• atk007@lemmy.world
    link
    fedilink
    English
    arrow-up
    9
    ·
    12 hours ago

    Why did the app had the government IDs and credit card data to begin with? The app looks like an obvious phishing scam/ Honeypot situation.

    • GreenKnight23@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      6 hours ago

      that’s a great(terrible) idea for a sex trafficking psyop. just get yourself a female spokesperson and make it a platform that gives a voice to women who have survived abuse. they’ll willingly give you all their information on where to find them and their psych profiles on how to manipulate them.

      fucked up, but really shows how fucked up apps are in general and how much power we give to them over ourselves.

  • Vanth@reddthat.com
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    2
    ·
    20 hours ago

    I think of the “bad” dates I would want to be able to warn other women of that didn’t rise to the level of calling the cops. The guy who ordered triple the food and drinks I did and skipped out on the bill. The guy who flat out lied about multiple things and then got irate when I politely excused myself from the date. The MAGA weirdo who went on an unhinged rant about how I needed to submit to him because God said so. I imagine some men have comparable experiences with some anti-social women. The experiences coming to mind were not illegal, but were absolutely things I want to spare my fellow humans from.

    I would prefer the dating apps themselves have some mechanism for disincentivizing anti-social behaviors. It would have to be more than a simple 5-star rating.

    I wonder how it would work IRL to offer the ability to write a few sentences in response to prompts about a date. The written review is not published as-is, but is used in grouping of many reviews to give a summary about a person. Like the summary product reviews on Amazon now. “Bill’s dates found he was prompt and polite. Some dates expressed discomfort at some of his political views” and “Bob’s dates warn he is often late and is quick to use foul language to describe women. Multiple dates report no intention to communicate with Bob further”. “Ben’s dates report he has skipped out on the bill repeatedly, and sends unsolicited dick pics. Multiple dates have blocked him”.

    The group summary gives a buffer so the person reviewed doesn’t know which specific date said what. And ensures the summary doesn’t include negative comments about a person unless multiple dates of theirs independently report similar experiences.

    Of course a bad actor could ditch their dating profile and start fresh any time they build up enough negative reviews to make their summary look bad. And of course the reviews and the summaries would have to be secured tighter than “Tea” is.

    • rottingleaf@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      3
      ·
      13 hours ago

      The experiences coming to mind were not illegal, but were absolutely things I want to spare my fellow humans from.

      What about a guy who had a panic attack in the very beginning and couldn’t stop talking about his deceased dad, then about aunts and uncles, then about the dog, then about architecture, then didn’t get the hint because of all the shaking, got petrified when hinted at an alcohol element in the continuation of the meeting and in the end didn’t even understand a very direct hints at “only silence can save this” and having at least a sleepover?.. Who only became kinda normal after taking a sedative next morning, still shaking.

      Just describing one negative experience I have provided in the past, and that while yeah, it wasn’t too cool - maybe lifelong shame is not what I deserve for that …

      (Yes, I know that girl was a hero)

      The group summary gives a buffer so the person reviewed doesn’t know which specific date said what. And ensures the summary doesn’t include negative comments about a person unless multiple dates of theirs independently report similar experiences.

      That can’t be done without somehow verifying identities of all the people involved. Unless the review app is the same as the dating app. Then there are various technical variants, like some cryptographic connection between the reviewed person’s identity, the token representing one date, and a temporary identity for the reviewer, used to sign the review message. Something like that.

      But that only for the entity doing the summary, which will have to be trusted with the original reviews. And that “buffer” will remove any kind of verification, unless it’s something egghead-smart like a smart contract forming the review on every client, which means every client can also see the original reviews. So I dunno.

      Of course a bad actor could ditch their dating profile and start fresh any time they build up enough negative reviews to make their summary look bad. And of course the reviews and the summaries would have to be secured tighter than “Tea” is.

      Honestly things like this should work like some hybrid of Briar and Freenet. Just entrusting it to a centralized service is as stupid as using Facebook. And in this specific case Briar model is kinda fine - if you synchronize with everyone using the application. You don’t need to have the reviews from everyone about everyone, just about people roaming the same general area.

  • blitzen@lemmy.ca
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    2
    ·
    1 day ago

    I feel that the app filled a need of women we should not ignore. But the app, both this specific app and also the overall concept, is just too rife with downsides to be workable.

    So we, as men and as society need to reevaluate why women feel the need for such an app, and reinvest in the criminal justice system to hold victimizers more accountable.

    It’s okay to call this app and similar Facebook groups unacceptable. But that’s not enough, we must also call for stronger protections for victims of criminal behavior.

    • jpeps@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 hours ago

      I think there must be a way to deliver on the value of the app without it being the privacy/public exposure nightmare it sounds like. Speaking naively, perhaps a setup where you can only speak about a person with those who have actually matched with them.

      • blitzen@lemmy.ca
        link
        fedilink
        English
        arrow-up
        1
        ·
        8 hours ago

        There’s no “matching” on this app, because men aren’t allowed. By its very design, you can’t avoid the unilateral one-sidedness.

        • jpeps@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          7 hours ago

          Sorry, I do understand that, I was just thinking of an improvement that might help. I thought having the same phone number might work too but that gets dodgier.

    • Ilovethebomb@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      1
      ·
      23 hours ago

      It would be interesting to see something similar that required accusations to be backed up with evidence. Police reports, court proceedings and results, news articles etc.

      It would also be a lot safer, legally speaking, for the service provider.

      • blitzen@lemmy.ca
        link
        fedilink
        English
        arrow-up
        6
        ·
        17 hours ago

        Something like Megan’s law but for domestic violence. I’m still not thrilled with the potential for abuse, but at least it wouldn’t be hearsay.

        I’m sure the police unions would object, for obvious reasons.

  • Backpack4317@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    14
    ·
    1 day ago

    S2 Underground has a great video about this. It’s basically a spy app with national security implications.

    People using their military IDs for account verification and location data found in their pictures lays the argument that this data could be used for blackmail.

  • Velypso@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    49
    arrow-down
    11
    ·
    edit-2
    2 days ago

    Ah nice.

    Time to implement a social score. Those who rate highly have better access to social areas.

    Those who rate lower are fucked for the rest of their life.

    This sounds like such an amazing idea that has no shortcomings whatsoever!

    Edit: /s

  • pivot_root@lemmy.world
    link
    fedilink
    English
    arrow-up
    125
    ·
    2 days ago

    Tea was storing its users’ sensitive information on Firebase, a Google-owned backend cloud storage and computing service.

    Every time. With startups, it’s always an unsecured Firebase or S3 bucket.

    • Kalothar@lemmy.ca
      link
      fedilink
      English
      arrow-up
      6
      ·
      1 day ago

      My hey we’re probably using Firestore as their database without authenticating their api calls to firebase functions. Basically leaving their api endpoints open to the public Internet.

      They could have connected service account and used some kind of auth handshake between that and generate a temporary login token based on user credentials and the service account oauth credentials to access the api. but they probably just had everything set to unauthenticated

        • Kalothar@lemmy.ca
          link
          fedilink
          English
          arrow-up
          2
          ·
          8 hours ago

          I get doing that in Dev for testing before launch, but in production? that’s insane.

          Like it has to either be a junior developer playing the role of lead or some serious lack of web dev fundamentals haha

          • nickwitha_k (he/him)@lemmy.sdf.org
            link
            fedilink
            English
            arrow-up
            2
            ·
            4 hours ago

            I’d argue that it should not even be done in Dev. Dev, staging/testing, and prod environments should all be as close to one another as possible, especially for infra like datastores.

    • NeilBrü@lemmy.world
      link
      fedilink
      English
      arrow-up
      13
      ·
      edit-2
      1 day ago

      I’m certainly no web security expert, but shouldn’t Tea’s junior network/backend/security developers, let alone seniors, know how to secure said Firebase or S3 buckets with STARTTLS or SSL certificates? Shouldn’t a company like this have some sort of compliance department?

      • GissaMittJobb@lemmy.ml
        link
        fedilink
        English
        arrow-up
        6
        ·
        1 day ago

        SSL is not the tool you need in this case, although you should obviously already be running exclusively on encrypted traffic.

        The problem here is one of access rights - you should not make files default-available for anyone that can figure out the file name to the particular file in the bucket. At the very least, you need to be using signed URLs with a reasonably short expiration, and default all other access to be blocked.

        • NeilBrü@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          1 day ago

          As I mentioned in other comments, I am a noob when it comes to web-sec; please forgive what may be dumb questions.

          Is it really just permission rights “over-exposure” issue? Or does one need to also encrypt and then decrypt the data itself that must be sent to a database?

          Also, if you have time, recommend any links to web/cloud/SaaS security best practices “for dummies”?

          • nickwitha_k (he/him)@lemmy.sdf.org
            link
            fedilink
            English
            arrow-up
            2
            ·
            4 hours ago

            As I mentioned in other comments, I am a noob when it comes to web-sec; please forgive what may be dumb questions.

            There’s nothing to forgive. Asking questions and being curious is how you learn this stuff.

            Is it really just permission rights “over-exposure” issue?

            From what I’ve read, it’s more fundamental than that. It’s a basic architecture issue. The datastore was publicly accessible, which it should never be. If they had it setup according to best practices, with an API to proxy access and auth, the datastore’s permissions would be of minimal consequence, unless their network was compromised (still best practice to secure it and approach with a zero-trust mindset).

            Or does one need to also encrypt and then decrypt the data itself that must be sent to a database?

            Generally, cloud datastores handle encryption/decryption transparently, as long as the account accessing data has authorization to use the key. They probably also didn’t have encryption setup.

            Also, if you have time, recommend any links to web/cloud/SaaS security best practices “for dummies”?

            Here are some more resources:

      • zqps@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        14
        ·
        edit-2
        1 day ago

        It’s a little more complex than that. If you want the app on the user device to be able to dump data directly into your online database, you have to give it access in some way. Encrypting the transmission doesn’t do much if every app installation contains access credentials that can be extracted or sniffed.

        Obviously there are ways around this too, but it’s not just “use TLS”.

        • NeilBrü@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          1
          ·
          edit-2
          1 day ago

          Encrypting the transmission doesn’t do much if every app installation contains access credentials that can be extracted or sniffed.

          Encrypt the credentials then? Or OAUTH pipeline, perhaps? Automated temporary private key generation for each upload (that sounds unrealistic, to be fair)? Can credentialing be used for intermediary storage that encrypts the data on that server and then decrypted on the database host?

          Clearly my utter “noobishness” is showing, but at least it’s triggering a slight urge to casually peruse modern WebSec production workflows. I am a DNN researcher. Thus, I am far removed from customer-facing production environments, and it shows.

          Any recommendations on literature or articles on how engineers solve these problems in a “best practices” way that you can recommend? I suppose I could just look it up, but I thought I’d ask.

          Edit: I don’t know why I’m down-voted. My questions were sincere.

          • nickwitha_k (he/him)@lemmy.sdf.org
            link
            fedilink
            English
            arrow-up
            4
            ·
            edit-2
            4 hours ago

            You’ve got the right ideas. Noone should ever be storing any password in plaintext. It should always be hashed and only the hash stored. That’s like WEBDEV99 (remedial course, not even 101).

            Really. Despite your stated “noobishness”, you basically landed in the territory of best practices right of the bat.

            If you’re looking for a good source of best practices, the CIS benchmarks are great. https://www.cisecurity.org/

            • NeilBrü@lemmy.world
              link
              fedilink
              English
              arrow-up
              3
              ·
              14 hours ago

              Brother, I need the “remedial” lessons since I self-host a lot of my experimental DNN solutions on a GPU cluster served via CasaOS/Ubuntu-Server LTS.

              I’ve followed basic tutorials about nginx, end-to-end encryption, and DNS, but I need more knowledge and training about the theory behind modern security best practices. I think I’m doing okay but I have this ever-present anxiety that I’ve overlooked something and my ass (i.e., sensitive data) is really just hanging out in the wind.

              Thank you for your recommendation.

        • Chulk@lemmy.ml
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          1 day ago

          Wouldn’t some sort of proxy in between the bucket and the client app solve this problem? I feel like you could even set up an endpoint on your backend that manages the upload. In other words, why is it necessary for the client app to connect directly with the bucket?

          Maybe I’m not understanding the gist of the problem

          • zqps@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            2
            ·
            11 hours ago

            Exactly, it’s not necessary. It’s bad / lazy design. You don’t expose the DB storage directly, you expose a frontend that handles all the authentication and validation stuff before accessing the DB on the backend. That’s normal Client-Server-Database architecture.

          • nickwitha_k (he/him)@lemmy.sdf.org
            link
            fedilink
            English
            arrow-up
            2
            ·
            15 hours ago

            Yeah. You also landed on a correct thought process for security. Cloud providers will let you make datastores public but that’s like handing over a revolver with an unknown number of live chambers and saying “Have fun playing Russian roulette! I hope you win.” Making any datastore public facing, without an API abstraction to control authN and authZ is not just a bad practice, it’s a stupid practice.

      • gian @lemmy.grys.it
        link
        fedilink
        English
        arrow-up
        12
        arrow-down
        2
        ·
        2 days ago

        I am not sure, but I read somewhere that the developer(s) used vibe coding to create the app so…

        • Canaconda@lemmy.ca
          link
          fedilink
          English
          arrow-up
          3
          ·
          1 day ago

          A lot of people have speculated that.

          According to their statement their code was written in Feb/2024 and predates “vibe coding”

          • gian @lemmy.grys.it
            link
            fedilink
            English
            arrow-up
            2
            ·
            9 hours ago

            What intrigue me is this:

            I’m confident vibe coding was not to blame in this particular case,

            So they used vibe coding, they are only saying that they think/hope that it is not the cause of the break (and maybe also of the second one)

            And if vvibe coding is not caused then they are even more incompetent.

      • Balerion@piefed.blahaj.zone
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        3
        ·
        1 day ago

        No one is saying THAT’S misogynistic. We’re saying there are a bunch of stupid misogynistic comments in this thread, not that the app is cool.

    • Cid Vicious@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      7
      arrow-down
      27
      ·
      1 day ago

      I mean, yes, but does that take priority over women who are worried about their safety? There’s been women doing this over local Facebook groups for a long time. Defamation of this sort is not a new issue.

      • QueenHawlSera@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        16
        ·
        1 day ago

        Considering even the mere accusation can ruin someone’s life? Yes.

        The problem isn’t women don’t deserve to be safe, the problem is we cannot just give people powerful weapons with no oversight or burden of proof to be deployed simply because a date didn’t go well.

        Facebook or App, the danger is too great

      • Echo Dot@feddit.uk
        link
        fedilink
        English
        arrow-up
        23
        arrow-down
        1
        ·
        1 day ago

        It was defamation the entire time just because somebody made it an app rather than a Facebook group doesn’t make any difference. It was always a crap thing to do.

        Of course Tea took it to an entirely new level of stupid.

        • Cid Vicious@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          8
          arrow-down
          20
          ·
          1 day ago

          It was potentially defamation when it was just women…talking to one another, too. This seems like a pretty solid case of men looking at something women do to protect each other, and saying “…but what about the men who could be negatively affected in some cases?” I also think the tone in which this is being discussed is pretty revealing about Lemmy’s demographics.

          • discount_door_garlic@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            ·
            6 hours ago

            the app is called TEA - it is a gossip vector masquerading as a safety mechanism, and people are making all sorts of claims about innocent people they had a bad date about, including their full name, location, workplace, pictures of their face - and accusing them baselessly in some (or most) instances of violent crimes.

            If you can’t see how not only that wouldnt make women safer, but instead is a black mirror episode - there’s something wrong.

            People against this app aren’t against women’s safety, and they dont necessarily believe our current systems and protection are adequate - but getting lynched by half a city because of a jaded ex is not a solution and is a crime of its own.

            I mean half the posts on similar Facebook groups complain about the men being “narcissists” yeah its a shitty personality trait but thats clearly not a fucking safety issue, its about gossiping and doxxing people.

  • Bort@hilariouschaos.com
    link
    fedilink
    English
    arrow-up
    69
    arrow-down
    2
    ·
    2 days ago

    Tea wasn’t hacked. Tea posted these images to a public file sharing site. Tea claimed that they deleted these images after verifying the applicant was a woman but clearly that was a fraudulent claim.

  • absGeekNZ@lemmy.nz
    link
    fedilink
    English
    arrow-up
    55
    arrow-down
    23
    ·
    2 days ago

    Change the target to any other group and the outrage would be 100-10000 fold bigger.

    Try it out, instead of Women rating men, try subbing in various minority groups or races.

    Bonus points for the most offensive combinations…

    e.g. Russians rating Ukrainians in your area…it can get pretty bad…I can think of many worse combos.

    • Phoenixz@lemmy.ca
      link
      fedilink
      English
      arrow-up
      18
      arrow-down
      7
      ·
      1 day ago

      I’m sorry but I’ll just say it out right: new feminists are the absolute worst

      Don’t get me wrong, I’m all for equality where possible. Where isn’t equality possible? Well I’d like to conceive a child, but the plumbing isn’t exactly useful for that. That sort of thing. Beyond that, were all the same, and IDGAF about your skin color, sexual preferences or whatever. I live by live and Let live, don’t be an asshole, it’s not that hard to be respectful

      New feminists though are the ones coming up with ideas like this website. On the surface, anyone could say that it’s not a bad thing to have a place for women to talk about how to protect themselves. In reality though, it’s a place where men, innocent or not, get doxxed and made to be rapists.

      There are some subs here on Lemmy as well that were very sad to see this shitshow of a website go, lamenting the fact that now they need a different place to dex people. Try not to tell them that doxxing is bad, it gets you banned.

    • AmbitiousProcess (they/them)@piefed.social
      link
      fedilink
      English
      arrow-up
      51
      arrow-down
      13
      ·
      2 days ago

      I think the key reason this was seen as not being terribly offensive was the fact that women are disproportionately more likely than men to be on the receiving end of tons of different negative consequences when dating, thus to a degree justifying them having more of a safe space where their comfort and safety is prioritized.

      1

      However I think a lot of people are also recognizing now that such an app has lots of downsides that come as a result of that kind of structure, like false allegations being given too much legitimacy, high amounts of sensitive data storage, negative interactions being blown out of proportion, etc. I also think that this is yet another signature case of “private market solution to systemic problem” that only kind of addresses the symptoms, but not the actual causes of these issues that are rooted more in our societal standards and expectations of the genders, upbringing, depictions in media, etc.

      • DancingBear@midwest.social
        link
        fedilink
        English
        arrow-up
        33
        arrow-down
        13
        ·
        edit-2
        2 days ago

        I’m always reminded of the fact that women on dating sites rate 80% of the men as below average….

        And the dating advisors who have written numerous articles about how women don’t really know or aren’t really honest with themselves about what they are looking for in a partner….

      • absGeekNZ@lemmy.nz
        link
        fedilink
        English
        arrow-up
        13
        arrow-down
        7
        ·
        2 days ago

        I was making the point, that despite the fact that this is mildly ok. The test for anything that gives one group power over another, is to switch the groups.

        If it’s still reasonable, than it is probably OK to keep it. If however it seems wrong after the switch, the bar to keep the power imbalance should be very high.

        • floofloof@lemmy.ca
          link
          fedilink
          English
          arrow-up
          14
          arrow-down
          18
          ·
          edit-2
          2 days ago

          That’s a very superficial test that deliberately omits the social and historical context that makes sense of these categories. You can’t just insert one party for another in statements about a relationship where one side has more power and privilege than the other, and look at your feelings about the result to evaluate the statements. White people have historically mistreated everyone else and robbed them of freedom and power. Men have historically abused women. To say “let’s swap the words and see how we feel then” is not a reasonable way of evaluating statements about the relationships between these groups.

          What this article says about the importance of entrenched power structures in racism also holds true about the relations between men and women:

          https://www.aclrc.com/issues/anti-racism/cared/the-basics-level-1/myth-of-reverse-racism/

          • absGeekNZ@lemmy.nz
            link
            fedilink
            English
            arrow-up
            15
            arrow-down
            7
            ·
            2 days ago

            You can, and do.

            It helps set the bar, it is a tool for determining how to assess what level of imbalance is reasonable.

            It’s not the only tool, nor an I arguing for it to be.

      • rottingleaf@lemmy.world
        link
        fedilink
        English
        arrow-up
        11
        arrow-down
        17
        ·
        2 days ago

        Stats depend on perception. Where a woman reports abuse, a man often spends an evening drinking or something similar. Not reporting abuse.

        Expectations of men are too somewhat cruel. You should be grenadier-tall (or gorilla-wide, point being, you should look fit), with facial features like those of Kianu Reeves, with voice like that of Orlando Bloom, confident like some CEO, honorable like a samurai from some movie, yet able to override that honor at her whim and do any atrocity to make the world better for her. Like some picture of 1930s’ propaganda.

        If you don’t deliver, then she silently pities herself and silently looks down at you for that. But God forbid you seem like that picture in some regard and then inevitably turn out to be more human, that deceit she won’t forgive.

        It was a problem a century ago that women were mostly right-wing and chauvinist and traditionalist. Most of that has been undone, but not how women in average see gender relations.

        OK, so about the app - I won’t be surprised if it was an intentional honeypot, honestly, to expose those who will use it. And it’s a bad idea, there’s no way to verify anonymous accusations, which means it’s a tool for defamation of any man, and a way to discredit things of the kind written there at the same time.

        • Balerion@piefed.blahaj.zone
          link
          fedilink
          English
          arrow-up
          15
          arrow-down
          7
          ·
          2 days ago

          These alleged high standards women hold are largely imaginary. It’s only kind of like that on dating apps, and that’s because they’re 80% male, so women HAVE to be picky.

          • rottingleaf@lemmy.world
            link
            fedilink
            English
            arrow-up
            7
            arrow-down
            3
            ·
            2 days ago

            I agree. High standards and common ideas of “right” are generally present among people insecure and easily gaslighted.

            Such as those that would use this app. Point?

    • Vanth@reddthat.com
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      16
      ·
      2 days ago

      Might want to read up on the origins of Facebook before turning this into a gender wars thing.

      • absGeekNZ@lemmy.nz
        link
        fedilink
        English
        arrow-up
        22
        arrow-down
        1
        ·
        2 days ago

        Nothing about gender wars here.

        Just because Facebook is shit, doesn’t make this any better.

    • surewhynotlem@lemmy.world
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      12
      ·
      2 days ago

      Russians rating Ukrainians

      Interesting analogy. You realize you have it backwards, right? Women are the Ukrainians on this scenario.

    • betterdeadthanreddit@lemmy.world
      link
      fedilink
      English
      arrow-up
      125
      arrow-down
      3
      ·
      2 days ago

      You sign up and then a while later, your personal information gets leaked to the public. Not sure what its other purpose is.

      • Captain Aggravated@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        1
        ·
        1 day ago

        You could easily convince me that it was a brilliantly executed honeypot. It’s just too damn poetic.

        “It’s a women’s safety app” No it wasn’t. This app was about women’s safety as much as the recent payment processor porn game censorship bullshit was about child safety. This was about slandering men for fun because women love gossip. The app’s name was “Tea.”

        Not a single woman who signed up for this app stopped to think, “Here’s a brand new app, just came out, has no track record, no reputation. I don’t know who runs this. I don’t know how they secure their database. I know what they’re asking, they want a picture of my government-issued ID. We’ve spent the last two decades reading news headlines of the pattern “tech company was hacked, 2.2 million users compromised including emails, home addresses and SSNs” on a weekly basis. There hasn’t been a week gone by since Dubya was president that hasn’t happened.”

        The women who uploaded pictures of their IDs to some app really had their own safety in mind. Turns out you can short circuit that whole process with hilarious ease if you say things like “women only” and “slander your exes.”

        I don’t think I could have constructed a better example as to why all the recent “prove your identity” shit is comprehensively retarded.

      • ORbituary@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        32
        arrow-down
        2
        ·
        2 days ago

        That’s corporate social media/apps in general. Does this thing basically let people list crappy things that happened to them by specific humans?

          • Nima@leminal.space
            link
            fedilink
            English
            arrow-up
            24
            arrow-down
            7
            ·
            2 days ago

            it seems its an app that helps women flag potential dating candidates as being dangerous or red flags.

            there is the potential for doxxing that comes with that, but I can absolutely understand its use and need when not abused in that manner.

            i wonder if there’s the potential for a different app with more encryption and a way to prevent doxxing and abuse.

            • Echo Dot@feddit.uk
              link
              fedilink
              English
              arrow-up
              5
              ·
              1 day ago

              i wonder if there’s the potential for a different app with more encryption and a way to prevent doxxing and abuse.

              You would have to have everyone take a polygraph or something (not that they actually work but a lot of people don’t know that so maybe it would prevent them from lying in the first place). There’s no way to prevent people from lying for whatever reason they have and there’s no way to detect whether or not the thing they have posted is truthful.

              The truth is as much benefit as the app may have when used properly the risk of abuse is far too high for it to ever be workable.

              If you have a smoke alarm in your house that occasionally explodes and sets your house on fire, but the rest of the time actually works as a fire alarm, then it’s not a useful product, as even if the chance of it exploding was less than 1% it would still eventually blow up your house, whereas if you never installed the alarm there was every possibility your house will never catch fire. So game theory suggests that you are better off without it.

              Same with this app, sure it might prevent you experiencing a bad date but there’s every possibility that it will also cause you not to date somebody who’s actually a nice person. You are far better off just making that judgement yourself as you always did. And to be clear given human nature, the likelihood of the “fire alarm exploding” is probably a lot higher than 1%

            • 0x0@lemmy.zip
              link
              fedilink
              English
              arrow-up
              10
              arrow-down
              2
              ·
              2 days ago

              i wonder if there’s the potential for a different app with more encryption and a way to prevent doxxing and abuse.

              Encryption, sure.
              Preventing doxxing? I highly doubt it. But hey, it’s women doing it so it’s ok and anyone who criticizes that is an incel.

            • Ilovethebomb@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              31
              ·
              2 days ago

              There’s definitely a use case, but there’s an inherent power imbalance to these products that makes sure they will always be misused. The submitters are anonymous, and it’s up to the person being reported on to prove the accusations are false.

              Or, they’re supposed to be anonymous.

              • 0x0@lemmy.zip
                link
                fedilink
                English
                arrow-up
                11
                arrow-down
                1
                ·
                2 days ago

                it’s up to the person being reported on to prove the accusations are false.

                The person doesn’t even know they’re mentioned in the app.

                • Ilovethebomb@sh.itjust.works
                  link
                  fedilink
                  English
                  arrow-up
                  6
                  arrow-down
                  1
                  ·
                  2 days ago

                  Which is even worse, because unless someone tells them, they’re blissfully unaware.

                  With most forms of Libel, at least the victim will see it in a timely manner.

            • grue@lemmy.world
              link
              fedilink
              English
              arrow-up
              26
              arrow-down
              6
              ·
              2 days ago

              How do you warn people about a potential dating candidate being dangerous without doxxing the potential dating candidate? “Hey, watch out for [anonymous person]” doesn’t sound very useful.

              • Nima@leminal.space
                link
                fedilink
                English
                arrow-up
                6
                arrow-down
                2
                ·
                2 days ago

                …you know? that’s a fair point. I’m not sure how it would work. but it would be nice to know some stuff if its important.

                • Captain Aggravated@sh.itjust.works
                  link
                  fedilink
                  English
                  arrow-up
                  2
                  ·
                  24 hours ago

                  I have the solution. Nobody’s gonna like it, everybody here is gonna scream at me about it, but I have the solution.

                  Stop dating strangers on the internet.

                  The entire personals site/dating app experiment we’ve been running for the last quarter century is obviously a categorical failure. Humans just don’t work like this.

                  Things have gotten so much worse since I was in high school. When I was in high school, the community of girls available to me to ask out were pretty much all girls I’d known since we were 5. A lot of them, I didn’t have to wonder about their character, their intentions, their capacity to do harm, I was there when all that was written. I remember how much of a bully Chelsea was in middle school, I remember how nice Ashley was to everyone, I remember how Justine seemed weirdly infatuated with me in the 4th grade. They’d all remember stuff about me and the other boys. We graduated high school, I never saw 80% of them ever again, and within 5 years that figure climbed to at least 95%. Four years of college with mostly abject strangers who you’re weirdly fast to form and break deceptively deep bonds with, all of whom I’ve also lost track of, and then the adult world in which everyone including you is an NPC.

                  I happen to be the exact age where, I got out of college in 2007, I disappeared into work, like I went to the airport and I went home for two years. In 2009, I looked back up and everything had CHANGED. Instant messaging was on smart phones now, and you WERE NOT TO approach women in person, only through phone-based dating apps and you had BETTER FUCKING NOT already be acquainted.

                  Don’t talk to women at the grocery store. Don’t talk to women at the gym. Don’t talk to women at the library. Don’t talk to women at your work. Don’t talk to women at their work. Don’t talk to women at the coffee shop. Don’t talk to women at the bar. Don’t talk to women at the club. Don’t talk to women. No woman, only app.

                  How do you meet more women? Oh that’s categorically the wrong question because having the goal of meeting women in the first place is creepy. Stop wanting to meet women and instead organically decide you want to do things that women happen to like, and then accidentally meet women in the course of doing those things. You know, at those meetups that are always happening on a recurring basis, that aren’t advertised to happen at a place and time and then no one shows up and the listing is never re-posted. Probably just install more apps.

                  It’s been women driving this, men vastly prefer asking women out from within their social circle. The pressure to make the first move is still on men, and he’d rather ask out women he already thinks he might like. Women on the other hand vastly prefer to be cold approached by a charming stranger.

                  I think it’s gone far enough when we’ve got women saying dumb shit like “Systematically doxxing and libeling men is a risk we’re just going to have to take.”

        • don@lemmy.ca
          link
          fedilink
          English
          arrow-up
          3
          ·
          2 days ago

          Having no experience with the app whatsoever, I can only guess, and I’d guess that it does as you suggest, though there may be varying levels of specificity involved.

        • Nima@leminal.space
          link
          fedilink
          English
          arrow-up
          7
          arrow-down
          10
          ·
          2 days ago

          it also lists criminal history that might not be disclosed on a dating profile. and other information that might be a red flag.

            • Nima@leminal.space
              link
              fedilink
              English
              arrow-up
              11
              arrow-down
              5
              ·
              2 days ago

              indeed. there’s the potential for abuse and doxxing. but I think the app could be done in a safe way. and with much less leakery.

              • AwesomeLowlander@sh.itjust.works
                link
                fedilink
                English
                arrow-up
                28
                arrow-down
                1
                ·
                2 days ago

                How would you implement the app in its current concept, without the possibility for abuse? It seems inherent to the very idea of it.

                • FauxLiving@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  24
                  ·
                  2 days ago

                  Yeah, the entire point of the app is that you go there and talk about the bad things a person has done.

                  That seems pretty hard to identify them without posting their image without their consent and discussing private details of their life so others can identify them. It is creepy as hell, at a minimum.

                • Lfrith@lemmy.ca
                  link
                  fedilink
                  English
                  arrow-up
                  6
                  arrow-down
                  3
                  ·
                  2 days ago

                  Meowmeowbeans social pressure where people will refuse to meet or associate with people who have not been vetted and verified by meowmeowbeans members. So people who want to meet meowmeowbeans users would have to join to get screened otherwise they can get lost.

                  Solves the issue of people who never signed up to the social media site having strangers uploading personal photos, videos, names, and stories to a profile page they never consented to. Which is reminiscent of doxing in its current state.

                  So meowmeowbeans certification among consenting members would be the better route to go and socially making those not in meowmeowbeans outcasts. At least there is choice now for people to not be part of the community driven database of people.

                • Nima@leminal.space
                  link
                  fedilink
                  English
                  arrow-up
                  5
                  arrow-down
                  3
                  ·
                  2 days ago

                  off the top of my head, I don’t know. i just feel the concept is intriguing and that the idea is a nice one.

                  just the abuse potential is far too high I suppose. but it would be nice to know if someone had stalked someone else, may have spoken or behaved in a violent manner, etc.

                  but I suppose at that point you might as well fingerprint and process any potential suitors lol. 😅

                  the sentiment is great, however.

    • QueenHawlSera@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      13
      ·
      1 day ago

      It can be both.

      So many problems are caused because society assumes cisgender women are always victims and anything that looks like a man if you look at it long enough is an abuser.

      • SoftestSapphic@lemmy.world
        link
        fedilink
        English
        arrow-up
        9
        arrow-down
        1
        ·
        1 day ago

        It’s just original Facebook but for women to rate and bully men instead of Mark and his scum bros using it to rate and bully women.

    • Captain Aggravated@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      4
      ·
      24 hours ago

      Well, we know what to bait a honeypot with. “Gossip about/slander men right here! To prove you’re a woman, insert your photo ID, bank details, credit card information, finger prints and retinal scans.”

  • wizbiz@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    59
    ·
    1 day ago

    Lots of men in this thread real upset about this app pointing out how the majority men are shit

    • Echo Dot@feddit.uk
      link
      fedilink
      English
      arrow-up
      25
      ·
      1 day ago

      Citation of course needed with that one.

      The only people who will be listed on the app are people who are either deserving they’ve been on there or people who don’t deserve to be on there but some woman in their lives has decided to inact some vengeance justified or otherwise.

      • Dearth@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        9
        ·
        1 day ago

        Well im a man. And most men i interact with are casually misandrist, ableist and homophobic. I can’t imagine they behave any better when they’re trying to fuck you

        • GaMEChld@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          9 minutes ago

          So confirmation bias. Gotcha. That’s generally not a great way to make sweeping generalizations about 50% of the population.

          You ever hear that adage about smelling shit wherever you go, maybe check your shoes?

        • lmagitem@lemmy.zip
          link
          fedilink
          English
          arrow-up
          6
          ·
          edit-2
          1 day ago

          I’m a man too and I haven’t interacted with someone like that since what, university? Maybe the problem is in who you choose to spend time with?

    • Zombie-Mantis@lemmy.world
      link
      fedilink
      English
      arrow-up
      18
      ·
      1 day ago

      It’s an antisocial surveillance system for antisocial people, and creates a(n even more) antagonistic relationship between men and women.

      Dating apps have been a disaster for dating, and this is perhaps the worst among them.