentioned but that most could be thwarted. 
 
 “Most people, thankfully, are good people on these Web sites,” said Mr. Cox, who speaks from experience: a few weeks ago he married a woman he met on Match.com. 
 
 Dating sites have no incentive to police their members. The Communications Decency Act absolves Internet service providers of liability because the sites are not considered the publishers of the information on their pages — their members are. The reasoning is that sites would not be able to operate if they were responsible for everything posted by their users. Lawyers have tried to get around this law, but “they usually fail,” said Brian Carver, an assistant professor at the School of Information at the University of California, Berkeley. “Every start-up depends on this protection.” 
 
 Parry Aftab, a lawyer and safety expert, says she is increasingly hearing about alarming cases involving online dating, like pedophiles who woo single mothers to get near their children. She expects there will be challenges to that immunity if sites accept money from members and have knowledge of criminal behavior. 
 
 Meanwhile, she advises singles to be cautious. “Don’t give up your heart so fast,” she said. ||||| IBM Report Details Potential Vulnerabilities That Could Compromise Mobile Security 
 
 New technology has completely revolutionized the dating process. Many people are using mobile dating applications to find their “special someones.” In fact, a recent Pew Research study found that 1 in 10 Americans have used a dating site or application, and the number of people who have dated someone they met online has grown to 66 percent over the past eight years. Even though many dating applications are relatively new to the market, Pew Research also found that an astonishing 5 percent of Americans who are in a marriage or committed relationship met their significant other online. 
 
 As the number of dating applications and registered users grows, so does their attractiveness to potential attackers. Powered by IBM Application Security on Cloud technology, a recent IBM analysis of dating applications revealed the following: 
 
 Nearly 60 percent of leading mobile dating applications they studied on the Android mobile platform are vulnerable to potential cyberattacks that could put personal user information and organizational data at risk. 
 
 For 50 percent of enterprises IBM analyzed, employee-installed popular dating applications were present on mobile devices that had access to confidential business data. 
 
 The goal of this blog is not to discourage you from using these applications. Rather, its goal is to educate organizations and their users on potential risks and mobile security best practices to use the applications safely. 
 
 Potential Exploits in Dating Apps 
 
 The vulnerabilities IBM discovered are more powerful than you might suspect. Some of them make it possible for cybercriminals to collect valuable personal information about you. Even though certain applications employ privacy measures, IBM found that many are vulnerable to attacks, which can let cybercriminals do the following: 
 
 Use GPS Information to Track Your Movements: IBM found that 73 percent of the 41 popular dating applications analyzed have access to current and historical GPS location information. Cybercriminals may capture your current and former GPS location details to find out where you live, work or spend most of your day. 
 
 Control Your Phone’s Camera or Microphone: Several identified vulnerabilities let cybercriminals gain access to your phone’s camera or microphone even when you aren’t logged in to dating applications. Such vulnerabilities can let attackers spy and eavesdrop on your personal activities or tap into data you capture on your cell phone camera in confidential business meetings. 
 
 Several identified vulnerabilities let cybercriminals gain access to your phone’s camera or microphone even when you aren’t logged in to dating applications. Such vulnerabilities can let attackers spy and eavesdrop on your personal activities or tap into data you capture on your cell phone camera in confidential business meetings. Hijack Your Dating Profile: A cybercriminal can change content and images on your dating profile, impersonate you, communicate with other application users from your account or leak personal information that could tarnish your personal and/or professional reputation. 
 
 How Do Attackers Exploit These Vulnerabilities? 
 
 Which specific vulnerabilities enable attackers to carry out the exploits mentioned above, permitting them to gain access to your confidential information? IBM’s security researchers determined 26 of the 41 dating applications analyzed on the Android mobile platform either had medium- or high-severity vulnerabilities, which included the following: 
 
 Cross-Site Scripting Attacks via Man in the Middle: This vulnerability can act as a gateway for attackers to gain access to mobile applications and other features on your devices. It can permit an attacker to intercept cookies and other information from your application via an insecure Wi-Fi connection or rogue access point, and then tap into other devices features the app has access to, such as your camera, GPS and microphone. 
 
 This vulnerability can act as a gateway for attackers to gain access to mobile applications and other features on your devices. It can permit an attacker to intercept cookies and other information from your application via an insecure Wi-Fi connection or rogue access point, and then tap into other devices features the app has access to, such as your camera, GPS and microphone. Debug Flag-Enabled Exploits: If Debug Flag is enabled on an application, it means a debug-enabled application on an Android device may attach to another application and read or write to the application’s memory. The attacker can then intercept information that flows into the application, modify its actions and inject malicious data into it and out of it. 
 
 If Debug Flag is enabled on an application, it means a debug-enabled application on an Android device may attach to another application and read or write to the application’s memory. The attacker can then intercept information that flows into the application, modify its actions and inject malicious data into it and out of it. Phishing Attacks via Man in the Middle: Attackers can offer up a fake login screen via dating applications to capture your user credentials so that when you try to log in to a site of their choosing, your credentials are disclosed to the attackers without your knowledge. Then, the attacker can reach out to your contacts, pretend to be you and send them phishing messages with malicious code that could potentially infect their devices. 
 
 What Can You Do to Protect Yourself Against These Exploits? 
 
 One of the primary challenges with dating apps is that they operate in a different fashion than other social media sites. Most social media sites encourage you to connect with people you already know. By definition, mobile dating applications encourage you to connect with people you don’t already know. So, what can you do to protect yourself? 
 
 Trust Your Instinct: As the old saying goes, “There are plenty of fish in the sea.” If people you’re engaging with online refuse to provide the same basic information they ask of you; if their photos and profile appear too good to be true; or if their profile information doesn’t seem to align with the type of person with whom you’re communicating, trust your instinct and move on. Until you get to know the person well, resist any efforts to meet him or her anywhere but in a public location with plenty of people around. 
 
 As the old saying goes, “There are plenty of fish in the sea.” If people you’re engaging with online refuse to provide the same basic information they ask of you; if their photos and profile appear too good to be true; or if their profile information doesn’t seem to align with the type of person with whom you’re communicating, trust your instinct and move on. Until you get to know the person well, resist any efforts to meet him or her anywhere but in a public location with plenty of people around. Keep Your Profile Lean: Don’t divulge too much personal information on these sites. Information such as where you work, your birthday or links to your other social media profiles should be shared only when you’re comfortable with someone. 
 
 Don’t divulge too much personal information on these sites. Information such as where you work, your birthday or links to your other social media profiles should be shared only when you’re comfortable with someone. Schedule a Routine “Permission Review:” On a routine basis, you should review your device settings to confirm your security settings haven’t been altered. For example, I once had my cell phone revert to “GPS-enabled” when I upgraded the software on my device, permitting another user to identify my precise geographical location via a chat application. Prior to the upgrade, GPS device-tracking had not been enabled. Thus, you need to be vigilant, because updating your applications can inadvertently reset permissions for device features associated with your address book or GPS data. You should be particularly vigilant after any software upgrade or updates are made. 
 
 On a routine basis, you should review your device settings to confirm your security settings haven’t been altered. For example, I once had my cell phone revert to “GPS-enabled” when I upgraded the software on my device, permitting another user to identify my precise geographical location via a chat application. Prior to the upgrade, GPS device-tracking had not been enabled. Thus, you need to be vigilant, because updating your applications can inadvertently reset permissions for device features associated with your address book or GPS data. You should be particularly vigilant after any software upgrade or updates are made. Use Unique Passwords for All Your Online Accounts: Be sure to use unique passwords for every online account you manage. If you use the same password for all your accounts, it can leave you open to multiple attacks should an individual account be compromised. Remember to always use different passwords for your email and chat accounts than for your social media profiles, as well. 
 
 Be sure to use unique passwords for every online account you manage. If you use the same password for all your accounts, it can leave you open to multiple attacks should an individual account be compromised. Remember to always use different passwords for your email and chat accounts than for your social media profiles, as well. Patch Immediately: Always apply the latest patches and updates to your applications and devices as soon as they become available. Doing so will address identified bugs in your device and applications, resulting in a more secure online experience. 
 
 Always apply the latest patches and updates to your applications and devices as soon as they become available. Doing so will address identified bugs in your device and applications, resulting in a more secure online experience. Clean Up Your Contact List: Review the contacts and notes on your devices. Sometimes, users attach passwords and notes about personal and business contacts in their address book, but doing so could prove embarrassing and costly if they fall into the wrong hands. 
 
 Review the contacts and notes on your devices. Sometimes, users attach passwords and notes about personal and business contacts in their address book, but doing so could prove embarrassing and costly if they fall into the wrong hands. Live Happily Ever After: When you’re fortunate enough to have found your special someone, go back to the dating site and delete or deactivate your profile rather than keeping your personal information available to others. And don’t forget to buy him or her a Valentine’s Day gift this year! 
 
 What Can Organizations Do to Protect Their Users? 
 
 In addition to encouraging employees to follow safe online practices, organizations need to protect themselves from vulnerable dating apps that are active inside their infrastructure. As referred to earlier, IBM found nearly 50 organizations sampled for this research had at least one popular dating app installed on either corporate-owned devices or bring-your-own devices (BYOD). To protect this sensitive data, organizations should consider the following mobile security activities: 
 
 Protect BYOD Devices: Leverage enterprise mobility management capabilities to enable employees to use their own devices to access the sites while maintaining organizational security. 
 
 Leverage enterprise mobility management capabilities to enable employees to use their own devices to access the sites while maintaining organizational security. Permit Employees to Download From Authorized App Stores Only: Allow employees to download applications solely from authorized application stores, such as Google Play, the Apple App Store and your organization’s app store, if applicable. 
 
 Allow employees to download applications solely from authorized application stores, such as Google Play, the Apple App Store and your organization’s app store, if applicable. Educate Employees About Application Security: Educate employees about the dangers of downloading third-party applications and the potential dangers that can result from weak device permissioning. 
 
 Educate employees about the dangers of downloading third-party applications and the potential dangers that can result from weak device permissioning. Act Immediately When a Device Is Compromised: Set automated policies on smartphones and tablets that take immediate action if a device is found compromised or malicious apps are discovered. This approach protects your organization’s data while the issue is remediated. 
 
 About This Research 
 
 IBM Security analysts from IBM’s Application Security Research team used IBM Application Security on Cloud to analyze the top 41 dating apps available on Android devices to identify vulnerabilities that can leave users open to potential cyberattacks and threats. Those apps were also analyzed to determine the granted permissions, unveiling a host of excessive privileges. To understand enterprise adoption of these 41 dating apps, app data was analyzed from IBM MaaS360. In advance of releasing this research to the public, IBM Security disclosed all affected app vendors identified with the research. To try a free 30-day trial of IBM Application Security on Cloud, please click here. ||||| Just Met Someone? 
 
 A background check just makes good sense. 
 
 Founded by law enforcement officials with over 60 years of experience, MyMatchChecker was created to help protect online daters from the multitude of scammers, identity thieves, sexual predators, felons and even worse. Wherever you are in your relationship, you should do a background check.
– With 20 million Americans using online dating sites, how can you be sure that your prospective date isn't married? Or, say, a mass murderer? New online security services—such as MyMatchChecker.com, Date Check, and the Instant National Criminal Search—are offering background checks on people using the nearly 1,500 dating websites in the United States, reports the New York Times. New York and New Jersey are the first two states to offer some regulations on Internet dating sites, such as requiring sites to post safety tips and to say whether they require background checks of their members. Experts say that many more states will soon follow. Although some sites like True.com insist on background checks for all members, other dating sites say this is a false sense of security because criminal screening databases are imperfect. But with online dating a billion-dollar industry, increasingly government officials and public safety advocates are calling for better safeguards. Failing that, there's always a healthy sense of skepticism: “Don’t give up your heart so fast,” cautions one safety expert.